0000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff"], 0x7}}, 0x0) 05:11:07 executing program 2: 05:11:10 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff"], 0x7}}, 0x0) 05:11:10 executing program 4: 05:11:10 executing program 5: 05:11:10 executing program 2: 05:11:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="dd0e5cdbd613772ff4a5b28b333be6", 0xf}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x14, 0x1, 0x2}}], 0x14}}], 0x2, 0x0) 05:11:10 executing program 5: 05:11:10 executing program 4: 05:11:10 executing program 2: 05:11:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="dd0e5cdbd613772ff4a5b28b333be6", 0xf}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x14, 0x1, 0x2}}], 0x14}}], 0x2, 0x0) 05:11:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff"], 0x7}}, 0x0) 05:11:11 executing program 4: [ 717.286326][ C1] not chained 140000 origins [ 717.291424][ C1] CPU: 1 PID: 11674 Comm: kworker/u4:0 Not tainted 5.6.0-rc2-syzkaller #0 [ 717.300476][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.311756][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 717.317414][ C1] Call Trace: [ 717.320922][ C1] [ 717.323881][ C1] dump_stack+0x1c9/0x220 [ 717.328643][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 717.334646][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 717.340920][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 717.348223][ C1] ? __msan_chain_origin+0x50/0x90 [ 717.354416][ C1] ? inet_twsk_alloc+0xa8a/0xba0 [ 717.359951][ C1] ? tcp_time_wait+0xcd/0x10b0 [ 717.365268][ C1] ? tcp_fin+0x1f9/0x890 [ 717.373806][ C1] ? tcp_data_queue+0x24ce/0x9c40 [ 717.379258][ C1] ? tcp_rcv_state_process+0x67db/0x7140 [ 717.385653][ C1] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 717.390923][ C1] ? tcp_v4_rcv+0x4398/0x4d00 [ 717.396465][ C1] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 717.403099][ C1] ? ip_local_deliver+0x62a/0x7c0 [ 717.409098][ C1] ? ip_rcv+0x6cf/0x750 [ 717.414183][ C1] ? process_backlog+0xf0b/0x1410 [ 717.420073][ C1] ? net_rx_action+0x786/0x1aa0 [ 717.425287][ C1] ? __do_softirq+0x311/0x83d [ 717.430653][ C1] ? do_softirq_own_stack+0x49/0x80 [ 717.436554][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 717.442204][ C1] ? local_bh_enable+0x36/0x40 [ 717.447747][ C1] ? ip_finish_output2+0x2115/0x2610 [ 717.453850][ C1] ? __ip_finish_output+0xaa7/0xd80 [ 717.460510][ C1] ? ip_finish_output+0x166/0x410 [ 717.466078][ C1] ? ip_output+0x593/0x680 [ 717.471386][ C1] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 717.477500][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 717.482524][ C1] ? __tcp_transmit_skb+0x439c/0x6090 [ 717.488015][ C1] ? tcp_write_xmit+0x30e1/0xb470 [ 717.493736][ C1] ? __tcp_push_pending_frames+0x124/0x4e0 [ 717.500336][ C1] ? tcp_send_fin+0x131e/0x1570 [ 717.506364][ C1] ? tcp_shutdown+0x188/0x200 [ 717.511511][ C1] ? inet_shutdown+0x342/0x5e0 [ 717.516506][ C1] ? kernel_sock_shutdown+0x9d/0xc0 [ 717.521929][ C1] ? rds_tcp_accept_one+0xe17/0x1060 [ 717.527647][ C1] ? rds_tcp_accept_worker+0x61/0x160 [ 717.533706][ C1] ? process_one_work+0x1555/0x1f40 [ 717.539092][ C1] ? worker_thread+0xef6/0x2450 [ 717.544655][ C1] ? kthread+0x4b5/0x4f0 [ 717.548915][ C1] ? ret_from_fork+0x35/0x40 [ 717.554751][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.560232][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 717.566149][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 717.572320][ C1] ? kmem_cache_alloc+0x178/0xd70 [ 717.577464][ C1] ? inet_twsk_alloc+0x135/0xba0 05:11:13 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:13 executing program 5: 05:11:13 executing program 2: 05:11:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="dd0e5cdbd613772ff4a5b28b333be6", 0xf}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x14, 0x1, 0x2}}], 0x14}}], 0x2, 0x0) 05:11:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c48"], 0x7}}, 0x0) 05:11:13 executing program 4: [ 717.582528][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.588123][ C1] __msan_chain_origin+0x50/0x90 [ 717.593215][ C1] inet_twsk_alloc+0xab6/0xba0 [ 717.598130][ C1] tcp_time_wait+0xcd/0x10b0 [ 717.603691][ C1] ? tcp_send_ack+0x68/0x90 [ 717.608403][ C1] tcp_fin+0x1f9/0x890 [ 717.612520][ C1] tcp_data_queue+0x24ce/0x9c40 [ 717.617680][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 717.624005][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 717.631029][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 717.637687][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.643200][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.648741][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 717.653453][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 717.658121][ C1] ? tcp_filter+0xf0/0xf0 [ 717.662924][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 717.668538][ C1] ip_local_deliver+0x62a/0x7c0 [ 717.673681][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 717.678920][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 717.685115][ C1] ip_rcv+0x6cf/0x750 [ 717.689316][ C1] ? ip_rcv_core+0x1270/0x1270 [ 717.694364][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 717.700189][ C1] process_backlog+0xf0b/0x1410 [ 717.705360][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 717.711799][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 717.717301][ C1] net_rx_action+0x786/0x1aa0 [ 717.722112][ C1] ? net_tx_action+0xc30/0xc30 [ 717.727075][ C1] __do_softirq+0x311/0x83d [ 717.731768][ C1] do_softirq_own_stack+0x49/0x80 [ 717.736886][ C1] [ 717.740661][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 717.746027][ C1] local_bh_enable+0x36/0x40 [ 717.750686][ C1] ip_finish_output2+0x2115/0x2610 [ 717.755952][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 717.761804][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 717.768513][ C1] __ip_finish_output+0xaa7/0xd80 [ 717.773916][ C1] ip_finish_output+0x166/0x410 [ 717.779288][ C1] ip_output+0x593/0x680 [ 717.783552][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 717.789336][ C1] ? ip_finish_output+0x410/0x410 [ 717.795220][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 717.800354][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 717.805999][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.811717][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.817442][ C1] ip_queue_xmit+0xcc/0xf0 [ 717.822161][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 717.828094][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 717.833658][ C1] tcp_write_xmit+0x30e1/0xb470 [ 717.838695][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 717.844655][ C1] tcp_send_fin+0x131e/0x1570 [ 717.849514][ C1] tcp_shutdown+0x188/0x200 [ 717.854577][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 717.860171][ C1] inet_shutdown+0x342/0x5e0 [ 717.865070][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 717.871239][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 717.878685][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 717.884882][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 717.890785][ C1] rds_tcp_accept_worker+0x61/0x160 [ 717.897593][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 717.903155][ C1] process_one_work+0x1555/0x1f40 [ 717.909085][ C1] worker_thread+0xef6/0x2450 [ 717.914318][ C1] kthread+0x4b5/0x4f0 [ 717.918978][ C1] ? process_one_work+0x1f40/0x1f40 [ 717.925217][ C1] ? kthread_blkcg+0xf0/0xf0 [ 717.931027][ C1] ret_from_fork+0x35/0x40 [ 717.936595][ C1] Uninit was stored to memory at: [ 717.943372][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 717.949446][ C1] __msan_chain_origin+0x50/0x90 [ 717.954667][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 717.961311][ C1] tcp_time_wait+0xaca/0x10b0 [ 717.967507][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 717.974036][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 717.978657][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 717.984320][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 717.990142][ C1] ip_local_deliver+0x62a/0x7c0 [ 717.996043][ C1] ip_rcv+0x6cf/0x750 [ 718.000093][ C1] process_backlog+0xf0b/0x1410 [ 718.005775][ C1] net_rx_action+0x786/0x1aa0 [ 718.010818][ C1] __do_softirq+0x311/0x83d [ 718.015629][ C1] [ 718.018000][ C1] Uninit was stored to memory at: [ 718.023389][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.029616][ C1] __msan_chain_origin+0x50/0x90 [ 718.035017][ C1] tcp_time_wait+0xb7e/0x10b0 [ 718.039794][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 718.045567][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.050336][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.055204][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.061106][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.066605][ C1] ip_rcv+0x6cf/0x750 [ 718.070595][ C1] process_backlog+0xf0b/0x1410 [ 718.076133][ C1] net_rx_action+0x786/0x1aa0 [ 718.081296][ C1] __do_softirq+0x311/0x83d [ 718.086144][ C1] [ 718.089106][ C1] Uninit was stored to memory at: [ 718.094525][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.100538][ C1] __msan_chain_origin+0x50/0x90 [ 718.105675][ C1] inet_twsk_alloc+0xab6/0xba0 [ 718.111297][ C1] tcp_time_wait+0xcd/0x10b0 [ 718.116194][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 718.121920][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.127249][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.131765][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.137407][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.142748][ C1] ip_rcv+0x6cf/0x750 [ 718.147312][ C1] process_backlog+0xf0b/0x1410 [ 718.152347][ C1] net_rx_action+0x786/0x1aa0 [ 718.157029][ C1] __do_softirq+0x311/0x83d [ 718.161918][ C1] [ 718.164252][ C1] Uninit was stored to memory at: [ 718.169668][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.177345][ C1] __msan_chain_origin+0x50/0x90 [ 718.183648][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 718.191350][ C1] tcp_timewait_state_process+0x1628/0x1900 [ 718.198133][ C1] tcp_v4_rcv+0x1bea/0x4d00 [ 718.202735][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.208375][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.214172][ C1] ip_rcv+0x6cf/0x750 [ 718.218691][ C1] process_backlog+0xf0b/0x1410 [ 718.225091][ C1] net_rx_action+0x786/0x1aa0 [ 718.230223][ C1] __do_softirq+0x311/0x83d [ 718.235577][ C1] [ 718.238184][ C1] Uninit was stored to memory at: [ 718.244285][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.250796][ C1] __msan_chain_origin+0x50/0x90 [ 718.256819][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 718.262883][ C1] tcp_time_wait+0xaca/0x10b0 [ 718.268159][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 718.274571][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.279351][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.284242][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.291030][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.296598][ C1] ip_rcv+0x6cf/0x750 [ 718.301200][ C1] process_backlog+0xf0b/0x1410 [ 718.306849][ C1] net_rx_action+0x786/0x1aa0 [ 718.311681][ C1] __do_softirq+0x311/0x83d [ 718.317195][ C1] [ 718.320334][ C1] Uninit was stored to memory at: [ 718.326667][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.333160][ C1] __msan_chain_origin+0x50/0x90 [ 718.338719][ C1] tcp_time_wait+0xb7e/0x10b0 [ 718.343820][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 718.349830][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.355322][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.361077][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.367623][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.373313][ C1] ip_rcv+0x6cf/0x750 [ 718.378306][ C1] process_backlog+0xf0b/0x1410 [ 718.384155][ C1] net_rx_action+0x786/0x1aa0 [ 718.390120][ C1] __do_softirq+0x311/0x83d [ 718.395759][ C1] [ 718.398201][ C1] Uninit was stored to memory at: [ 718.405332][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 718.411848][ C1] __msan_chain_origin+0x50/0x90 [ 718.417951][ C1] inet_twsk_alloc+0xab6/0xba0 [ 718.423808][ C1] tcp_time_wait+0xcd/0x10b0 [ 718.429199][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 718.434984][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.440407][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.445129][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.451527][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.457000][ C1] ip_rcv+0x6cf/0x750 [ 718.461353][ C1] process_backlog+0xf0b/0x1410 [ 718.467246][ C1] net_rx_action+0x786/0x1aa0 [ 718.472306][ C1] __do_softirq+0x311/0x83d [ 718.477863][ C1] [ 718.480966][ C1] Uninit was created at: [ 718.487117][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 718.493979][ C1] kmsan_alloc_page+0x12a/0x310 [ 718.500071][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 718.506403][ C1] alloc_pages_current+0x67d/0x990 [ 718.512769][ C1] alloc_slab_page+0x111/0x12f0 [ 718.518025][ C1] new_slab+0x2bc/0x1130 [ 718.522522][ C1] ___slab_alloc+0x1533/0x1f30 [ 718.528706][ C1] kmem_cache_alloc+0xb23/0xd70 [ 718.534312][ C1] inet_twsk_alloc+0x135/0xba0 [ 718.540243][ C1] tcp_time_wait+0xcd/0x10b0 [ 718.545651][ C1] tcp_fin+0x1f9/0x890 [ 718.550454][ C1] tcp_data_queue+0x24ce/0x9c40 [ 718.556099][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 718.562568][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 718.567648][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 718.572688][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 718.578803][ C1] ip_local_deliver+0x62a/0x7c0 [ 718.585763][ C1] ip_rcv+0x6cf/0x750 [ 718.590672][ C1] process_backlog+0xf0b/0x1410 [ 718.596189][ C1] net_rx_action+0x786/0x1aa0 [ 718.601471][ C1] __do_softirq+0x311/0x83d 05:11:15 executing program 5: 05:11:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/161, 0xa1}], 0x3, 0x6c00000004000000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) getsockopt(r1, 0x8690, 0x2, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket(0x1e, 0x6, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sendto$inet(r0, &(0x7f0000000340)="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", 0x196, 0x3, 0x0, 0x0) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x341) 05:11:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x30e210fbd7440b8d}, 0x10}}, 0x0) 05:11:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3ff, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 05:11:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c48"], 0x7}}, 0x0) 05:11:15 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{}], 0x18) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 05:11:17 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:17 executing program 1: 05:11:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c48"], 0x7}}, 0x0) 05:11:17 executing program 2: 05:11:17 executing program 4: 05:11:17 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 05:11:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000042) fcntl$dupfd(r0, 0x0, r1) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) 05:11:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xf8, 0x1c8, 0xf8, 0x1c8, 0xf8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x4, 0x0, {[{{@ipv6={@rand_addr="4cc7872711511674c05009ff34881719", @ipv4={[], [], @empty}, [], [], 'sit0\x00', 'bridge_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8001}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x6}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'bridge_slave_1\x00', 'batadv0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 05:11:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignonneled\x00\x00\x00\x00\x00\x00', 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0xc0000004, 0x0}, 0x0, 0x8, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') 05:11:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:18 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:18 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0x65a0}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d0020000800100009800000080010000000000000000000038020000380200003802000038020000380200000400000000000000000000007f000001ac14140000000000000000007f00000000000000000000000000000064756dea20f9524db2d96900000057c910a19f2bc02c00000000000000000000200000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000f9c9991d000000800000000000000000000000500073657400000000000000000000000000000000000000000000000000000300000505005c601c81000000000000000000000000000000100000000000000000000000000000000000000000000000280052454a454354000000000000000100000000000000000000000000000000000000000000000000000000e00000020000000000000000766574b5315f766c616e00000000000500000064676530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000d40200000000000000000001ac1414aa080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:11:21 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500190000000000"], 0xf8}}, 0x0) 05:11:21 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1}], 0x18) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 05:11:21 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000012c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) 05:11:21 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) 05:11:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:21 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000780)=0x55, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 05:11:21 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:24 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:24 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000}]}, 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:11:24 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 05:11:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:25 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:25 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:25 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg1\x00', 'batadv0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@multicast1, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'geneve0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="10ec81df588b", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @loopback, @random="c9f41a460ac7", @local}}}}, 0x0) 05:11:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:25 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 05:11:26 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 05:11:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:26 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) 05:11:26 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:26 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = socket(0x10, 0x3, 0x0) sendfile(r5, r1, 0x0, 0x8000000d) 05:11:26 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB, @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 05:11:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 731.268036][ C0] not chained 150000 origins [ 731.272787][ C0] CPU: 0 PID: 1556 Comm: kworker/u4:37 Not tainted 5.6.0-rc2-syzkaller #0 [ 731.281407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.291494][ C0] Workqueue: krdsd rds_connect_worker [ 731.296881][ C0] Call Trace: [ 731.300273][ C0] [ 731.303226][ C0] dump_stack+0x1c9/0x220 [ 731.307585][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 731.313322][ C0] ? should_fail+0x72/0x9e0 05:11:27 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) [ 731.317837][ C0] ? ret_from_fork+0x35/0x40 [ 731.322448][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 731.328541][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 731.333508][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.338828][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.344060][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 731.349988][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 731.355129][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 731.360954][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 731.367131][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 731.372473][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.377775][ C0] __msan_chain_origin+0x50/0x90 [ 731.382724][ C0] tcp_conn_request+0x13ce/0x4d10 [ 731.387743][ C0] ? rb_first+0x31/0x100 [ 731.392011][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.397318][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.402510][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.407731][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 731.413544][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.418745][ C0] tcp_v4_conn_request+0x19b/0x240 [ 731.423878][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 731.428913][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 731.434197][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 731.439564][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.444757][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 731.450566][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 731.456638][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.461842][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 731.466437][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 731.470974][ C0] ? tcp_filter+0xf0/0xf0 [ 731.475319][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 731.480986][ C0] ip_local_deliver+0x62a/0x7c0 [ 731.485848][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 731.490964][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 731.496633][ C0] ip_rcv+0x6cf/0x750 [ 731.500709][ C0] ? ip_rcv_core+0x1270/0x1270 [ 731.505573][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 731.511219][ C0] process_backlog+0xf0b/0x1410 [ 731.516083][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 731.522509][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 731.527792][ C0] net_rx_action+0x786/0x1aa0 [ 731.532597][ C0] ? net_tx_action+0xc30/0xc30 [ 731.537366][ C0] __do_softirq+0x311/0x83d [ 731.541885][ C0] do_softirq_own_stack+0x49/0x80 [ 731.546897][ C0] [ 731.549844][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 731.555042][ C0] local_bh_enable+0x36/0x40 [ 731.559639][ C0] ip_finish_output2+0x2115/0x2610 [ 731.564756][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 731.570475][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 731.576479][ C0] __ip_finish_output+0xaa7/0xd80 [ 731.581541][ C0] ip_finish_output+0x166/0x410 [ 731.586416][ C0] ip_output+0x593/0x680 [ 731.590671][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 731.595951][ C0] ? ip_finish_output+0x410/0x410 [ 731.600969][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 731.605905][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 731.611449][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.616652][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.621851][ C0] ip_queue_xmit+0xcc/0xf0 [ 731.626300][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 731.631142][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 731.636513][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 731.642371][ C0] tcp_connect+0x4337/0x6920 [ 731.646971][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 731.652255][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.657829][ C0] tcp_v4_connect+0x21fd/0x2370 [ 731.662700][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 731.667650][ C0] __inet_stream_connect+0x2fb/0x1340 [ 731.673026][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 731.678489][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.683736][ C0] inet_stream_connect+0x101/0x180 [ 731.689236][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 731.694878][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 731.700695][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 731.706026][ C0] ? rds_tcp_state_change+0x390/0x390 [ 731.711428][ C0] rds_connect_worker+0x2a6/0x470 [ 731.716462][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 731.722538][ C0] ? rds_addr_cmp+0x200/0x200 [ 731.727213][ C0] process_one_work+0x1555/0x1f40 [ 731.732252][ C0] worker_thread+0xef6/0x2450 [ 731.736949][ C0] kthread+0x4b5/0x4f0 [ 731.741004][ C0] ? process_one_work+0x1f40/0x1f40 [ 731.746291][ C0] ? kthread_blkcg+0xf0/0xf0 [ 731.750902][ C0] ret_from_fork+0x35/0x40 [ 731.755320][ C0] Uninit was stored to memory at: [ 731.760343][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 731.766238][ C0] __msan_chain_origin+0x50/0x90 [ 731.771167][ C0] tcp_conn_request+0x1781/0x4d10 [ 731.776190][ C0] tcp_v4_conn_request+0x19b/0x240 [ 731.781292][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 731.786417][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 731.791888][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 731.796485][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 731.801678][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 731.807280][ C0] ip_local_deliver+0x62a/0x7c0 [ 731.812138][ C0] ip_rcv+0x6cf/0x750 [ 731.816129][ C0] process_backlog+0xf0b/0x1410 [ 731.821029][ C0] net_rx_action+0x786/0x1aa0 [ 731.825702][ C0] __do_softirq+0x311/0x83d [ 731.830195][ C0] [ 731.832512][ C0] Uninit was stored to memory at: [ 731.837530][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 731.843379][ C0] __msan_chain_origin+0x50/0x90 [ 731.848418][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 731.854422][ C0] tcp_conn_request+0x33d7/0x4d10 [ 731.859628][ C0] tcp_v4_conn_request+0x19b/0x240 [ 731.864836][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 731.869871][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 731.875935][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 731.880525][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 731.885018][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 731.890553][ C0] ip_local_deliver+0x62a/0x7c0 [ 731.895411][ C0] ip_rcv+0x6cf/0x750 [ 731.899397][ C0] process_backlog+0xf0b/0x1410 [ 731.904237][ C0] net_rx_action+0x786/0x1aa0 [ 731.908903][ C0] __do_softirq+0x311/0x83d [ 731.913397][ C0] [ 731.915707][ C0] Uninit was stored to memory at: [ 731.920808][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 731.927217][ C0] __msan_chain_origin+0x50/0x90 [ 731.932138][ C0] tcp_conn_request+0x1781/0x4d10 [ 731.937165][ C0] tcp_v4_conn_request+0x19b/0x240 [ 731.942277][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 731.947290][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 731.952650][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 731.957233][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 731.961909][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 731.967455][ C0] ip_local_deliver+0x62a/0x7c0 [ 731.972302][ C0] ip_rcv+0x6cf/0x750 [ 731.976277][ C0] process_backlog+0xf0b/0x1410 [ 731.982279][ C0] net_rx_action+0x786/0x1aa0 [ 731.987784][ C0] __do_softirq+0x311/0x83d [ 731.992457][ C0] [ 731.994856][ C0] Uninit was stored to memory at: [ 732.001101][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 732.007436][ C0] __msan_chain_origin+0x50/0x90 [ 732.013097][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 732.018735][ C0] tcp_conn_request+0x33d7/0x4d10 [ 732.023844][ C0] tcp_v4_conn_request+0x19b/0x240 [ 732.028969][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 732.034275][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 732.039837][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 732.044812][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 732.049454][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 732.054960][ C0] ip_local_deliver+0x62a/0x7c0 [ 732.059830][ C0] ip_rcv+0x6cf/0x750 [ 732.063926][ C0] process_backlog+0xf0b/0x1410 [ 732.068878][ C0] net_rx_action+0x786/0x1aa0 [ 732.073667][ C0] __do_softirq+0x311/0x83d [ 732.078504][ C0] [ 732.081232][ C0] Uninit was stored to memory at: [ 732.086533][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 732.092741][ C0] __msan_chain_origin+0x50/0x90 [ 732.097988][ C0] tcp_conn_request+0x1781/0x4d10 [ 732.103161][ C0] tcp_v4_conn_request+0x19b/0x240 [ 732.109226][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 732.114688][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 732.120380][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 732.125717][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 732.130241][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 732.136510][ C0] ip_local_deliver+0x62a/0x7c0 [ 732.141659][ C0] ip_rcv+0x6cf/0x750 [ 732.145960][ C0] process_backlog+0xf0b/0x1410 [ 732.150827][ C0] net_rx_action+0x786/0x1aa0 [ 732.155598][ C0] __do_softirq+0x311/0x83d [ 732.160110][ C0] [ 732.162691][ C0] Uninit was stored to memory at: [ 732.167942][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 732.173745][ C0] __msan_chain_origin+0x50/0x90 [ 732.178890][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 732.184529][ C0] tcp_conn_request+0x33d7/0x4d10 [ 732.189648][ C0] tcp_v4_conn_request+0x19b/0x240 [ 732.194766][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 732.199910][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 732.205300][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 732.209887][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 732.214660][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 732.220385][ C0] ip_local_deliver+0x62a/0x7c0 [ 732.225315][ C0] ip_rcv+0x6cf/0x750 [ 732.229307][ C0] process_backlog+0xf0b/0x1410 [ 732.234166][ C0] net_rx_action+0x786/0x1aa0 [ 732.238838][ C0] __do_softirq+0x311/0x83d [ 732.243470][ C0] [ 732.245985][ C0] Uninit was stored to memory at: [ 732.251354][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 732.257436][ C0] __msan_chain_origin+0x50/0x90 [ 732.262495][ C0] tcp_conn_request+0x1781/0x4d10 [ 732.268598][ C0] tcp_v4_conn_request+0x19b/0x240 [ 732.273719][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 732.278843][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 732.284223][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 732.288818][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 732.293311][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 732.299157][ C0] ip_local_deliver+0x62a/0x7c0 [ 732.304097][ C0] ip_rcv+0x6cf/0x750 [ 732.308433][ C0] process_backlog+0xf0b/0x1410 [ 732.313276][ C0] net_rx_action+0x786/0x1aa0 [ 732.318332][ C0] __do_softirq+0x311/0x83d [ 732.322833][ C0] [ 732.325349][ C0] Uninit was created at: [ 732.329970][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 732.336028][ C0] kmsan_alloc_page+0x12a/0x310 [ 732.340881][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 732.351431][ C0] alloc_pages_current+0x67d/0x990 [ 732.356544][ C0] alloc_slab_page+0x111/0x12f0 [ 732.361418][ C0] new_slab+0x2bc/0x1130 [ 732.365665][ C0] ___slab_alloc+0x1533/0x1f30 [ 732.370443][ C0] kmem_cache_alloc+0xb23/0xd70 [ 732.375471][ C0] inet_reqsk_alloc+0xac/0x830 [ 732.380225][ C0] tcp_conn_request+0x753/0x4d10 [ 732.385173][ C0] tcp_v4_conn_request+0x19b/0x240 [ 732.390283][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 732.395669][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 732.400264][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 732.404778][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 732.410373][ C0] ip_local_deliver+0x62a/0x7c0 [ 732.415213][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 732.420066][ C0] ip_list_rcv+0x8eb/0x950 [ 732.424581][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 732.430743][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 732.436990][ C0] napi_complete_done+0x2ef/0xb60 [ 732.442015][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 732.447423][ C0] virtnet_poll+0x1468/0x19f0 [ 732.452109][ C0] net_rx_action+0x786/0x1aa0 [ 732.456781][ C0] __do_softirq+0x311/0x83d 05:11:28 executing program 2: mmap(&(0x7f00003fe000/0x4000)=nil, 0x4000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x0) 05:11:28 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = memfd_create(&(0x7f0000000280)='\x88])+\x00', 0x0) ftruncate(r1, 0xa00002) sendfile(r1, r1, 0x0, 0x1000000000000ffc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 05:11:29 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:29 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 05:11:29 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) 05:11:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 05:11:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 05:11:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:30 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:33 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 05:11:33 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) tkill(r0, 0x16) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:33 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:33 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) 05:11:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:36 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xc5) 05:11:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) 05:11:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:36 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) tkill(r0, 0x16) 05:11:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) 05:11:37 executing program 2: open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000088, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000, @loopback, 0xfffffffd}, 0x1c) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x4, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0087b8d2dd030000005700000000000000"], 0x8) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffd) 05:11:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:39 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000000b06010000d4000000000000000000050c00078008000940001000000900020073797a30000000000500010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 05:11:39 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) tkill(r0, 0x16) 05:11:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:40 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 744.609144][ C1] not chained 160000 origins [ 744.615149][ C1] CPU: 1 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 744.623760][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.634214][ C1] Workqueue: krdsd rds_connect_worker [ 744.639806][ C1] Call Trace: [ 744.644156][ C1] [ 744.647028][ C1] dump_stack+0x1c9/0x220 [ 744.651386][ C1] kmsan_internal_chain_origin+0x6f/0x130 05:11:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 744.657300][ C1] ? should_fail+0x72/0x9e0 [ 744.663224][ C1] ? ret_from_fork+0x35/0x40 [ 744.668505][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 744.674595][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 744.679594][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.684833][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.690125][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 744.697522][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 744.702815][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 744.708798][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 744.715287][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 744.721942][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.728103][ C1] __msan_chain_origin+0x50/0x90 [ 744.734989][ C1] tcp_conn_request+0x1781/0x4d10 [ 744.740169][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.745478][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.751742][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 744.757913][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.763332][ C1] tcp_v4_conn_request+0x19b/0x240 [ 744.768958][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 744.774875][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 744.780449][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 744.786178][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.792245][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 744.798775][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 744.810446][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.818453][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 744.826567][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 744.831249][ C1] ? tcp_filter+0xf0/0xf0 [ 744.835579][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 744.841264][ C1] ip_local_deliver+0x62a/0x7c0 [ 744.848181][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 744.853216][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 744.859365][ C1] ip_rcv+0x6cf/0x750 [ 744.863439][ C1] ? ip_rcv_core+0x1270/0x1270 [ 744.868386][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 744.874538][ C1] process_backlog+0xf0b/0x1410 [ 744.879498][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 744.885749][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 744.891746][ C1] net_rx_action+0x786/0x1aa0 [ 744.896526][ C1] ? net_tx_action+0xc30/0xc30 [ 744.901288][ C1] __do_softirq+0x311/0x83d [ 744.906255][ C1] do_softirq_own_stack+0x49/0x80 [ 744.912844][ C1] [ 744.915872][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 744.921347][ C1] local_bh_enable+0x36/0x40 [ 744.926476][ C1] ip_finish_output2+0x2115/0x2610 [ 744.931862][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 744.938121][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 744.947492][ C1] __ip_finish_output+0xaa7/0xd80 [ 744.953732][ C1] ip_finish_output+0x166/0x410 [ 744.959036][ C1] ip_output+0x593/0x680 [ 744.963683][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 744.968969][ C1] ? ip_finish_output+0x410/0x410 [ 744.974255][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 744.979744][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 744.985563][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.990962][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 744.997231][ C1] ip_queue_xmit+0xcc/0xf0 [ 745.003051][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 745.008348][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 745.013650][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 745.020199][ C1] tcp_connect+0x4337/0x6920 [ 745.025329][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 745.030637][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 745.036140][ C1] tcp_v4_connect+0x21fd/0x2370 [ 745.041417][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 745.046814][ C1] __inet_stream_connect+0x2fb/0x1340 [ 745.053319][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 745.058825][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 745.064244][ C1] inet_stream_connect+0x101/0x180 [ 745.070829][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 745.076469][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 745.082214][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 745.087504][ C1] ? rds_tcp_state_change+0x390/0x390 [ 745.093070][ C1] rds_connect_worker+0x2a6/0x470 [ 745.099219][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 745.105287][ C1] ? rds_addr_cmp+0x200/0x200 [ 745.109985][ C1] process_one_work+0x1555/0x1f40 [ 745.115027][ C1] worker_thread+0xef6/0x2450 [ 745.119737][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 745.125636][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 745.131102][ C1] kthread+0x4b5/0x4f0 [ 745.135182][ C1] ? process_one_work+0x1f40/0x1f40 [ 745.140383][ C1] ? kthread_blkcg+0xf0/0xf0 [ 745.144995][ C1] ret_from_fork+0x35/0x40 [ 745.149512][ C1] Uninit was stored to memory at: [ 745.154541][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.160615][ C1] __msan_chain_origin+0x50/0x90 [ 745.165552][ C1] tcp_conn_request+0x1781/0x4d10 [ 745.170859][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.176148][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.181177][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.186725][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.191408][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.197146][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.202634][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.207768][ C1] ip_rcv+0x6cf/0x750 [ 745.212134][ C1] process_backlog+0xf0b/0x1410 [ 745.217933][ C1] net_rx_action+0x786/0x1aa0 [ 745.222960][ C1] __do_softirq+0x311/0x83d [ 745.227719][ C1] [ 745.230309][ C1] Uninit was stored to memory at: [ 745.235939][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.242801][ C1] __msan_chain_origin+0x50/0x90 [ 745.248865][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 745.254492][ C1] tcp_conn_request+0x33d7/0x4d10 [ 745.260313][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.265762][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.271325][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.277132][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.282201][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.286715][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.292270][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.297566][ C1] ip_rcv+0x6cf/0x750 [ 745.301559][ C1] process_backlog+0xf0b/0x1410 [ 745.306775][ C1] net_rx_action+0x786/0x1aa0 [ 745.311458][ C1] __do_softirq+0x311/0x83d [ 745.315951][ C1] [ 745.318268][ C1] Uninit was stored to memory at: [ 745.323436][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.329165][ C1] __msan_chain_origin+0x50/0x90 [ 745.334207][ C1] tcp_conn_request+0x1781/0x4d10 [ 745.339306][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.344407][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.349420][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.354782][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.359374][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.363869][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.369358][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.374202][ C1] ip_rcv+0x6cf/0x750 [ 745.378190][ C1] process_backlog+0xf0b/0x1410 [ 745.384358][ C1] net_rx_action+0x786/0x1aa0 [ 745.389048][ C1] __do_softirq+0x311/0x83d [ 745.393543][ C1] [ 745.395879][ C1] Uninit was stored to memory at: [ 745.400910][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.406660][ C1] __msan_chain_origin+0x50/0x90 [ 745.411604][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 745.417032][ C1] tcp_conn_request+0x33d7/0x4d10 [ 745.422256][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.427366][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.432489][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.437945][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.442699][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.447403][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.452863][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.457713][ C1] ip_rcv+0x6cf/0x750 [ 745.461689][ C1] process_backlog+0xf0b/0x1410 [ 745.466535][ C1] net_rx_action+0x786/0x1aa0 [ 745.471224][ C1] __do_softirq+0x311/0x83d [ 745.475708][ C1] [ 745.478033][ C1] Uninit was stored to memory at: [ 745.483085][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.488895][ C1] __msan_chain_origin+0x50/0x90 [ 745.493821][ C1] tcp_conn_request+0x1781/0x4d10 [ 745.498851][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.503977][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.508995][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.514361][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.519031][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.523702][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.529155][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.534021][ C1] ip_rcv+0x6cf/0x750 [ 745.537999][ C1] process_backlog+0xf0b/0x1410 [ 745.542844][ C1] net_rx_action+0x786/0x1aa0 [ 745.547656][ C1] __do_softirq+0x311/0x83d [ 745.552188][ C1] [ 745.554697][ C1] Uninit was stored to memory at: [ 745.561116][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.566919][ C1] __msan_chain_origin+0x50/0x90 [ 745.571876][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 745.577185][ C1] tcp_conn_request+0x33d7/0x4d10 [ 745.582217][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.587783][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.593185][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.598554][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.603221][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.607725][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.613453][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.618398][ C1] ip_rcv+0x6cf/0x750 [ 745.622383][ C1] process_backlog+0xf0b/0x1410 [ 745.627221][ C1] net_rx_action+0x786/0x1aa0 [ 745.632043][ C1] __do_softirq+0x311/0x83d [ 745.636637][ C1] [ 745.638965][ C1] Uninit was stored to memory at: [ 745.644266][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 745.650001][ C1] __msan_chain_origin+0x50/0x90 [ 745.654933][ C1] tcp_conn_request+0x1781/0x4d10 [ 745.660137][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.665274][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 745.670309][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.675681][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.680270][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.684774][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.690324][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.695690][ C1] ip_rcv+0x6cf/0x750 [ 745.700031][ C1] process_backlog+0xf0b/0x1410 [ 745.704883][ C1] net_rx_action+0x786/0x1aa0 [ 745.709756][ C1] __do_softirq+0x311/0x83d [ 745.714262][ C1] [ 745.716601][ C1] Uninit was created at: [ 745.720851][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 745.726738][ C1] kmsan_alloc_page+0x12a/0x310 [ 745.737876][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 745.745281][ C1] alloc_pages_current+0x67d/0x990 [ 745.750497][ C1] alloc_slab_page+0x111/0x12f0 [ 745.756832][ C1] new_slab+0x2bc/0x1130 [ 745.761070][ C1] ___slab_alloc+0x1533/0x1f30 [ 745.765935][ C1] kmem_cache_alloc+0xb23/0xd70 [ 745.771237][ C1] inet_reqsk_alloc+0xac/0x830 [ 745.775993][ C1] tcp_conn_request+0x753/0x4d10 [ 745.781554][ C1] tcp_v4_conn_request+0x19b/0x240 [ 745.786863][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 745.792534][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 745.797394][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 745.802066][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 745.807924][ C1] ip_local_deliver+0x62a/0x7c0 [ 745.813051][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 745.818155][ C1] ip_list_rcv+0x8eb/0x950 [ 745.823025][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 745.829864][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 745.839928][ C1] napi_complete_done+0x2ef/0xb60 [ 745.845042][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 745.852084][ C1] virtnet_poll+0x1468/0x19f0 [ 745.857669][ C1] net_rx_action+0x786/0x1aa0 05:11:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000900200000000000000000000f0000000f0000000f0000000f8010000f8010000f8010000f8010000f8010000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000000000000040000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068"], 0x1) [ 745.862424][ C1] __do_softirq+0x311/0x83d 05:11:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:42 executing program 0: gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:42 executing program 2: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x218, 0xa0, 0x0, 0x0, 0x0, 0xa0, 0x180, 0x180, 0x180, 0x180, 0x180, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x3}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'macvtap0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 05:11:43 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:11:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000050017000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:43 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501ff0081fffd01045d000000000c00010006"], 0x1}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10105, 0x0) 05:11:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000050017000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 747.270618][T19719] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 747.278968][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.288570][T19719] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 05:11:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:43 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e00000100000629110000000000050017000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:46 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000043d200000005000000b8060000e805000018020000500300005003000070040000e8050000e8050000e8050000e8050000e80500000500000000000000000000008cda447b20caed3bde8871de848a03297cb3bf28c6a93326e8023e86418af37b000000000000000000000000000000000000000000000000000000000000000067726530000000000000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000320000000000000000000000d0011802000000000000000000000000000000000000000000000000300065737000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000040073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000fe800000000000000000000000000000a412a6179d14e4e5bf83278bfa148f5f000000000000000000000000000000000000000000000000000000000000000062617461647630000000000000000000677265300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000380100000000000000000000000000000000000000000000000048006862680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffe000000100000000ff02000000000000000000000000000100000000000000000000000000000001000000000000000400000000000000000000000000000000000000000000000076657468305f746f5f6261746164760069703665727370616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800200100000000000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048004d41535155455241444500000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300178010000000000000000000000000000000000000000000000003000737268000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048004d415351554552414445000000000000000000000000000000000000000000000000e0000001000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 05:11:46 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:11:46 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:46 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x337) 05:11:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:46 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e0000010000062911000000000005001700000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:47 executing program 2: clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x1efff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) tkill(r2, 0x800000009) 05:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:49 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:49 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:11:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/699], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe0, 0x900, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8d501886400de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) 05:11:49 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 05:11:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 05:11:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:50 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) 05:11:50 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) [ 756.681796][ C1] not chained 170000 origins [ 756.686524][ C1] CPU: 1 PID: 680 Comm: kworker/u4:24 Not tainted 5.6.0-rc2-syzkaller #0 [ 756.695539][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.706117][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 756.712414][ C1] Call Trace: [ 756.716577][ C1] [ 756.719623][ C1] dump_stack+0x1c9/0x220 [ 756.723987][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 756.730530][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 756.736534][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 756.747629][ C1] ? set_irq_regs+0x5b/0xa0 [ 756.754615][ C1] ? ret_from_intr+0x13/0x3b [ 756.759226][ C1] ? flat_init_apic_ldr+0x170/0x170 [ 756.764528][ C1] ? apic_timer_interrupt+0xa/0x40 [ 756.769752][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 756.775059][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 756.781223][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 756.787558][ C1] ? __msan_get_context_state+0x9/0x20 [ 756.793203][ C1] ? __module_get+0x19/0x230 [ 756.798713][ C1] ? inet_twsk_alloc+0x7bb/0xba0 [ 756.804954][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 756.810149][ C1] __msan_chain_origin+0x50/0x90 [ 756.815084][ C1] tcp_time_wait+0xb7e/0x10b0 [ 756.820051][ C1] tcp_fin+0x1f9/0x890 [ 756.824295][ C1] tcp_data_queue+0x24ce/0x9c40 [ 756.829152][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 756.839493][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 756.845922][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 756.852942][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 756.858277][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 756.863474][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 756.868073][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 756.872608][ C1] ? tcp_filter+0xf0/0xf0 [ 756.876925][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 756.882396][ C1] ip_local_deliver+0x62a/0x7c0 [ 756.887249][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 756.892262][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 756.897887][ C1] ip_rcv+0x6cf/0x750 [ 756.901870][ C1] ? ip_rcv_core+0x1270/0x1270 [ 756.906635][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 756.912260][ C1] process_backlog+0xf0b/0x1410 [ 756.917105][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 756.922298][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 756.927950][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 756.933233][ C1] net_rx_action+0x786/0x1aa0 [ 756.937920][ C1] ? net_tx_action+0xc30/0xc30 [ 756.942680][ C1] __do_softirq+0x311/0x83d [ 756.947200][ C1] do_softirq_own_stack+0x49/0x80 [ 756.952208][ C1] [ 756.955184][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 756.960386][ C1] local_bh_enable+0x36/0x40 [ 756.964968][ C1] ip_finish_output2+0x2115/0x2610 [ 756.970078][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 756.975804][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 756.981816][ C1] __ip_finish_output+0xaa7/0xd80 [ 756.986847][ C1] ip_finish_output+0x166/0x410 [ 756.991697][ C1] ip_output+0x593/0x680 [ 756.995946][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 757.001223][ C1] ? ip_finish_output+0x410/0x410 [ 757.006260][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 757.011200][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 757.016739][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 757.022130][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 757.027336][ C1] ip_queue_xmit+0xcc/0xf0 [ 757.035842][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 757.041400][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 757.046635][ C1] tcp_write_xmit+0x30e1/0xb470 [ 757.051541][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 757.057173][ C1] tcp_send_fin+0x131e/0x1570 [ 757.061861][ C1] tcp_shutdown+0x188/0x200 [ 757.066359][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 757.071119][ C1] inet_shutdown+0x342/0x5e0 [ 757.076060][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 757.080734][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 757.085766][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 757.090873][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 757.096081][ C1] rds_tcp_accept_worker+0x61/0x160 [ 757.101280][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 757.106298][ C1] process_one_work+0x1555/0x1f40 [ 757.111335][ C1] worker_thread+0xef6/0x2450 [ 757.116030][ C1] kthread+0x4b5/0x4f0 [ 757.120084][ C1] ? process_one_work+0x1f40/0x1f40 [ 757.125279][ C1] ? kthread_blkcg+0xf0/0xf0 [ 757.129863][ C1] ret_from_fork+0x35/0x40 [ 757.134275][ C1] Uninit was stored to memory at: [ 757.139304][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.145035][ C1] __msan_chain_origin+0x50/0x90 [ 757.149980][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 757.155181][ C1] tcp_time_wait+0xaca/0x10b0 [ 757.161602][ C1] tcp_fin+0x1f9/0x890 [ 757.165669][ C1] tcp_data_queue+0x24ce/0x9c40 [ 757.170515][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 757.175965][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.180541][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.185029][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.190482][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.195426][ C1] ip_rcv+0x6cf/0x750 [ 757.199398][ C1] process_backlog+0xf0b/0x1410 [ 757.204236][ C1] net_rx_action+0x786/0x1aa0 [ 757.211683][ C1] __do_softirq+0x311/0x83d [ 757.216180][ C1] [ 757.218493][ C1] Uninit was stored to memory at: [ 757.223513][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.229217][ C1] __msan_chain_origin+0x50/0x90 [ 757.234157][ C1] tcp_time_wait+0xb7e/0x10b0 [ 757.238820][ C1] tcp_fin+0x1f9/0x890 [ 757.242884][ C1] tcp_data_queue+0x24ce/0x9c40 [ 757.247729][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 757.253177][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.257757][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.262250][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.267788][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.272625][ C1] ip_rcv+0x6cf/0x750 [ 757.276606][ C1] process_backlog+0xf0b/0x1410 [ 757.281451][ C1] net_rx_action+0x786/0x1aa0 [ 757.286137][ C1] __do_softirq+0x311/0x83d [ 757.290623][ C1] [ 757.292938][ C1] Uninit was stored to memory at: [ 757.297969][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.303687][ C1] __msan_chain_origin+0x50/0x90 [ 757.308617][ C1] inet_twsk_alloc+0xab6/0xba0 [ 757.313400][ C1] tcp_time_wait+0xcd/0x10b0 [ 757.317977][ C1] tcp_fin+0x1f9/0x890 [ 757.322034][ C1] tcp_data_queue+0x24ce/0x9c40 [ 757.326867][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 757.332316][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.336905][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.342184][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.347630][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.352477][ C1] ip_rcv+0x6cf/0x750 [ 757.356448][ C1] process_backlog+0xf0b/0x1410 [ 757.361323][ C1] net_rx_action+0x786/0x1aa0 [ 757.365995][ C1] __do_softirq+0x311/0x83d [ 757.370475][ C1] [ 757.372784][ C1] Uninit was stored to memory at: [ 757.377800][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.383507][ C1] __msan_chain_origin+0x50/0x90 [ 757.388436][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 757.393635][ C1] tcp_timewait_state_process+0x1628/0x1900 [ 757.399514][ C1] tcp_v4_rcv+0x1bea/0x4d00 [ 757.404013][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.409579][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.414422][ C1] ip_rcv+0x6cf/0x750 [ 757.418394][ C1] process_backlog+0xf0b/0x1410 [ 757.423268][ C1] net_rx_action+0x786/0x1aa0 [ 757.427946][ C1] __do_softirq+0x311/0x83d [ 757.432432][ C1] [ 757.434751][ C1] Uninit was stored to memory at: [ 757.439768][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.445580][ C1] __msan_chain_origin+0x50/0x90 [ 757.450531][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 757.455726][ C1] tcp_time_wait+0xaca/0x10b0 [ 757.460395][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 757.465859][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.470439][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.474933][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.480382][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.485230][ C1] ip_rcv+0x6cf/0x750 [ 757.489201][ C1] process_backlog+0xf0b/0x1410 [ 757.494043][ C1] net_rx_action+0x786/0x1aa0 [ 757.498710][ C1] __do_softirq+0x311/0x83d [ 757.503191][ C1] [ 757.505503][ C1] Uninit was stored to memory at: [ 757.510524][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.516243][ C1] __msan_chain_origin+0x50/0x90 [ 757.521173][ C1] tcp_time_wait+0xb7e/0x10b0 [ 757.525850][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 757.531299][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.535882][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.540373][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.545831][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.550667][ C1] ip_rcv+0x6cf/0x750 [ 757.554636][ C1] process_backlog+0xf0b/0x1410 [ 757.559483][ C1] net_rx_action+0x786/0x1aa0 [ 757.564159][ C1] __do_softirq+0x311/0x83d [ 757.568649][ C1] [ 757.570970][ C1] Uninit was stored to memory at: [ 757.576005][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 757.581719][ C1] __msan_chain_origin+0x50/0x90 [ 757.586909][ C1] inet_twsk_alloc+0xab6/0xba0 [ 757.591683][ C1] tcp_time_wait+0xcd/0x10b0 [ 757.596272][ C1] tcp_rcv_state_process+0x1f4b/0x7140 [ 757.601722][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.606318][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.610820][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.616270][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.621108][ C1] ip_rcv+0x6cf/0x750 [ 757.625079][ C1] process_backlog+0xf0b/0x1410 [ 757.629924][ C1] net_rx_action+0x786/0x1aa0 [ 757.634589][ C1] __do_softirq+0x311/0x83d [ 757.639070][ C1] [ 757.641381][ C1] Uninit was created at: [ 757.645614][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 757.651237][ C1] kmsan_alloc_page+0x12a/0x310 [ 757.656079][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 757.661614][ C1] alloc_pages_current+0x67d/0x990 [ 757.666721][ C1] alloc_slab_page+0x111/0x12f0 [ 757.671558][ C1] new_slab+0x2bc/0x1130 [ 757.675790][ C1] ___slab_alloc+0x1533/0x1f30 [ 757.680553][ C1] kmem_cache_alloc+0xb23/0xd70 [ 757.685416][ C1] inet_twsk_alloc+0x135/0xba0 [ 757.690178][ C1] tcp_time_wait+0xcd/0x10b0 [ 757.694753][ C1] tcp_fin+0x1f9/0x890 [ 757.698805][ C1] tcp_data_queue+0x24ce/0x9c40 [ 757.703660][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 757.709111][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 757.713704][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 757.718195][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 757.723642][ C1] ip_local_deliver+0x62a/0x7c0 [ 757.728477][ C1] ip_rcv+0x6cf/0x750 [ 757.732463][ C1] process_backlog+0xf0b/0x1410 [ 757.737305][ C1] net_rx_action+0x786/0x1aa0 [ 757.741968][ C1] __do_softirq+0x311/0x83d 05:11:53 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:11:53 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="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"], 0x0, 0x150}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:11:53 executing program 0: r0 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) 05:11:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18}], 0x1, 0x0) 05:11:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:11:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x2, '\a\x00`'}, "8cbfc12abc282c27820fd9118600820e0006001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a600000000000000"}}}}, 0x8a) 05:11:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:11:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:11:57 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:11:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18}], 0x1, 0x0) 05:11:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 05:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x108, 0x0, 0x0, 0x0, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x10000000000020}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 05:11:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:11:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 05:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:11:57 executing program 0: syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@broadcast}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 05:11:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18}], 0x1, 0x0) 05:11:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 05:11:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:00 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:00 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) connect$nfc_llcp(r2, &(0x7f0000000780)={0x27, 0x0, 0x2, 0x0, 0x1, 0x1, "492f32a329f5be5e9f2cf6add75ef9a535fe9b128b96fb145722c01b3dcf014a434315b16a37da37df7746e36af26b91a270dc021d97081c45d93fa7317d35", 0x35}, 0x60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote={[], 0x3}}, 0x12) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x400}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r9, 0x1, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9d7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050700000000e5ffffff010000001800018014000200766c616e3000"/38], 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x20000040) 05:12:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18}], 0x1, 0x0) 05:12:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x6, 0x401}, 0x14}}, 0x0) 05:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) semget(0x3, 0x0, 0x60) 05:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 764.902710][T19932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=19932 comm=syz-executor.0 [ 765.005785][T19932] device geneve2 entered promiscuous mode 05:12:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) [ 765.259350][T19944] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 05:12:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x200) [ 765.359240][T19948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=19948 comm=syz-executor.0 05:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002000/0x1000)=nil], &(0x7f00000000c0)=[0x1], &(0x7f0000000100), 0x0) 05:12:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:03 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0xbcb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) 05:12:03 executing program 0: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) 05:12:03 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:04 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80284504, &(0x7f0000ffcffc)=0x200) 05:12:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x6, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, '\a\x00`'}, "8cbfc12abc282c27820fd9118600820e0005001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a600000000000000"}}}}, 0x8a) 05:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}], 0x1, 0x0) 05:12:05 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa00007c201700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 05:12:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 770.880731][ C0] not chained 180000 origins [ 770.885377][ C0] CPU: 0 PID: 12834 Comm: kworker/u4:1 Not tainted 5.6.0-rc2-syzkaller #0 [ 770.893879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.903956][ C0] Workqueue: krdsd rds_connect_worker [ 770.909329][ C0] Call Trace: [ 770.912615][ C0] [ 770.915483][ C0] dump_stack+0x1c9/0x220 [ 770.919830][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 770.925543][ C0] ? should_fail+0x72/0x9e0 [ 770.930033][ C0] ? ret_from_fork+0x35/0x40 [ 770.934617][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 770.940703][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 770.945646][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 770.950854][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 770.956075][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 770.961894][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 770.967040][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 770.972876][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 770.979041][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 770.984368][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 770.989591][ C0] __msan_chain_origin+0x50/0x90 [ 770.994536][ C0] tcp_conn_request+0x174b/0x4d10 [ 770.999593][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.004791][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.009998][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 771.015817][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.021041][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.026165][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.031209][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 771.036496][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.041864][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.047072][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 771.052882][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 771.058965][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.064167][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.068778][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.073321][ C0] ? tcp_filter+0xf0/0xf0 [ 771.077679][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.083140][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.088018][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 771.093152][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 771.098843][ C0] ip_rcv+0x6cf/0x750 [ 771.102850][ C0] ? ip_rcv_core+0x1270/0x1270 [ 771.107623][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 771.113254][ C0] process_backlog+0xf0b/0x1410 [ 771.118127][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 771.123780][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 771.129098][ C0] net_rx_action+0x786/0x1aa0 [ 771.133794][ C0] ? net_tx_action+0xc30/0xc30 [ 771.138597][ C0] __do_softirq+0x311/0x83d [ 771.143109][ C0] do_softirq_own_stack+0x49/0x80 [ 771.148114][ C0] [ 771.151050][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 771.156268][ C0] local_bh_enable+0x36/0x40 [ 771.160871][ C0] ip_finish_output2+0x2115/0x2610 [ 771.165985][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 771.171715][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 771.178095][ C0] __ip_finish_output+0xaa7/0xd80 [ 771.183158][ C0] ip_finish_output+0x166/0x410 [ 771.188025][ C0] ip_output+0x593/0x680 [ 771.192281][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 771.197564][ C0] ? ip_finish_output+0x410/0x410 [ 771.202596][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 771.207537][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 771.213106][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.218313][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.223519][ C0] ip_queue_xmit+0xcc/0xf0 [ 771.227958][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 771.232806][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 771.238017][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 771.243855][ C0] tcp_connect+0x4337/0x6920 [ 771.248451][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 771.253731][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.258950][ C0] tcp_v4_connect+0x21fd/0x2370 [ 771.263828][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 771.268758][ C0] __inet_stream_connect+0x2fb/0x1340 [ 771.274123][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 771.279410][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.284604][ C0] inet_stream_connect+0x101/0x180 [ 771.289713][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 771.295341][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 771.300973][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.306164][ C0] ? rds_tcp_state_change+0x390/0x390 [ 771.311527][ C0] rds_connect_worker+0x2a6/0x470 [ 771.316541][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 771.322602][ C0] ? rds_addr_cmp+0x200/0x200 [ 771.327270][ C0] process_one_work+0x1555/0x1f40 [ 771.332306][ C0] worker_thread+0xef6/0x2450 [ 771.337007][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 771.342899][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 771.348488][ C0] kthread+0x4b5/0x4f0 [ 771.354053][ C0] ? process_one_work+0x1f40/0x1f40 [ 771.359620][ C0] ? kthread_blkcg+0xf0/0xf0 [ 771.364392][ C0] ret_from_fork+0x35/0x40 [ 771.368998][ C0] Uninit was stored to memory at: [ 771.374376][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.380083][ C0] __msan_chain_origin+0x50/0x90 [ 771.385361][ C0] tcp_conn_request+0x1781/0x4d10 [ 771.390400][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.395522][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.400543][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.406552][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.411249][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.415766][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.421261][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.426105][ C0] ip_rcv+0x6cf/0x750 [ 771.430078][ C0] process_backlog+0xf0b/0x1410 [ 771.434928][ C0] net_rx_action+0x786/0x1aa0 [ 771.439602][ C0] __do_softirq+0x311/0x83d [ 771.444084][ C0] [ 771.446432][ C0] Uninit was stored to memory at: [ 771.451444][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.457160][ C0] __msan_chain_origin+0x50/0x90 [ 771.462096][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 771.467375][ C0] tcp_conn_request+0x33d7/0x4d10 [ 771.472404][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.477507][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.482521][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.487901][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.492487][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.496984][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.502468][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.507307][ C0] ip_rcv+0x6cf/0x750 [ 771.511291][ C0] process_backlog+0xf0b/0x1410 [ 771.516132][ C0] net_rx_action+0x786/0x1aa0 [ 771.520808][ C0] __do_softirq+0x311/0x83d [ 771.525301][ C0] [ 771.527612][ C0] Uninit was stored to memory at: [ 771.532622][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.538326][ C0] __msan_chain_origin+0x50/0x90 [ 771.543259][ C0] tcp_conn_request+0x1781/0x4d10 [ 771.548273][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.553368][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.558378][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.563745][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.568330][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.572822][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.578277][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.583121][ C0] ip_rcv+0x6cf/0x750 [ 771.587103][ C0] process_backlog+0xf0b/0x1410 [ 771.591960][ C0] net_rx_action+0x786/0x1aa0 [ 771.596644][ C0] __do_softirq+0x311/0x83d [ 771.601133][ C0] [ 771.603458][ C0] Uninit was stored to memory at: [ 771.608473][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.614269][ C0] __msan_chain_origin+0x50/0x90 [ 771.619209][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 771.624498][ C0] tcp_conn_request+0x33d7/0x4d10 [ 771.629519][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.634630][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.639647][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.645104][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.649771][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.654266][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.659708][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.664544][ C0] ip_rcv+0x6cf/0x750 [ 771.668527][ C0] process_backlog+0xf0b/0x1410 [ 771.673368][ C0] net_rx_action+0x786/0x1aa0 [ 771.678034][ C0] __do_softirq+0x311/0x83d [ 771.682517][ C0] [ 771.684828][ C0] Uninit was stored to memory at: [ 771.689851][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.695565][ C0] __msan_chain_origin+0x50/0x90 [ 771.700490][ C0] tcp_conn_request+0x1781/0x4d10 [ 771.705603][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.710710][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.715734][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.721095][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.725673][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.730172][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.735623][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.740468][ C0] ip_rcv+0x6cf/0x750 [ 771.744632][ C0] process_backlog+0xf0b/0x1410 [ 771.749478][ C0] net_rx_action+0x786/0x1aa0 [ 771.754162][ C0] __do_softirq+0x311/0x83d [ 771.758649][ C0] [ 771.760963][ C0] Uninit was stored to memory at: [ 771.765999][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.772059][ C0] __msan_chain_origin+0x50/0x90 [ 771.777004][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 771.782295][ C0] tcp_conn_request+0x33d7/0x4d10 [ 771.787400][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.792502][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.797542][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.802916][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.807500][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.812000][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.817456][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.822306][ C0] ip_rcv+0x6cf/0x750 [ 771.826276][ C0] process_backlog+0xf0b/0x1410 [ 771.831118][ C0] net_rx_action+0x786/0x1aa0 [ 771.835791][ C0] __do_softirq+0x311/0x83d [ 771.840282][ C0] [ 771.842595][ C0] Uninit was stored to memory at: [ 771.847612][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 771.853318][ C0] __msan_chain_origin+0x50/0x90 [ 771.858240][ C0] tcp_conn_request+0x1781/0x4d10 [ 771.863250][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.868345][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 771.873367][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.878748][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.883330][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.887823][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.893282][ C0] ip_local_deliver+0x62a/0x7c0 [ 771.898131][ C0] ip_rcv+0x6cf/0x750 [ 771.902108][ C0] process_backlog+0xf0b/0x1410 [ 771.906948][ C0] net_rx_action+0x786/0x1aa0 [ 771.911613][ C0] __do_softirq+0x311/0x83d [ 771.916092][ C0] [ 771.918401][ C0] Uninit was created at: [ 771.922654][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 771.928309][ C0] kmsan_alloc_page+0x12a/0x310 [ 771.933166][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 771.938717][ C0] alloc_pages_current+0x67d/0x990 [ 771.943832][ C0] alloc_slab_page+0x111/0x12f0 [ 771.948675][ C0] new_slab+0x2bc/0x1130 [ 771.952922][ C0] ___slab_alloc+0x1533/0x1f30 [ 771.957680][ C0] kmem_cache_alloc+0xb23/0xd70 [ 771.962521][ C0] inet_reqsk_alloc+0xac/0x830 [ 771.967290][ C0] tcp_conn_request+0x753/0x4d10 [ 771.972243][ C0] tcp_v4_conn_request+0x19b/0x240 [ 771.977359][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 771.982723][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 771.987315][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 771.991808][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 771.997273][ C0] ip_local_deliver+0x62a/0x7c0 [ 772.002128][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 772.006968][ C0] ip_list_rcv+0x8eb/0x950 [ 772.011393][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 772.017563][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 772.023803][ C0] napi_complete_done+0x2ef/0xb60 [ 772.028826][ C0] virtqueue_napi_complete+0xb9/0x1f0 05:12:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:08 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) fcntl$setstatus(r0, 0x4, 0xa0040) 05:12:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:08 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a00)=ANY=[], 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb6503fff998610400a89f1a4d328e5b170d14ad848f9e677b5b5c5c66bece1af91ae0cd1498f45cec619e1f528dc405d468d2baeb6f0754205bd1fe9911957035cc3adb05834e42d4dcf884ebef5d4641161e0e78c87aec61405c"], 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x10000) [ 772.034208][ C0] virtnet_poll+0x1468/0x19f0 [ 772.038911][ C0] net_rx_action+0x786/0x1aa0 [ 772.043599][ C0] __do_softirq+0x311/0x83d [ 772.406719][T20037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 05:12:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000080)={[{@fat=@showexec='showexec'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) 05:12:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e5199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d6a4cf10ce619a25ac9fa07fdffed203782ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1003f5435282d27194a232de4acfd8dd899dec6c2ec7937c23b41815cb2b03a6dd3a248c3c5a3", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a615c", 0x3}], 0x1, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:12:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x86a) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) 05:12:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:09 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:10 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0424fc60100018400a000000041982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 05:12:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001540)=""/66, 0x42}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0057f) shutdown(r0, 0x0) r2 = dup2(r1, r0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r3, 0x1) shutdown(r2, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r4) 05:12:11 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:11 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0xc4002, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x127a, 0x0) 05:12:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x6}}, 0x0) 05:12:12 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:12 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='\a'], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 05:12:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000df0)=""/526, 0xa9dceadb052c07c7) 05:12:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) [ 776.479510][ T32] audit: type=1804 audit(1584335532.534:129): pid=20124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir357302563/syzkaller.cMsRNt/402/bus" dev="sda1" ino=16490 res=1 05:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 776.862192][ T32] audit: type=1804 audit(1584335532.914:130): pid=20124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir357302563/syzkaller.cMsRNt/402/bus" dev="sda1" ino=16490 res=1 05:12:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:13 executing program 4: mlock(&(0x7f0000018000/0x4000)=nil, 0x4000) mlock(&(0x7f0000007000/0x200000)=nil, 0x200000) 05:12:13 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 778.012233][T12837] tipc: TX() has been purged, node left! 05:12:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) r1 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='pptp\x00', r1) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="ab5ef0ef35bbffc2b89fd4d8b41e5a8884c396ed8c3704465aa0b0119ea8ed", 0x1f, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1, 0x3a, 0x1000}, 0x0, &(0x7f0000000100)="f836c4ab329860ddfc3f19deaf2080bdb583793e80bed532386155f519842ea69bcb6da1e27cf84dce3cf6cfdc3de183557da39dc487533a5a4e", &(0x7f0000001180)=""/4096) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='pptp\x00', r2) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="ab5ef0ef35bbffc2b89fd4d8b41e5a8884c396ed8c370446", 0x18, r2) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000140)) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$dsp(r3, 0x0, 0xc3) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x8, 0x8, 0x84, 0x5, 0x0, 0x6, 0x10, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0x6, 0xf2}, 0x40000, 0x6, 0xbdc, 0x9, 0x2, 0x2, 0x8}, 0x0, 0x10, r3, 0x3) keyctl$describe(0x6, r2, &(0x7f0000000000)=""/110, 0x6e) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x39) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 05:12:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 781.713867][T20196] input: syz1 as /devices/virtual/input/input29 [ 782.016548][T20196] input: syz1 as /devices/virtual/input/input30 [ 782.597146][ T32] audit: type=1400 audit(1584335538.654:131): avc: denied { map } for pid=20209 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17437 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 782.771476][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.779305][T12837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.792137][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.799746][T12837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.817665][T12837] device bridge_slave_1 left promiscuous mode [ 782.824672][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.855060][T12837] device bridge_slave_0 left promiscuous mode [ 782.861879][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.914237][T12837] device veth1_macvtap left promiscuous mode [ 782.920352][T12837] device veth0_macvtap left promiscuous mode [ 782.926656][T12837] device veth1_vlan left promiscuous mode [ 782.932596][T12837] device veth0_vlan left promiscuous mode [ 787.748079][T12837] bond2 (unregistering): Released all slaves [ 787.770977][T12837] bond1 (unregistering): Released all slaves [ 787.984933][T12837] device hsr_slave_0 left promiscuous mode [ 788.032417][T12837] device hsr_slave_1 left promiscuous mode [ 788.132843][T12837] team0 (unregistering): Port device team_slave_1 removed [ 788.157941][T12837] team0 (unregistering): Port device team_slave_0 removed [ 788.186800][T12837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.229698][T12837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.319606][ C1] not chained 190000 origins [ 788.324246][ C1] CPU: 1 PID: 1556 Comm: kworker/u4:37 Not tainted 5.6.0-rc2-syzkaller #0 [ 788.332743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.342816][ C1] Workqueue: krdsd rds_connect_worker [ 788.348193][ C1] Call Trace: [ 788.351475][ C1] [ 788.354345][ C1] dump_stack+0x1c9/0x220 [ 788.358694][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 788.364591][ C1] ? should_fail+0x72/0x9e0 [ 788.369094][ C1] ? ret_from_fork+0x35/0x40 [ 788.373691][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 788.379542][T12837] bond0 (unregistering): Released all slaves [ 788.379780][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 788.390671][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.395875][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.401082][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 788.406892][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 788.411998][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 788.417794][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 788.423947][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 788.429248][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.434522][ C1] __msan_chain_origin+0x50/0x90 [ 788.439489][ C1] tcp_conn_request+0x174b/0x4d10 [ 788.444535][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.449744][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.454953][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 788.460756][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.466305][ C1] tcp_v4_conn_request+0x19b/0x240 [ 788.471418][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 788.476895][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 788.482191][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 788.487646][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.492848][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 788.498664][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 788.504743][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.509953][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 788.514563][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 788.519123][ C1] ? tcp_filter+0xf0/0xf0 [ 788.524699][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 788.530162][ C1] ip_local_deliver+0x62a/0x7c0 [ 788.535029][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 788.540072][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 788.545710][ C1] ip_rcv+0x6cf/0x750 [ 788.549693][ C1] ? ip_rcv_core+0x1270/0x1270 [ 788.554469][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 788.560102][ C1] process_backlog+0xf0b/0x1410 [ 788.564958][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 788.570616][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 788.575904][ C1] net_rx_action+0x786/0x1aa0 [ 788.582181][ C1] ? net_tx_action+0xc30/0xc30 [ 788.586954][ C1] __do_softirq+0x311/0x83d [ 788.591469][ C1] do_softirq_own_stack+0x49/0x80 [ 788.596485][ C1] [ 788.599427][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 788.604621][ C1] local_bh_enable+0x36/0x40 [ 788.609207][ C1] ip_finish_output2+0x2115/0x2610 [ 788.614316][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 788.620132][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 788.626145][ C1] __ip_finish_output+0xaa7/0xd80 [ 788.631193][ C1] ip_finish_output+0x166/0x410 [ 788.636058][ C1] ip_output+0x593/0x680 [ 788.640312][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 788.645622][ C1] ? ip_finish_output+0x410/0x410 [ 788.650649][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 788.655587][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 788.661144][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.666357][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.671571][ C1] ip_queue_xmit+0xcc/0xf0 [ 788.675990][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 788.680846][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 788.686044][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 788.691870][ C1] tcp_connect+0x4337/0x6920 [ 788.696457][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 788.701750][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.706980][ C1] tcp_v4_connect+0x21fd/0x2370 [ 788.712189][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 788.717129][ C1] __inet_stream_connect+0x2fb/0x1340 [ 788.722633][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 788.727932][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.733138][ C1] inet_stream_connect+0x101/0x180 [ 788.738244][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 788.744021][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 788.749722][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 788.758663][ C1] ? rds_tcp_state_change+0x390/0x390 [ 788.764048][ C1] rds_connect_worker+0x2a6/0x470 [ 788.769086][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 788.775164][ C1] ? rds_addr_cmp+0x200/0x200 [ 788.779919][ C1] process_one_work+0x1555/0x1f40 [ 788.784956][ C1] worker_thread+0xef6/0x2450 [ 788.789675][ C1] kthread+0x4b5/0x4f0 [ 788.793742][ C1] ? process_one_work+0x1f40/0x1f40 [ 788.798982][ C1] ? kthread_blkcg+0xf0/0xf0 [ 788.803598][ C1] ret_from_fork+0x35/0x40 [ 788.808014][ C1] Uninit was stored to memory at: [ 788.813032][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 788.818751][ C1] __msan_chain_origin+0x50/0x90 [ 788.823701][ C1] tcp_conn_request+0x1781/0x4d10 [ 788.828852][ C1] tcp_v4_conn_request+0x19b/0x240 [ 788.833974][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 788.838998][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 788.844363][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 788.848980][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 788.853479][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 788.858938][ C1] ip_local_deliver+0x62a/0x7c0 [ 788.863780][ C1] ip_rcv+0x6cf/0x750 [ 788.867755][ C1] process_backlog+0xf0b/0x1410 [ 788.872597][ C1] net_rx_action+0x786/0x1aa0 [ 788.877265][ C1] __do_softirq+0x311/0x83d [ 788.881746][ C1] [ 788.884055][ C1] Uninit was stored to memory at: [ 788.889066][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 788.894779][ C1] __msan_chain_origin+0x50/0x90 [ 788.899700][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 788.904971][ C1] tcp_conn_request+0x33d7/0x4d10 [ 788.909982][ C1] tcp_v4_conn_request+0x19b/0x240 [ 788.915090][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 788.920098][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 788.925564][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 788.930136][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 788.934623][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 788.940081][ C1] ip_local_deliver+0x62a/0x7c0 [ 788.944922][ C1] ip_rcv+0x6cf/0x750 [ 788.948898][ C1] process_backlog+0xf0b/0x1410 [ 788.953747][ C1] net_rx_action+0x786/0x1aa0 [ 788.958414][ C1] __do_softirq+0x311/0x83d [ 788.962896][ C1] [ 788.965211][ C1] Uninit was stored to memory at: [ 788.970229][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 788.975945][ C1] __msan_chain_origin+0x50/0x90 [ 788.980878][ C1] tcp_conn_request+0x1781/0x4d10 [ 788.985886][ C1] tcp_v4_conn_request+0x19b/0x240 [ 788.990991][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 788.996011][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.001368][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.005942][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.010436][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.015899][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.020732][ C1] ip_rcv+0x6cf/0x750 [ 789.024702][ C1] process_backlog+0xf0b/0x1410 [ 789.029541][ C1] net_rx_action+0x786/0x1aa0 [ 789.034206][ C1] __do_softirq+0x311/0x83d [ 789.038800][ C1] [ 789.041119][ C1] Uninit was stored to memory at: [ 789.046148][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 789.051869][ C1] __msan_chain_origin+0x50/0x90 [ 789.056799][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 789.062082][ C1] tcp_conn_request+0x33d7/0x4d10 [ 789.067196][ C1] tcp_v4_conn_request+0x19b/0x240 [ 789.072469][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 789.077477][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.082848][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.087435][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.091966][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.097416][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.102266][ C1] ip_rcv+0x6cf/0x750 [ 789.106240][ C1] process_backlog+0xf0b/0x1410 [ 789.111078][ C1] net_rx_action+0x786/0x1aa0 [ 789.115754][ C1] __do_softirq+0x311/0x83d [ 789.120236][ C1] [ 789.122546][ C1] Uninit was stored to memory at: [ 789.127556][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 789.133261][ C1] __msan_chain_origin+0x50/0x90 [ 789.138185][ C1] tcp_conn_request+0x1781/0x4d10 [ 789.143194][ C1] tcp_v4_conn_request+0x19b/0x240 [ 789.148291][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 789.153314][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.158672][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.163246][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.167754][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.173210][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.178066][ C1] ip_rcv+0x6cf/0x750 [ 789.182047][ C1] process_backlog+0xf0b/0x1410 [ 789.186892][ C1] net_rx_action+0x786/0x1aa0 [ 789.191561][ C1] __do_softirq+0x311/0x83d [ 789.196042][ C1] [ 789.198356][ C1] Uninit was stored to memory at: [ 789.203370][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 789.209072][ C1] __msan_chain_origin+0x50/0x90 [ 789.213995][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 789.219279][ C1] tcp_conn_request+0x33d7/0x4d10 [ 789.224303][ C1] tcp_v4_conn_request+0x19b/0x240 [ 789.229435][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 789.234454][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.239831][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.244412][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.248911][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.254357][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.259197][ C1] ip_rcv+0x6cf/0x750 [ 789.263169][ C1] process_backlog+0xf0b/0x1410 [ 789.268006][ C1] net_rx_action+0x786/0x1aa0 [ 789.272682][ C1] __do_softirq+0x311/0x83d [ 789.277167][ C1] [ 789.279476][ C1] Uninit was stored to memory at: [ 789.284490][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 789.290910][ C1] __msan_chain_origin+0x50/0x90 [ 789.295835][ C1] tcp_conn_request+0x1781/0x4d10 [ 789.300849][ C1] tcp_v4_conn_request+0x19b/0x240 [ 789.305947][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 789.310957][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.316314][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.320890][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.325383][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.330951][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.335805][ C1] ip_rcv+0x6cf/0x750 [ 789.339952][ C1] process_backlog+0xf0b/0x1410 [ 789.344801][ C1] net_rx_action+0x786/0x1aa0 [ 789.349465][ C1] __do_softirq+0x311/0x83d [ 789.353957][ C1] [ 789.356274][ C1] Uninit was created at: [ 789.360504][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 789.366120][ C1] kmsan_alloc_page+0x12a/0x310 [ 789.370971][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 789.376517][ C1] alloc_pages_current+0x67d/0x990 [ 789.381613][ C1] alloc_slab_page+0x111/0x12f0 [ 789.386453][ C1] new_slab+0x2bc/0x1130 [ 789.390679][ C1] ___slab_alloc+0x1533/0x1f30 [ 789.395426][ C1] kmem_cache_alloc+0xb23/0xd70 [ 789.400283][ C1] inet_reqsk_alloc+0xac/0x830 [ 789.405038][ C1] tcp_conn_request+0x753/0x4d10 [ 789.409964][ C1] tcp_v4_conn_request+0x19b/0x240 [ 789.415159][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 789.420515][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 789.425094][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 789.429585][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 789.435038][ C1] ip_local_deliver+0x62a/0x7c0 [ 789.439875][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 789.444713][ C1] ip_list_rcv+0x8eb/0x950 [ 789.449125][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 789.455279][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 789.461514][ C1] napi_complete_done+0x2ef/0xb60 [ 789.466527][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 789.471882][ C1] virtnet_poll+0x1468/0x19f0 [ 789.476545][ C1] net_rx_action+0x786/0x1aa0 [ 789.481206][ C1] __do_softirq+0x311/0x83d [ 789.624070][T20210] IPVS: ftp: loaded support on port[0] = 21 [ 789.654100][T20210] netdevsim0 speed is unknown, defaulting to 1000 [ 790.238980][T20210] chnl_net:caif_netlink_parms(): no params data found [ 790.541075][T20210] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.548455][T20210] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.558284][T20210] device bridge_slave_0 entered promiscuous mode [ 790.619963][T20210] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.627354][T20210] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.637374][T20210] device bridge_slave_1 entered promiscuous mode [ 790.751282][T20210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.791657][T20210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.898923][T20210] team0: Port device team_slave_0 added [ 790.917204][T20210] team0: Port device team_slave_1 added [ 790.973098][T20210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.980296][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.006594][T20210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.074851][T20210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.082226][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.108350][T20210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.228772][T20210] device hsr_slave_0 entered promiscuous mode [ 791.252896][T20210] device hsr_slave_1 entered promiscuous mode [ 791.792419][T20210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.839836][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 791.849479][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.873171][T20210] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.897298][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 791.908411][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 791.917876][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.925168][T11427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.984439][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 791.994051][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 792.004048][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 792.013460][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.020673][T11427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.029900][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 792.041085][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 792.120793][T20210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 792.132651][T20210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.154510][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 792.165498][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 792.176084][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 792.186785][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 792.197465][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 792.207298][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.217843][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.227716][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.240599][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 792.250501][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 792.330394][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.338899][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.375288][T20210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.600347][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 792.610844][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 792.696487][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 792.706228][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 792.721162][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 792.730952][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 792.754270][T20210] device veth0_vlan entered promiscuous mode [ 792.819274][T20210] device veth1_vlan entered promiscuous mode [ 792.919849][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 792.930142][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 792.953423][T20210] device veth0_macvtap entered promiscuous mode [ 792.982710][T20210] device veth1_macvtap entered promiscuous mode [ 793.038055][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.049415][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.059463][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.070014][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.079997][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.090549][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.100534][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.111082][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.121222][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.131866][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.145854][T20210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.154645][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 793.164110][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 793.173869][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 793.184040][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 793.226510][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.237272][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.247398][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.258032][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.268086][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.278693][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.288763][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.299400][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.310584][T20210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.321165][T20210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.335371][T20210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.349812][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 793.360368][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:12:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 05:12:30 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x0, 0x0, @stepwise}) 05:12:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) 05:12:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getpid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {}, 0x0, 0x2, @planes, 0xff00}) 05:12:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:12:30 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:12:31 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) socket(0x18, 0x3, 0x0) 05:12:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 05:12:31 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000140)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 05:12:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:12:31 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:12:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="e900"}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05034a0008083e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x1054, 0x0, 0x0, 0x1d3) 05:12:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 795.763006][ T32] audit: type=1800 audit(1584335551.824:132): pid=20295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17009 res=0 [ 795.923423][T20296] MINIX-fs: mounting unchecked file system, running fsck is recommended 05:12:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 05:12:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:12:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 796.190701][ T32] audit: type=1400 audit(1584335552.244:133): avc: denied { ioctl } for pid=20304 comm="syz-executor.0" path="socket:[182127]" dev="sockfs" ino=182127 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:12:32 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:12:32 executing program 4: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x7ffe, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_ROPEN(r1, 0x0, 0x0) [ 796.301399][T11955] minix_free_inode: bit 1 already cleared 05:12:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 05:12:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 05:12:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:33 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 05:12:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32, @ANYBLOB="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"/418], 0x6c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0) 05:12:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640), 0x0, 0x0) 05:12:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/18, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:33 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:34 executing program 0: munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0) 05:12:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/18, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0524fc60100011400a000000041982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 05:12:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640), 0x0, 0x0) 05:12:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x200) 05:12:34 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640), 0x0, 0x0) 05:12:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/18, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:34 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af00, &(0x7f0000000180)) 05:12:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}]}}}]}, 0x40}}, 0x0) 05:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/235, 0xeb}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x100000089, 0x0, 0x0, 0x800e007d5) shutdown(r0, 0x0) r2 = socket$inet6(0x1c, 0x3, 0x0) read(r2, &(0x7f0000000000)=""/5, 0x5) shutdown(r1, 0x0) 05:12:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) 05:12:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) [ 801.995154][ C0] not chained 200000 origins [ 801.999848][ C0] CPU: 0 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 802.008337][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.018432][ C0] Workqueue: krdsd rds_connect_worker [ 802.023808][ C0] Call Trace: [ 802.027095][ C0] [ 802.029943][ C0] dump_stack+0x1c9/0x220 [ 802.034276][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 802.039989][ C0] ? should_fail+0x72/0x9e0 [ 802.044481][ C0] ? ret_from_fork+0x35/0x40 [ 802.049083][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 802.055174][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 802.060115][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.065308][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.070519][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.076354][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 802.081453][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.087281][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 05:12:38 executing program 5: r0 = gettid() mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x121000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) 05:12:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000080), 0x0}, 0x20) 05:12:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0x7}}, 0x0) [ 802.093455][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 802.098781][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.104004][ C0] __msan_chain_origin+0x50/0x90 [ 802.108959][ C0] tcp_conn_request+0x1781/0x4d10 [ 802.114036][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.119251][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.124543][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.130378][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.135604][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.140739][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.145780][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 802.151084][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.156474][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.161688][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.167533][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.173622][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.178840][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.183455][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.187994][ C0] ? tcp_filter+0xf0/0xf0 [ 802.192934][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.198418][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.203277][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 802.208293][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 802.213916][ C0] ip_rcv+0x6cf/0x750 [ 802.217900][ C0] ? ip_rcv_core+0x1270/0x1270 [ 802.222656][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 802.228280][ C0] process_backlog+0xf0b/0x1410 [ 802.233147][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 802.238797][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 802.244090][ C0] net_rx_action+0x786/0x1aa0 [ 802.248777][ C0] ? net_tx_action+0xc30/0xc30 [ 802.253544][ C0] __do_softirq+0x311/0x83d [ 802.258072][ C0] do_softirq_own_stack+0x49/0x80 [ 802.263082][ C0] [ 802.266023][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 802.271227][ C0] local_bh_enable+0x36/0x40 [ 802.275809][ C0] ip_finish_output2+0x2115/0x2610 [ 802.280914][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 802.286629][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 802.292621][ C0] __ip_finish_output+0xaa7/0xd80 [ 802.297647][ C0] ip_finish_output+0x166/0x410 [ 802.302497][ C0] ip_output+0x593/0x680 [ 802.306742][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 802.312018][ C0] ? ip_finish_output+0x410/0x410 [ 802.317035][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 802.321979][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 802.327516][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.332716][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.337910][ C0] ip_queue_xmit+0xcc/0xf0 [ 802.342325][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 802.347164][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 802.352367][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.358205][ C0] tcp_connect+0x4337/0x6920 [ 802.362787][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 802.368067][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.373284][ C0] tcp_v4_connect+0x21fd/0x2370 [ 802.378157][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 802.383100][ C0] __inet_stream_connect+0x2fb/0x1340 [ 802.388468][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 802.393751][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.398947][ C0] inet_stream_connect+0x101/0x180 [ 802.404052][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 802.409687][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 802.415333][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.420671][ C0] ? rds_tcp_state_change+0x390/0x390 [ 802.426048][ C0] rds_connect_worker+0x2a6/0x470 [ 802.431074][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 802.437329][ C0] ? rds_addr_cmp+0x200/0x200 [ 802.442083][ C0] process_one_work+0x1555/0x1f40 [ 802.447118][ C0] worker_thread+0xef6/0x2450 [ 802.451801][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 802.457606][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 802.462826][ C0] kthread+0x4b5/0x4f0 [ 802.466901][ C0] ? process_one_work+0x1f40/0x1f40 [ 802.472124][ C0] ? kthread_blkcg+0xf0/0xf0 [ 802.476744][ C0] ret_from_fork+0x35/0x40 [ 802.481169][ C0] Uninit was stored to memory at: [ 802.486191][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.491900][ C0] __msan_chain_origin+0x50/0x90 [ 802.496830][ C0] tcp_conn_request+0x1781/0x4d10 [ 802.501927][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.507027][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.512034][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.517395][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.521971][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.526462][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.531904][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.536756][ C0] ip_rcv+0x6cf/0x750 [ 802.540728][ C0] process_backlog+0xf0b/0x1410 [ 802.545568][ C0] net_rx_action+0x786/0x1aa0 [ 802.550231][ C0] __do_softirq+0x311/0x83d [ 802.554726][ C0] [ 802.557037][ C0] Uninit was stored to memory at: [ 802.562053][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.567760][ C0] __msan_chain_origin+0x50/0x90 [ 802.572703][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 802.577976][ C0] tcp_conn_request+0x33d7/0x4d10 [ 802.583007][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.588209][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.593243][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.598611][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.603202][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.607700][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.613157][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.617999][ C0] ip_rcv+0x6cf/0x750 [ 802.621974][ C0] process_backlog+0xf0b/0x1410 [ 802.626813][ C0] net_rx_action+0x786/0x1aa0 [ 802.631489][ C0] __do_softirq+0x311/0x83d [ 802.635975][ C0] [ 802.638463][ C0] Uninit was stored to memory at: [ 802.643483][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.649193][ C0] __msan_chain_origin+0x50/0x90 [ 802.654117][ C0] tcp_conn_request+0x1781/0x4d10 [ 802.659129][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.664228][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.669237][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.674591][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.679269][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.683759][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.689199][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.694032][ C0] ip_rcv+0x6cf/0x750 [ 802.698001][ C0] process_backlog+0xf0b/0x1410 [ 802.702848][ C0] net_rx_action+0x786/0x1aa0 [ 802.707514][ C0] __do_softirq+0x311/0x83d [ 802.712083][ C0] [ 802.714395][ C0] Uninit was stored to memory at: [ 802.719415][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.725120][ C0] __msan_chain_origin+0x50/0x90 [ 802.730048][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 802.735417][ C0] tcp_conn_request+0x33d7/0x4d10 [ 802.740433][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.745530][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.750540][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.755919][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.760494][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.764983][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.771038][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.775886][ C0] ip_rcv+0x6cf/0x750 [ 802.779864][ C0] process_backlog+0xf0b/0x1410 [ 802.784711][ C0] net_rx_action+0x786/0x1aa0 [ 802.789386][ C0] __do_softirq+0x311/0x83d [ 802.793866][ C0] [ 802.796182][ C0] Uninit was stored to memory at: [ 802.801194][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.806901][ C0] __msan_chain_origin+0x50/0x90 [ 802.811823][ C0] tcp_conn_request+0x1781/0x4d10 [ 802.816833][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.821928][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.826943][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.832301][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.836875][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.841379][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.846851][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.851706][ C0] ip_rcv+0x6cf/0x750 [ 802.855706][ C0] process_backlog+0xf0b/0x1410 [ 802.860651][ C0] net_rx_action+0x786/0x1aa0 [ 802.865325][ C0] __do_softirq+0x311/0x83d [ 802.869810][ C0] [ 802.872138][ C0] Uninit was stored to memory at: [ 802.877263][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.882975][ C0] __msan_chain_origin+0x50/0x90 [ 802.887899][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 802.893185][ C0] tcp_conn_request+0x33d7/0x4d10 [ 802.898195][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.903291][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.908309][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.913667][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.918244][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.922734][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 802.928183][ C0] ip_local_deliver+0x62a/0x7c0 [ 802.933019][ C0] ip_rcv+0x6cf/0x750 [ 802.936996][ C0] process_backlog+0xf0b/0x1410 [ 802.941847][ C0] net_rx_action+0x786/0x1aa0 [ 802.946511][ C0] __do_softirq+0x311/0x83d [ 802.950994][ C0] [ 802.953321][ C0] Uninit was stored to memory at: [ 802.958337][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 802.964041][ C0] __msan_chain_origin+0x50/0x90 [ 802.968976][ C0] tcp_conn_request+0x1781/0x4d10 [ 802.973987][ C0] tcp_v4_conn_request+0x19b/0x240 [ 802.979171][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 802.984300][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 802.989691][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 802.994279][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 802.998779][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 803.004230][ C0] ip_local_deliver+0x62a/0x7c0 [ 803.009074][ C0] ip_rcv+0x6cf/0x750 [ 803.013064][ C0] process_backlog+0xf0b/0x1410 [ 803.017906][ C0] net_rx_action+0x786/0x1aa0 [ 803.022584][ C0] __do_softirq+0x311/0x83d [ 803.027067][ C0] [ 803.029384][ C0] Uninit was created at: [ 803.033616][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 803.039234][ C0] kmsan_alloc_page+0x12a/0x310 [ 803.044075][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 803.049610][ C0] alloc_pages_current+0x67d/0x990 [ 803.054706][ C0] alloc_slab_page+0x111/0x12f0 [ 803.059542][ C0] new_slab+0x2bc/0x1130 [ 803.063777][ C0] ___slab_alloc+0x1533/0x1f30 [ 803.068525][ C0] kmem_cache_alloc+0xb23/0xd70 [ 803.073361][ C0] inet_reqsk_alloc+0xac/0x830 [ 803.078331][ C0] tcp_conn_request+0x753/0x4d10 [ 803.083273][ C0] tcp_v4_conn_request+0x19b/0x240 [ 803.088380][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 803.093754][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 803.098425][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 803.102922][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 803.108374][ C0] ip_local_deliver+0x62a/0x7c0 [ 803.113211][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 803.118059][ C0] ip_list_rcv+0x8eb/0x950 [ 803.122468][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 803.128610][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 803.134835][ C0] napi_complete_done+0x2ef/0xb60 [ 803.139854][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 803.145212][ C0] virtnet_poll+0x1468/0x19f0 [ 803.149886][ C0] net_rx_action+0x786/0x1aa0 [ 803.154678][ C0] __do_softirq+0x311/0x83d [ 803.198589][T20431] Unknown ioctl 35300 [ 803.218892][T20432] Unknown ioctl 35300 05:12:39 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x121000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) 05:12:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x121000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) 05:12:39 executing program 3: pipe(&(0x7f0000000080)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/263) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 803.652874][T20445] Unknown ioctl 35300 05:12:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) [ 803.932841][T20451] Unknown ioctl 35300 05:12:40 executing program 5: r0 = gettid() mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:40 executing program 0: munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:12:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x121000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8}, 0x0, 0x2, @planes, 0xff00}) [ 804.586344][T20466] Unknown ioctl 35300 05:12:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 05:12:42 executing program 5: r0 = gettid() mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/144, 0x90}], 0x100000000000006b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 05:12:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000080)={[{@fat=@showexec='showexec'}]}) 05:12:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) 05:12:42 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:12:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x20303159}) 05:12:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f000047efe8)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x20000e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81000e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 807.506838][T20512] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 05:12:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:12:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0xe7, 0x20303159}) 05:12:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:43 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 05:12:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 05:12:44 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:12:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 05:12:44 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002e000101000000000000000600000000", @ANYRES32, @ANYBLOB="00000000000000001b25b299d9108e6d537ba42402ff7f00006ae45385e0fe2c49aac01a9c2f2eed2c53784eae193ffd7b9a98227740202e5102d956836cae24bdd31bff4a13ef270800000055c08fbc1b82cc0cb5532cd140541677170fd6c98662e32cb7a46ae9092c06d51f378659ec5bf285c165bced46abfa55e087c7172497e16d4a975febdb9ececb767b00000000"], 0x24}}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 05:12:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:45 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 05:12:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x672, 0x0, 0x0, 0x0, @msi}]}) 05:12:45 executing program 4: bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:12:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 05:12:46 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:12:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000053c07bc33760036394040b4aed12f000000000015ffa8ee79cfde47a110", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 05:12:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) 05:12:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:12:46 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501f74000f4b1447b0e65bc72610c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x7eb6, 0x0) 05:12:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1}], 0x1, 0x0) 05:12:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000007, 0x0) 05:12:47 executing program 5: r0 = gettid() mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) [ 811.264642][T20617] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 811.273009][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 811.282676][T20617] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 05:12:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1}], 0x1, 0x0) 05:12:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000007, 0x0) 05:12:48 executing program 5: r0 = gettid() mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x30314142, 0x0, @stepwise}) 05:12:49 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {}, 0x0, 0x2, @planes, 0xff00}) 05:12:49 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r0) 05:12:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1}], 0x1, 0x0) 05:12:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000007, 0x0) 05:12:49 executing program 5: r0 = gettid() mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:49 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) 05:12:49 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) 05:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 05:12:49 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:49 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)}], 0x1, 0x0) 05:12:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3efc882c22996f041d103af500"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 05:12:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:12:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)}], 0x1, 0x0) 05:12:50 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:50 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r1}) 05:12:51 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:12:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)}], 0x1, 0x0) 05:12:51 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:51 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:51 executing program 3: 05:12:51 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:12:51 executing program 0: 05:12:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 05:12:52 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:52 executing program 3: 05:12:52 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:12:52 executing program 0: 05:12:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 05:12:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 05:12:52 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) dup2(r0, r1) 05:12:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xfdef) 05:12:53 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:12:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) [ 818.378977][ C1] not chained 210000 origins [ 818.383590][ C1] CPU: 1 PID: 11674 Comm: kworker/u4:0 Not tainted 5.6.0-rc2-syzkaller #0 [ 818.392077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.402268][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 818.407896][ C1] Call Trace: [ 818.411194][ C1] [ 818.414033][ C1] dump_stack+0x1c9/0x220 [ 818.418347][ C1] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 818.423099][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 818.428799][ C1] ? ip_finish_output2+0x2115/0x2610 [ 818.434063][ C1] ? __ip_finish_output+0xaa7/0xd80 [ 818.439256][ C1] ? ip_finish_output+0x166/0x410 [ 818.444284][ C1] ? ip_output+0x593/0x680 [ 818.448692][ C1] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 818.453822][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 818.458397][ C1] ? __tcp_transmit_skb+0x439c/0x6090 [ 818.463750][ C1] ? tcp_write_xmit+0x30e1/0xb470 [ 818.468776][ C1] ? __tcp_push_pending_frames+0x124/0x4e0 [ 818.474577][ C1] ? tcp_send_fin+0x131e/0x1570 [ 818.479427][ C1] ? tcp_shutdown+0x188/0x200 [ 818.484281][ C1] ? inet_shutdown+0x342/0x5e0 [ 818.489082][ C1] ? kernel_sock_shutdown+0x9d/0xc0 [ 818.494274][ C1] ? rds_tcp_accept_one+0xe17/0x1060 [ 818.499620][ C1] ? rds_tcp_accept_worker+0x61/0x160 [ 818.504995][ C1] ? process_one_work+0x1555/0x1f40 [ 818.510177][ C1] ? worker_thread+0xef6/0x2450 [ 818.515038][ C1] ? kthread+0x4b5/0x4f0 [ 818.519284][ C1] ? ret_from_fork+0x35/0x40 [ 818.523921][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.529108][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 818.534910][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 818.541040][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.546259][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 818.552102][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 818.558252][ C1] ? __msan_get_context_state+0x9/0x20 [ 818.563718][ C1] ? __module_get+0x19/0x230 [ 818.568320][ C1] ? inet_twsk_alloc+0x7bb/0xba0 [ 818.573258][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.578492][ C1] __msan_chain_origin+0x50/0x90 [ 818.583433][ C1] tcp_time_wait+0xb7e/0x10b0 [ 818.588105][ C1] tcp_fin+0x1f9/0x890 [ 818.592176][ C1] tcp_data_queue+0x24ce/0x9c40 [ 818.597020][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 818.602938][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 818.609021][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 818.614472][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.619680][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.624880][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 818.629465][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 818.634187][ C1] ? tcp_filter+0xf0/0xf0 [ 818.638545][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 818.644045][ C1] ip_local_deliver+0x62a/0x7c0 [ 818.648897][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 818.653916][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 818.659540][ C1] ip_rcv+0x6cf/0x750 [ 818.663514][ C1] ? ip_rcv_core+0x1270/0x1270 [ 818.668261][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 818.673885][ C1] process_backlog+0xf0b/0x1410 [ 818.678769][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 818.684451][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 818.689766][ C1] net_rx_action+0x786/0x1aa0 [ 818.694441][ C1] ? net_tx_action+0xc30/0xc30 [ 818.699219][ C1] __do_softirq+0x311/0x83d [ 818.703717][ C1] do_softirq_own_stack+0x49/0x80 [ 818.708719][ C1] [ 818.711647][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 818.716842][ C1] local_bh_enable+0x36/0x40 [ 818.721413][ C1] ip_finish_output2+0x2115/0x2610 [ 818.727965][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 818.733700][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 818.739705][ C1] __ip_finish_output+0xaa7/0xd80 [ 818.744788][ C1] ip_finish_output+0x166/0x410 [ 818.749659][ C1] ip_output+0x593/0x680 [ 818.753909][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 818.759279][ C1] ? ip_finish_output+0x410/0x410 [ 818.764350][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 818.769287][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 818.774819][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.780019][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.785211][ C1] ip_queue_xmit+0xcc/0xf0 [ 818.789627][ C1] ? tcp_v6_send_response+0x2920/0x2920 [ 818.795178][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 818.800425][ C1] tcp_write_xmit+0x30e1/0xb470 [ 818.805305][ C1] __tcp_push_pending_frames+0x124/0x4e0 [ 818.810938][ C1] tcp_send_fin+0x131e/0x1570 [ 818.815668][ C1] tcp_shutdown+0x188/0x200 [ 818.820161][ C1] ? tcp_set_state+0x9d0/0x9d0 [ 818.824937][ C1] inet_shutdown+0x342/0x5e0 [ 818.829549][ C1] ? inet_recvmsg+0x7d0/0x7d0 [ 818.834237][ C1] kernel_sock_shutdown+0x9d/0xc0 [ 818.839331][ C1] rds_tcp_accept_one+0xe17/0x1060 [ 818.844453][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 818.849682][ C1] rds_tcp_accept_worker+0x61/0x160 [ 818.855593][ C1] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 818.860656][ C1] process_one_work+0x1555/0x1f40 [ 818.866115][ C1] worker_thread+0xef6/0x2450 [ 818.870791][ C1] kthread+0x4b5/0x4f0 [ 818.874840][ C1] ? process_one_work+0x1f40/0x1f40 [ 818.880028][ C1] ? kthread_blkcg+0xf0/0xf0 [ 818.884642][ C1] ret_from_fork+0x35/0x40 [ 818.889058][ C1] Uninit was stored to memory at: [ 818.894076][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 818.899787][ C1] __msan_chain_origin+0x50/0x90 [ 818.904706][ C1] inet_twsk_alloc+0xab6/0xba0 [ 818.909543][ C1] tcp_time_wait+0xcd/0x10b0 [ 818.914120][ C1] tcp_fin+0x1f9/0x890 [ 818.918168][ C1] tcp_data_queue+0x24ce/0x9c40 [ 818.922999][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 818.928435][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 818.933000][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 818.937496][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 818.942949][ C1] ip_local_deliver+0x62a/0x7c0 [ 818.947789][ C1] ip_rcv+0x6cf/0x750 [ 818.951836][ C1] process_backlog+0xf0b/0x1410 [ 818.956665][ C1] net_rx_action+0x786/0x1aa0 [ 818.961321][ C1] __do_softirq+0x311/0x83d [ 818.965795][ C1] [ 818.968188][ C1] Uninit was stored to memory at: [ 818.973206][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 818.978912][ C1] __msan_chain_origin+0x50/0x90 [ 818.983829][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 818.989004][ C1] tcp_time_wait+0xaca/0x10b0 [ 818.993671][ C1] tcp_fin+0x1f9/0x890 [ 818.997827][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.002710][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.008167][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.012742][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.017229][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.022714][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.027545][ C1] ip_rcv+0x6cf/0x750 [ 819.031507][ C1] process_backlog+0xf0b/0x1410 [ 819.036345][ C1] net_rx_action+0x786/0x1aa0 [ 819.041012][ C1] __do_softirq+0x311/0x83d [ 819.045530][ C1] [ 819.047856][ C1] Uninit was stored to memory at: [ 819.052913][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 819.058628][ C1] __msan_chain_origin+0x50/0x90 [ 819.063546][ C1] tcp_time_wait+0xb7e/0x10b0 [ 819.068207][ C1] tcp_fin+0x1f9/0x890 [ 819.072261][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.077103][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.082646][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.087222][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.091726][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.097274][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.102115][ C1] ip_rcv+0x6cf/0x750 [ 819.106078][ C1] process_backlog+0xf0b/0x1410 [ 819.110925][ C1] net_rx_action+0x786/0x1aa0 [ 819.115583][ C1] __do_softirq+0x311/0x83d [ 819.120074][ C1] [ 819.122392][ C1] Uninit was stored to memory at: [ 819.127421][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 819.133125][ C1] __msan_chain_origin+0x50/0x90 [ 819.138141][ C1] inet_twsk_alloc+0xab6/0xba0 [ 819.142888][ C1] tcp_time_wait+0xcd/0x10b0 [ 819.147459][ C1] tcp_fin+0x1f9/0x890 [ 819.152408][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.157308][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.162765][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.167355][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.171958][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.177408][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.182254][ C1] ip_rcv+0x6cf/0x750 [ 819.186231][ C1] process_backlog+0xf0b/0x1410 [ 819.191175][ C1] net_rx_action+0x786/0x1aa0 [ 819.195834][ C1] __do_softirq+0x311/0x83d [ 819.200319][ C1] [ 819.202632][ C1] Uninit was stored to memory at: [ 819.207644][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 819.213354][ C1] __msan_chain_origin+0x50/0x90 [ 819.218273][ C1] __inet_twsk_schedule+0x24e/0x2c0 [ 819.223471][ C1] tcp_time_wait+0xaca/0x10b0 [ 819.228158][ C1] tcp_fin+0x1f9/0x890 [ 819.232216][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.237058][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.242539][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.247145][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.251662][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.257129][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.262097][ C1] ip_rcv+0x6cf/0x750 [ 819.266101][ C1] process_backlog+0xf0b/0x1410 [ 819.270997][ C1] net_rx_action+0x786/0x1aa0 [ 819.275680][ C1] __do_softirq+0x311/0x83d [ 819.280183][ C1] [ 819.282508][ C1] Uninit was stored to memory at: [ 819.287540][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 819.293268][ C1] __msan_chain_origin+0x50/0x90 [ 819.298199][ C1] tcp_time_wait+0xb7e/0x10b0 [ 819.302867][ C1] tcp_fin+0x1f9/0x890 [ 819.306941][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.311792][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.317237][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.321828][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.326331][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.331797][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.336649][ C1] ip_rcv+0x6cf/0x750 [ 819.340645][ C1] process_backlog+0xf0b/0x1410 [ 819.345490][ C1] net_rx_action+0x786/0x1aa0 [ 819.350161][ C1] __do_softirq+0x311/0x83d [ 819.354650][ C1] [ 819.356964][ C1] Uninit was stored to memory at: [ 819.362066][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 819.367784][ C1] __msan_chain_origin+0x50/0x90 [ 819.372728][ C1] inet_twsk_alloc+0xab6/0xba0 [ 819.377503][ C1] tcp_time_wait+0xcd/0x10b0 [ 819.382094][ C1] tcp_fin+0x1f9/0x890 [ 819.386155][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.391009][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.396458][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.401075][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.405566][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.411012][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.415859][ C1] ip_rcv+0x6cf/0x750 [ 819.419856][ C1] process_backlog+0xf0b/0x1410 [ 819.424701][ C1] net_rx_action+0x786/0x1aa0 [ 819.429389][ C1] __do_softirq+0x311/0x83d [ 819.433873][ C1] [ 819.436187][ C1] Uninit was created at: [ 819.440426][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 819.446042][ C1] kmsan_alloc_page+0x12a/0x310 [ 819.450892][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 819.456436][ C1] alloc_pages_current+0x67d/0x990 [ 819.461553][ C1] alloc_slab_page+0x111/0x12f0 [ 819.466434][ C1] new_slab+0x2bc/0x1130 [ 819.470758][ C1] ___slab_alloc+0x1533/0x1f30 [ 819.475522][ C1] kmem_cache_alloc+0xb23/0xd70 [ 819.480366][ C1] inet_twsk_alloc+0x135/0xba0 [ 819.485115][ C1] tcp_time_wait+0xcd/0x10b0 [ 819.489688][ C1] tcp_fin+0x1f9/0x890 [ 819.493752][ C1] tcp_data_queue+0x24ce/0x9c40 [ 819.498589][ C1] tcp_rcv_state_process+0x67db/0x7140 [ 819.504043][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 819.508620][ C1] tcp_v4_rcv+0x4398/0x4d00 [ 819.513127][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 819.518595][ C1] ip_local_deliver+0x62a/0x7c0 [ 819.523439][ C1] ip_rcv+0x6cf/0x750 [ 819.527406][ C1] process_backlog+0xf0b/0x1410 05:12:55 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) dup2(r0, r1) 05:12:55 executing program 3: 05:12:55 executing program 0: 05:12:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) [ 819.532246][ C1] net_rx_action+0x786/0x1aa0 [ 819.536907][ C1] __do_softirq+0x311/0x83d 05:12:55 executing program 3: 05:12:55 executing program 3: 05:12:55 executing program 3: 05:12:56 executing program 3: 05:12:56 executing program 3: 05:12:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) dup2(r0, r1) 05:12:56 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:56 executing program 0: 05:12:56 executing program 3: 05:12:56 executing program 3: 05:12:56 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:57 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:12:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 05:12:57 executing program 0: 05:12:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:57 executing program 3: 05:12:57 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 05:12:57 executing program 0: 05:12:57 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:12:58 executing program 3: 05:12:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:58 executing program 0: 05:12:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 05:12:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:12:58 executing program 3: 05:12:58 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:12:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:59 executing program 0: 05:12:59 executing program 3: 05:12:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) 05:12:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:12:59 executing program 0: 05:12:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000007, 0x0) 05:12:59 executing program 3: 05:12:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x18}], 0x1, 0x0) 05:12:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:00 executing program 0: 05:13:01 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(0x0, 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:01 executing program 3: 05:13:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:01 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x18}], 0x1, 0x0) 05:13:01 executing program 0: 05:13:02 executing program 3: 05:13:02 executing program 0: 05:13:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x18}], 0x1, 0x0) 05:13:02 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r0) 05:13:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:02 executing program 3: 05:13:05 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(0x0, 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:05 executing program 2: 05:13:05 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r0) 05:13:05 executing program 0: 05:13:05 executing program 3: 05:13:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:05 executing program 3: 05:13:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:05 executing program 0: 05:13:05 executing program 2: 05:13:05 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r0) 05:13:06 executing program 3: 05:13:06 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(0x0, 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:06 executing program 0: 05:13:06 executing program 2: 05:13:06 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:06 executing program 3: 05:13:06 executing program 0: 05:13:06 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:07 executing program 2: 05:13:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:07 executing program 0: 05:13:07 executing program 3: 05:13:07 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:07 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:07 executing program 2: 05:13:08 executing program 3: 05:13:08 executing program 0: 05:13:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:08 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:08 executing program 2: 05:13:08 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:08 executing program 3: 05:13:08 executing program 0: 05:13:09 executing program 2: 05:13:09 executing program 3: 05:13:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:09 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:09 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:09 executing program 0: 05:13:09 executing program 3: 05:13:09 executing program 2: 05:13:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:09 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:09 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:10 executing program 0: 05:13:10 executing program 3: 05:13:10 executing program 2: 05:13:10 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:10 executing program 0: 05:13:10 executing program 3: 05:13:10 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:10 executing program 2: [ 834.945904][ C1] not chained 220000 origins [ 834.950632][ C1] CPU: 1 PID: 1556 Comm: kworker/u4:37 Not tainted 5.6.0-rc2-syzkaller #0 [ 834.959146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.969513][ C1] Workqueue: krdsd rds_connect_worker [ 834.974956][ C1] Call Trace: [ 834.978255][ C1] [ 834.981125][ C1] dump_stack+0x1c9/0x220 [ 834.985565][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 834.991477][ C1] ? should_fail+0x72/0x9e0 [ 834.995983][ C1] ? ret_from_fork+0x35/0x40 [ 835.000715][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 835.006785][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 835.011953][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.017325][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.022550][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 835.028371][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 835.033496][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 835.039343][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 835.045764][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 835.051235][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.056574][ C1] __msan_chain_origin+0x50/0x90 [ 835.061707][ C1] tcp_conn_request+0x13ce/0x4d10 [ 835.066751][ C1] ? rb_first+0x31/0x100 [ 835.071016][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.076323][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.081526][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.086846][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 835.092676][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.097901][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.103021][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.108072][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 835.113357][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.118729][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.123953][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 835.129757][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 835.135830][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.141032][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.145673][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.150260][ C1] ? tcp_filter+0xf0/0xf0 [ 835.154620][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.160087][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.165215][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 835.170237][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 835.175902][ C1] ip_rcv+0x6cf/0x750 [ 835.179899][ C1] ? ip_rcv_core+0x1270/0x1270 [ 835.184953][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 835.190671][ C1] process_backlog+0xf0b/0x1410 [ 835.195562][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 835.201294][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 835.206611][ C1] net_rx_action+0x786/0x1aa0 [ 835.211418][ C1] ? net_tx_action+0xc30/0xc30 [ 835.216196][ C1] __do_softirq+0x311/0x83d [ 835.220828][ C1] do_softirq_own_stack+0x49/0x80 [ 835.225855][ C1] [ 835.228990][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 835.234896][ C1] local_bh_enable+0x36/0x40 [ 835.239506][ C1] ip_finish_output2+0x2115/0x2610 [ 835.244640][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 835.251054][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 835.257052][ C1] __ip_finish_output+0xaa7/0xd80 [ 835.262215][ C1] ip_finish_output+0x166/0x410 [ 835.267086][ C1] ip_output+0x593/0x680 [ 835.271337][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 835.276921][ C1] ? ip_finish_output+0x410/0x410 [ 835.282311][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 835.287248][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 835.292792][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.298038][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.303241][ C1] ip_queue_xmit+0xcc/0xf0 [ 835.307748][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 835.312597][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 835.317827][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 835.323953][ C1] tcp_connect+0x4337/0x6920 [ 835.328543][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 835.333827][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.339091][ C1] tcp_v4_connect+0x21fd/0x2370 [ 835.344143][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 835.349116][ C1] __inet_stream_connect+0x2fb/0x1340 [ 835.354679][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 835.359977][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.365381][ C1] inet_stream_connect+0x101/0x180 [ 835.370503][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 835.376146][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 835.381798][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 835.387030][ C1] ? rds_tcp_state_change+0x390/0x390 [ 835.392401][ C1] rds_connect_worker+0x2a6/0x470 [ 835.397423][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 835.403490][ C1] ? rds_addr_cmp+0x200/0x200 [ 835.408161][ C1] process_one_work+0x1555/0x1f40 [ 835.413204][ C1] worker_thread+0xef6/0x2450 [ 835.417916][ C1] kthread+0x4b5/0x4f0 [ 835.422020][ C1] ? process_one_work+0x1f40/0x1f40 [ 835.427258][ C1] ? kthread_blkcg+0xf0/0xf0 [ 835.431884][ C1] ret_from_fork+0x35/0x40 [ 835.436329][ C1] Uninit was stored to memory at: [ 835.441372][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.447143][ C1] __msan_chain_origin+0x50/0x90 [ 835.452076][ C1] tcp_conn_request+0x1781/0x4d10 [ 835.457096][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.462206][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.467227][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.472602][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.477187][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.481681][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.487158][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.492000][ C1] ip_rcv+0x6cf/0x750 [ 835.495980][ C1] process_backlog+0xf0b/0x1410 [ 835.500824][ C1] net_rx_action+0x786/0x1aa0 [ 835.505673][ C1] __do_softirq+0x311/0x83d [ 835.510333][ C1] [ 835.512917][ C1] Uninit was stored to memory at: [ 835.517954][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.523682][ C1] __msan_chain_origin+0x50/0x90 [ 835.528643][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 835.533932][ C1] tcp_conn_request+0x33d7/0x4d10 [ 835.539098][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.544356][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.549384][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.554754][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.559338][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.563993][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.569481][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.574332][ C1] ip_rcv+0x6cf/0x750 [ 835.578317][ C1] process_backlog+0xf0b/0x1410 [ 835.583383][ C1] net_rx_action+0x786/0x1aa0 [ 835.588223][ C1] __do_softirq+0x311/0x83d [ 835.593209][ C1] [ 835.595545][ C1] Uninit was stored to memory at: [ 835.600585][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.606357][ C1] __msan_chain_origin+0x50/0x90 [ 835.611396][ C1] tcp_conn_request+0x1781/0x4d10 [ 835.616425][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.621566][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.626701][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.632077][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.636763][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.641361][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.646826][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.651671][ C1] ip_rcv+0x6cf/0x750 [ 835.656439][ C1] process_backlog+0xf0b/0x1410 [ 835.661302][ C1] net_rx_action+0x786/0x1aa0 [ 835.666079][ C1] __do_softirq+0x311/0x83d [ 835.670741][ C1] [ 835.673158][ C1] Uninit was stored to memory at: [ 835.678195][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.683920][ C1] __msan_chain_origin+0x50/0x90 [ 835.689087][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 835.694399][ C1] tcp_conn_request+0x33d7/0x4d10 [ 835.699418][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.704523][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.709543][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.714937][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.719553][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.724138][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.729590][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.734576][ C1] ip_rcv+0x6cf/0x750 [ 835.738555][ C1] process_backlog+0xf0b/0x1410 [ 835.743404][ C1] net_rx_action+0x786/0x1aa0 [ 835.748115][ C1] __do_softirq+0x311/0x83d [ 835.752605][ C1] [ 835.754948][ C1] Uninit was stored to memory at: [ 835.759970][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.765689][ C1] __msan_chain_origin+0x50/0x90 [ 835.770710][ C1] tcp_conn_request+0x1781/0x4d10 [ 835.775730][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.780889][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.785911][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.791311][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.796013][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.800544][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.805997][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.810838][ C1] ip_rcv+0x6cf/0x750 [ 835.814814][ C1] process_backlog+0xf0b/0x1410 [ 835.819774][ C1] net_rx_action+0x786/0x1aa0 [ 835.824564][ C1] __do_softirq+0x311/0x83d [ 835.829053][ C1] [ 835.831503][ C1] Uninit was stored to memory at: [ 835.836670][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.842388][ C1] __msan_chain_origin+0x50/0x90 [ 835.847321][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 835.852602][ C1] tcp_conn_request+0x33d7/0x4d10 [ 835.857621][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.862728][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.867744][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.873108][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.877703][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.882206][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.887663][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.892538][ C1] ip_rcv+0x6cf/0x750 [ 835.897007][ C1] process_backlog+0xf0b/0x1410 [ 835.901864][ C1] net_rx_action+0x786/0x1aa0 [ 835.906523][ C1] __do_softirq+0x311/0x83d [ 835.911254][ C1] [ 835.913847][ C1] Uninit was stored to memory at: [ 835.918881][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 835.924865][ C1] __msan_chain_origin+0x50/0x90 [ 835.929816][ C1] tcp_conn_request+0x1781/0x4d10 [ 835.934891][ C1] tcp_v4_conn_request+0x19b/0x240 [ 835.940095][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 835.945130][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 835.950512][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 835.955103][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 835.959603][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 835.965230][ C1] ip_local_deliver+0x62a/0x7c0 [ 835.970093][ C1] ip_rcv+0x6cf/0x750 [ 835.974522][ C1] process_backlog+0xf0b/0x1410 [ 835.979485][ C1] net_rx_action+0x786/0x1aa0 [ 835.984169][ C1] __do_softirq+0x311/0x83d [ 835.988667][ C1] [ 835.990981][ C1] Uninit was created at: [ 835.995221][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 836.000864][ C1] kmsan_alloc_page+0x12a/0x310 [ 836.005738][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 836.011272][ C1] alloc_pages_current+0x67d/0x990 [ 836.016373][ C1] alloc_slab_page+0x111/0x12f0 [ 836.021210][ C1] new_slab+0x2bc/0x1130 [ 836.025701][ C1] ___slab_alloc+0x1533/0x1f30 [ 836.030456][ C1] kmem_cache_alloc+0xb23/0xd70 [ 836.035307][ C1] inet_reqsk_alloc+0xac/0x830 [ 836.040069][ C1] tcp_conn_request+0x753/0x4d10 [ 836.044996][ C1] tcp_v4_conn_request+0x19b/0x240 [ 836.050092][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 836.055536][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 836.060129][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 836.064633][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 836.070088][ C1] ip_local_deliver+0x62a/0x7c0 [ 836.074924][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 836.079862][ C1] ip_list_rcv+0x8eb/0x950 [ 836.084291][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 836.090472][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 836.096708][ C1] napi_complete_done+0x2ef/0xb60 [ 836.101728][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 836.107109][ C1] virtnet_poll+0x1468/0x19f0 [ 836.111785][ C1] net_rx_action+0x786/0x1aa0 [ 836.116456][ C1] __do_softirq+0x311/0x83d 05:13:12 executing program 0: 05:13:12 executing program 3: 05:13:12 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:12 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:12 executing program 2: 05:13:12 executing program 3: 05:13:12 executing program 0: 05:13:13 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:13 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:13 executing program 3: 05:13:13 executing program 2: 05:13:13 executing program 0: 05:13:13 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:13 executing program 2: 05:13:13 executing program 3: 05:13:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:14 executing program 0: 05:13:14 executing program 2: 05:13:14 executing program 3: 05:13:14 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:14 executing program 0: 05:13:14 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, 0x0) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:13:14 executing program 3: 05:13:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200), 0x8) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 05:13:15 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, 0x0) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:13:15 executing program 3: 05:13:15 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:15 executing program 0: 05:13:16 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, 0x0) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:16 executing program 3: 05:13:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:13:16 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:16 executing program 0: 05:13:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:16 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xb}}], 0x30}], 0x1, 0x0) 05:13:16 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:17 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:17 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:17 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:18 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:18 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:18 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:18 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:19 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xe}, 0x10) 05:13:19 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:19 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:19 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x0) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000053c07bc33760036394040b4aed12f000000000015ffa8ee79cfde47a110126616e608b472e8f65eb901da278dcff47d010000805ae64f8f36460234432479aed75d4979e651b3b1708b672c5995c9e79066e3ceb991601d4b8a6355ddc55368aa1938f1a25958737a6399f017d4c2d7da119b71c47900f1cf5fb4ebd6de8e38d2b3815491be6559d594590b8d7ad820fa16705305c0db", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:13:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:19 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:13:20 executing program 3: bpf$MAP_CREATE(0x100000000000300, 0x0, 0x0) 05:13:20 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x0) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001258bd25dd27d1093600000000a1", 0x12, 0x0, 0x0, 0x61) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1}}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x23}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 05:13:21 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:21 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x0) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) [ 845.320691][T21294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22546 sclass=netlink_route_socket pid=21294 comm=syz-executor.2 [ 845.507577][T21294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22546 sclass=netlink_route_socket pid=21294 comm=syz-executor.2 05:13:23 executing program 0: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x4c, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:13:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:23 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:23 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0) 05:13:23 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:23 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1a) 05:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xba, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e240000050016000200ffe70500170000000000050008000000000008000600ac14141908000700e000000108005edb311f0600000900000000000000ffffdf080005000000000006000e000001000006291100000000000500170000000000", @ANYRES32, @ANYBLOB="04210915c3ddde162b17f01554830730ed7564000000020010000001000815840216000000000000000000003e59aa62df51ce613e1e1b5350503dc9d610b635e577cc41139f7fbfe045aa70231f8d2a8330db83672abafd452afe6f9b04b76f69c72be2aaf79b6af1ff0c482d"], 0xd4}}, 0x0) 05:13:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) [ 848.471685][T21347] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 05:13:24 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) dup2(r0, r1) 05:13:24 executing program 0: bpf$MAP_CREATE(0x100000000000011, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) 05:13:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040280ecdb4cb92e0a480e000d000000e8bd6efb2504000004000100404e02ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 05:13:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:25 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) dup2(r0, r1) 05:13:25 executing program 0: sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) io_setup(0x3b20, &(0x7f0000000000)=0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) 05:13:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 849.655280][T21360] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 849.667693][T21368] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 05:13:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) dup2(r0, r1) 05:13:26 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) 05:13:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='setgroups\x00') write$cgroup_subtree(r0, 0x0, 0x0) 05:13:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000880)={0x6, @vbi}) 05:13:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) 05:13:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:27 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x37) 05:13:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, r1) 05:13:27 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}], {0x4, 0x3}, [{0x8, 0x4}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:27 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:27 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) dup2(r0, r1) 05:13:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 05:13:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) 05:13:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:28 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) dup2(r0, r1) 05:13:29 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) 05:13:29 executing program 2: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 05:13:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:29 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) dup2(r0, r1) 05:13:29 executing program 0: r0 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000002500)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x5, 0x0) 05:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) 05:13:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) 05:13:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:30 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r1) 05:13:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000500) 05:13:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x2c02000000000000}, 0x0) 05:13:30 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xf}, 0x10) 05:13:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 854.896425][T21513] bridge0: port 3(ipvlan1) entered blocking state [ 854.903192][T21513] bridge0: port 3(ipvlan1) entered disabled state [ 854.928441][ T32] audit: type=1804 audit(1584335610.984:134): pid=21509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir115383506/syzkaller.XWHxni/496/cgroup.controllers" dev="sda1" ino=17439 res=1 05:13:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r1) 05:13:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) 05:13:31 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xb}}], 0x30}], 0x1, 0x0) 05:13:31 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(0xffffffffffffffff, r1) 05:13:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x88) 05:13:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) 05:13:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:13:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x8005, 0x0, 0x0) 05:13:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:32 executing program 0: pipe(&(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 05:13:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:13:33 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:33 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=']) 05:13:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) dup2(r0, 0xffffffffffffffff) 05:13:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 857.744328][ C1] not chained 230000 origins [ 857.748985][ C1] CPU: 1 PID: 11674 Comm: kworker/u4:0 Not tainted 5.6.0-rc2-syzkaller #0 [ 857.757492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.767564][ C1] Workqueue: krdsd rds_connect_worker [ 857.772929][ C1] Call Trace: [ 857.776211][ C1] [ 857.779062][ C1] dump_stack+0x1c9/0x220 [ 857.783402][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 857.789149][ C1] ? should_fail+0x72/0x9e0 [ 857.793651][ C1] ? ret_from_fork+0x35/0x40 [ 857.798242][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 857.804301][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 857.809231][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.814426][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.819704][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 857.825519][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 857.830632][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 857.836441][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 857.842596][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 857.847902][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.853134][ C1] __msan_chain_origin+0x50/0x90 [ 857.858087][ C1] tcp_conn_request+0x174b/0x4d10 [ 857.863145][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.868383][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.873603][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 857.879435][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.884657][ C1] tcp_v4_conn_request+0x19b/0x240 [ 857.889773][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 857.894798][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 857.900092][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 857.905479][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.910677][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 857.916487][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 857.922573][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 857.927772][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 857.932387][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 857.936919][ C1] ? tcp_filter+0xf0/0xf0 [ 857.941245][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 857.946701][ C1] ip_local_deliver+0x62a/0x7c0 [ 857.951550][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 857.956566][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 857.962202][ C1] ip_rcv+0x6cf/0x750 [ 857.966197][ C1] ? ip_rcv_core+0x1270/0x1270 [ 857.970952][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 857.976575][ C1] process_backlog+0xf0b/0x1410 [ 857.981433][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 857.987072][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 857.992347][ C1] net_rx_action+0x786/0x1aa0 [ 857.997043][ C1] ? net_tx_action+0xc30/0xc30 [ 858.001819][ C1] __do_softirq+0x311/0x83d [ 858.006335][ C1] do_softirq_own_stack+0x49/0x80 [ 858.011529][ C1] [ 858.014480][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 858.019689][ C1] local_bh_enable+0x36/0x40 [ 858.024359][ C1] ip_finish_output2+0x2115/0x2610 [ 858.029485][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 858.035197][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 858.041196][ C1] __ip_finish_output+0xaa7/0xd80 [ 858.046235][ C1] ip_finish_output+0x166/0x410 [ 858.051082][ C1] ip_output+0x593/0x680 [ 858.055503][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 858.060791][ C1] ? ip_finish_output+0x410/0x410 [ 858.065865][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 858.070811][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 858.076352][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 858.081557][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 858.086771][ C1] ip_queue_xmit+0xcc/0xf0 [ 858.091188][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 858.096028][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 858.101221][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 858.107048][ C1] tcp_connect+0x4337/0x6920 [ 858.111631][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 858.116921][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 858.122135][ C1] tcp_v4_connect+0x21fd/0x2370 [ 858.127021][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 858.131956][ C1] __inet_stream_connect+0x2fb/0x1340 [ 858.137333][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 858.142633][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 858.147834][ C1] inet_stream_connect+0x101/0x180 [ 858.152940][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 858.158566][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 858.164210][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 858.169500][ C1] ? rds_tcp_state_change+0x390/0x390 [ 858.174864][ C1] rds_connect_worker+0x2a6/0x470 [ 858.179886][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 858.185960][ C1] ? rds_addr_cmp+0x200/0x200 [ 858.190648][ C1] process_one_work+0x1555/0x1f40 [ 858.195696][ C1] worker_thread+0xef6/0x2450 [ 858.200414][ C1] kthread+0x4b5/0x4f0 [ 858.204484][ C1] ? process_one_work+0x1f40/0x1f40 [ 858.209687][ C1] ? kthread_blkcg+0xf0/0xf0 [ 858.214272][ C1] ret_from_fork+0x35/0x40 [ 858.218695][ C1] Uninit was stored to memory at: [ 858.223720][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.229561][ C1] __msan_chain_origin+0x50/0x90 [ 858.234516][ C1] tcp_conn_request+0x1781/0x4d10 [ 858.239555][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.244686][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.249890][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.255281][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.259867][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.264379][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.269836][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.274794][ C1] ip_rcv+0x6cf/0x750 [ 858.278771][ C1] process_backlog+0xf0b/0x1410 [ 858.283617][ C1] net_rx_action+0x786/0x1aa0 [ 858.288308][ C1] __do_softirq+0x311/0x83d [ 858.292801][ C1] [ 858.295120][ C1] Uninit was stored to memory at: [ 858.300136][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.305841][ C1] __msan_chain_origin+0x50/0x90 [ 858.310782][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 858.316079][ C1] tcp_conn_request+0x33d7/0x4d10 [ 858.321095][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.326198][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.331217][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.336595][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.341183][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.345682][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.351139][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.355994][ C1] ip_rcv+0x6cf/0x750 [ 858.359972][ C1] process_backlog+0xf0b/0x1410 [ 858.364815][ C1] net_rx_action+0x786/0x1aa0 [ 858.369484][ C1] __do_softirq+0x311/0x83d [ 858.373966][ C1] [ 858.376276][ C1] Uninit was stored to memory at: [ 858.381567][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.387290][ C1] __msan_chain_origin+0x50/0x90 [ 858.392221][ C1] tcp_conn_request+0x1781/0x4d10 [ 858.397246][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.402345][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.407371][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.412735][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.417319][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.421826][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.427398][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.432239][ C1] ip_rcv+0x6cf/0x750 [ 858.436222][ C1] process_backlog+0xf0b/0x1410 [ 858.441065][ C1] net_rx_action+0x786/0x1aa0 [ 858.445742][ C1] __do_softirq+0x311/0x83d [ 858.450228][ C1] [ 858.452582][ C1] Uninit was stored to memory at: [ 858.457602][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.463410][ C1] __msan_chain_origin+0x50/0x90 [ 858.468365][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 858.473642][ C1] tcp_conn_request+0x33d7/0x4d10 [ 858.478659][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.483759][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.488771][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.494140][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.498726][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.503217][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.508662][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.513494][ C1] ip_rcv+0x6cf/0x750 [ 858.517463][ C1] process_backlog+0xf0b/0x1410 [ 858.522302][ C1] net_rx_action+0x786/0x1aa0 [ 858.527070][ C1] __do_softirq+0x311/0x83d [ 858.531552][ C1] [ 858.533865][ C1] Uninit was stored to memory at: [ 858.538903][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.544622][ C1] __msan_chain_origin+0x50/0x90 [ 858.549550][ C1] tcp_conn_request+0x1781/0x4d10 [ 858.554564][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.559662][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.564674][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.570146][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.574748][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.579247][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.584714][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.589672][ C1] ip_rcv+0x6cf/0x750 [ 858.593651][ C1] process_backlog+0xf0b/0x1410 [ 858.598494][ C1] net_rx_action+0x786/0x1aa0 [ 858.603168][ C1] __do_softirq+0x311/0x83d [ 858.607654][ C1] [ 858.609972][ C1] Uninit was stored to memory at: [ 858.614994][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.620700][ C1] __msan_chain_origin+0x50/0x90 [ 858.626581][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 858.631851][ C1] tcp_conn_request+0x33d7/0x4d10 [ 858.636860][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.641970][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.646977][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.652333][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.656907][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.661397][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.666852][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.671699][ C1] ip_rcv+0x6cf/0x750 [ 858.675673][ C1] process_backlog+0xf0b/0x1410 [ 858.680507][ C1] net_rx_action+0x786/0x1aa0 [ 858.685177][ C1] __do_softirq+0x311/0x83d [ 858.689655][ C1] [ 858.691967][ C1] Uninit was stored to memory at: [ 858.697066][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 858.702770][ C1] __msan_chain_origin+0x50/0x90 [ 858.707690][ C1] tcp_conn_request+0x1781/0x4d10 [ 858.712703][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.717799][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 858.722823][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.728185][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.732772][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.737277][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.742737][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.747577][ C1] ip_rcv+0x6cf/0x750 [ 858.751561][ C1] process_backlog+0xf0b/0x1410 [ 858.756410][ C1] net_rx_action+0x786/0x1aa0 [ 858.761082][ C1] __do_softirq+0x311/0x83d [ 858.765566][ C1] [ 858.767879][ C1] Uninit was created at: [ 858.772113][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 858.777744][ C1] kmsan_alloc_page+0x12a/0x310 [ 858.782583][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 858.788119][ C1] alloc_pages_current+0x67d/0x990 [ 858.793216][ C1] alloc_slab_page+0x111/0x12f0 [ 858.798052][ C1] new_slab+0x2bc/0x1130 [ 858.802280][ C1] ___slab_alloc+0x1533/0x1f30 [ 858.807043][ C1] kmem_cache_alloc+0xb23/0xd70 [ 858.812749][ C1] inet_reqsk_alloc+0xac/0x830 [ 858.817588][ C1] tcp_conn_request+0x753/0x4d10 [ 858.822525][ C1] tcp_v4_conn_request+0x19b/0x240 [ 858.827637][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 858.833003][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 858.837584][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 858.842076][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 858.847524][ C1] ip_local_deliver+0x62a/0x7c0 [ 858.852364][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 858.857226][ C1] ip_list_rcv+0x8eb/0x950 [ 858.861642][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 858.867799][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 858.874038][ C1] napi_complete_done+0x2ef/0xb60 [ 858.879056][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 858.884418][ C1] virtnet_poll+0x1468/0x19f0 [ 858.889083][ C1] net_rx_action+0x786/0x1aa0 [ 858.893746][ C1] __do_softirq+0x311/0x83d 05:13:35 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:35 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:35 executing program 3: mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) munlockall() 05:13:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)={[{@norock='norock'}]}) 05:13:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 859.610030][T21603] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop0 scanned by syz-executor.0 (21603) [ 860.232466][T21611] ISOFS: Unable to identify CD-ROM format. 05:13:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040280ecdb4cb92e0a480e000d000000e8bd6efb250400000e000100404e02ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 05:13:36 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 860.616503][T21611] ISOFS: Unable to identify CD-ROM format. [ 860.819304][T21638] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 860.870195][T21638] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.878449][T21638] bridge0: port 1(bridge_slave_0) entered disabled state 05:13:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000130000000000"], 0x8) 05:13:37 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0) [ 861.687584][T21648] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.697789][T21648] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.705192][T21648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.713175][T21648] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.720427][T21648] bridge0: port 1(bridge_slave_0) entered forwarding state 05:13:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) 05:13:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b) 05:13:38 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 05:13:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='./bus/file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f00000002c0)='./bus/file0\x00') symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus/file0\x00') 05:13:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf) 05:13:38 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x4}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:13:38 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) [ 862.642607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:13:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040280ecdb4cb92e0a480e000d000000e8bd6efb250400000e000100404e02ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 05:13:38 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000640)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x18}], 0x1, 0x0) [ 863.188739][T21685] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 863.274682][T21685] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.282491][T21685] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.565705][T21685] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 863.575721][T21685] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.583122][T21685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.590995][T21685] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.598340][T21685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.617198][T21687] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.624836][T21687] bridge0: port 1(bridge_slave_0) entered disabled state 05:13:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:39 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32, @ANYBLOB="0000000500f6ffff0b001a0000000000000200004935480cdc5dcc0581cb3bd05db216e2a9126fed1092dbd683a7c1e3979e504ce8546b7233802c7a5c78dc32bab48558185e1fac6c5e63957d99f7a2df0a1a38c2df533dd1a79aa79fe66335e2bea68b000000b51a5fe6aa7605a90f3c2d35291f98e3444d9bd60c7e9e5e515390b158d9d4c45440135f9cd37cb9f899f81656a6cfb11a264068ef0c4a5491e3f3cac998903c791af8100b6847cafccb5549a984db4df96e1edb562405e3fa80ed6d54c85c4a380116090000002f141a0f3c1aed889c9e46b4943b8a8d5616ea3d8b5a3dd1c75a69546afe"], 0x2c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 05:13:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa7) 05:13:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) 05:13:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x86a) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) 05:13:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa1) 05:13:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9f299936"}, 0x0, 0x0, @planes=0x0, 0x2}) 05:13:41 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = inotify_init() dup2(r0, r3) 05:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f) 05:13:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) 05:13:42 executing program 3: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {}], {0x4, 0x3}, [{0x8, 0x4}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:13:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:42 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='./bus/file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f00000002c0)='./bus/file0\x00') 05:13:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:45 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:45 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x5]}, &(0x7f0000000080), 0x8) socket$inet(0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x511901, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000130a010100000000000000000200f98d04c7d03f00080000030073797a3100000000"], 0x20}}, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007051a00004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32=r3, @ANYBLOB="d7c5d2150000000000000000"], 0x24}}, 0x4) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x27) 05:13:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:46 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) [ 870.747956][ C0] not chained 240000 origins [ 870.752595][ C0] CPU: 0 PID: 11674 Comm: kworker/u4:0 Not tainted 5.6.0-rc2-syzkaller #0 [ 870.761085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.771159][ C0] Workqueue: krdsd rds_connect_worker [ 870.776547][ C0] Call Trace: [ 870.779843][ C0] [ 870.782699][ C0] dump_stack+0x1c9/0x220 [ 870.787030][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 870.792738][ C0] ? should_fail+0x72/0x9e0 [ 870.797225][ C0] ? ret_from_fork+0x35/0x40 [ 870.801822][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 870.807886][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 870.812819][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.818022][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.823220][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.829014][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 870.834116][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.839914][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 870.846068][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 870.851363][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.856551][ C0] __msan_chain_origin+0x50/0x90 [ 870.861480][ C0] tcp_conn_request+0x174b/0x4d10 [ 870.866518][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.871725][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.877441][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.883237][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.888430][ C0] tcp_v4_conn_request+0x19b/0x240 [ 870.893551][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 870.898586][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 870.903880][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 870.909255][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.914450][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.920258][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 870.926326][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 870.931519][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 870.936108][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 870.940640][ C0] ? tcp_filter+0xf0/0xf0 [ 870.944956][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 870.950410][ C0] ip_local_deliver+0x62a/0x7c0 [ 870.955264][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 870.960285][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 870.965907][ C0] ip_rcv+0x6cf/0x750 [ 870.969885][ C0] ? ip_rcv_core+0x1270/0x1270 [ 870.974643][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 870.980263][ C0] process_backlog+0xf0b/0x1410 [ 870.985112][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 870.990747][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 870.996020][ C0] net_rx_action+0x786/0x1aa0 [ 871.000702][ C0] ? net_tx_action+0xc30/0xc30 [ 871.005458][ C0] __do_softirq+0x311/0x83d [ 871.009960][ C0] do_softirq_own_stack+0x49/0x80 [ 871.014968][ C0] [ 871.017911][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 871.023113][ C0] local_bh_enable+0x36/0x40 [ 871.027692][ C0] ip_finish_output2+0x2115/0x2610 [ 871.032793][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 871.038504][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 871.044513][ C0] __ip_finish_output+0xaa7/0xd80 [ 871.049570][ C0] ip_finish_output+0x166/0x410 [ 871.054433][ C0] ip_output+0x593/0x680 [ 871.058686][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 871.064044][ C0] ? ip_finish_output+0x410/0x410 [ 871.069083][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 871.074018][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 871.079578][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 871.084797][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 871.090001][ C0] ip_queue_xmit+0xcc/0xf0 [ 871.094426][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 871.099273][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 871.104467][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 871.110290][ C0] tcp_connect+0x4337/0x6920 [ 871.114886][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 871.120175][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 871.125387][ C0] tcp_v4_connect+0x21fd/0x2370 [ 871.130264][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 871.135195][ C0] __inet_stream_connect+0x2fb/0x1340 [ 871.140569][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 871.145974][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 871.151194][ C0] inet_stream_connect+0x101/0x180 [ 871.156309][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 871.161972][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 871.167615][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 871.173199][ C0] ? rds_tcp_state_change+0x390/0x390 [ 871.178563][ C0] rds_connect_worker+0x2a6/0x470 [ 871.183601][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 871.189666][ C0] ? rds_addr_cmp+0x200/0x200 [ 871.194329][ C0] process_one_work+0x1555/0x1f40 [ 871.199376][ C0] worker_thread+0xef6/0x2450 [ 871.204073][ C0] kthread+0x4b5/0x4f0 [ 871.208228][ C0] ? process_one_work+0x1f40/0x1f40 [ 871.213426][ C0] ? kthread_blkcg+0xf0/0xf0 [ 871.218008][ C0] ret_from_fork+0x35/0x40 [ 871.222423][ C0] Uninit was stored to memory at: [ 871.227484][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.233206][ C0] __msan_chain_origin+0x50/0x90 [ 871.238134][ C0] tcp_conn_request+0x1781/0x4d10 [ 871.243159][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.248271][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.253294][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.258672][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.263272][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.267772][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.273229][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.278069][ C0] ip_rcv+0x6cf/0x750 [ 871.282038][ C0] process_backlog+0xf0b/0x1410 [ 871.286882][ C0] net_rx_action+0x786/0x1aa0 [ 871.291549][ C0] __do_softirq+0x311/0x83d [ 871.296032][ C0] [ 871.298341][ C0] Uninit was stored to memory at: [ 871.303370][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.309106][ C0] __msan_chain_origin+0x50/0x90 [ 871.314038][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 871.319318][ C0] tcp_conn_request+0x33d7/0x4d10 [ 871.324347][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.329450][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.334460][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.339836][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.344430][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.349024][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.354500][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.359346][ C0] ip_rcv+0x6cf/0x750 [ 871.363317][ C0] process_backlog+0xf0b/0x1410 [ 871.368156][ C0] net_rx_action+0x786/0x1aa0 [ 871.372820][ C0] __do_softirq+0x311/0x83d [ 871.377299][ C0] [ 871.379609][ C0] Uninit was stored to memory at: [ 871.384632][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.390336][ C0] __msan_chain_origin+0x50/0x90 [ 871.395256][ C0] tcp_conn_request+0x1781/0x4d10 [ 871.400274][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.405391][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.410401][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.415774][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.420371][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.424880][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.430343][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.435191][ C0] ip_rcv+0x6cf/0x750 [ 871.439175][ C0] process_backlog+0xf0b/0x1410 [ 871.444030][ C0] net_rx_action+0x786/0x1aa0 [ 871.448709][ C0] __do_softirq+0x311/0x83d [ 871.453195][ C0] [ 871.455592][ C0] Uninit was stored to memory at: [ 871.460634][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.466354][ C0] __msan_chain_origin+0x50/0x90 [ 871.471279][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 871.476549][ C0] tcp_conn_request+0x33d7/0x4d10 [ 871.481565][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.486668][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.491697][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.497060][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.501647][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.506147][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.511605][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.516453][ C0] ip_rcv+0x6cf/0x750 [ 871.520532][ C0] process_backlog+0xf0b/0x1410 [ 871.525512][ C0] net_rx_action+0x786/0x1aa0 [ 871.530185][ C0] __do_softirq+0x311/0x83d [ 871.534666][ C0] [ 871.536996][ C0] Uninit was stored to memory at: [ 871.542024][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.547730][ C0] __msan_chain_origin+0x50/0x90 [ 871.552655][ C0] tcp_conn_request+0x1781/0x4d10 [ 871.557690][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.562810][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.567827][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.573192][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.577778][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.582271][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.587722][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.592565][ C0] ip_rcv+0x6cf/0x750 [ 871.596537][ C0] process_backlog+0xf0b/0x1410 [ 871.601372][ C0] net_rx_action+0x786/0x1aa0 [ 871.606035][ C0] __do_softirq+0x311/0x83d [ 871.610528][ C0] [ 871.612839][ C0] Uninit was stored to memory at: [ 871.617851][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.623557][ C0] __msan_chain_origin+0x50/0x90 [ 871.628485][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 871.633755][ C0] tcp_conn_request+0x33d7/0x4d10 [ 871.639374][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.644471][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.649480][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.654927][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.659505][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.664120][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.669574][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.674420][ C0] ip_rcv+0x6cf/0x750 [ 871.678405][ C0] process_backlog+0xf0b/0x1410 [ 871.683268][ C0] net_rx_action+0x786/0x1aa0 [ 871.687946][ C0] __do_softirq+0x311/0x83d [ 871.692446][ C0] [ 871.694757][ C0] Uninit was stored to memory at: [ 871.699781][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 871.705495][ C0] __msan_chain_origin+0x50/0x90 [ 871.710419][ C0] tcp_conn_request+0x1781/0x4d10 [ 871.715432][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.720526][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 871.725545][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.730916][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.735497][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.739988][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.745438][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.750291][ C0] ip_rcv+0x6cf/0x750 [ 871.754264][ C0] process_backlog+0xf0b/0x1410 [ 871.759101][ C0] net_rx_action+0x786/0x1aa0 [ 871.763764][ C0] __do_softirq+0x311/0x83d [ 871.768245][ C0] [ 871.770555][ C0] Uninit was created at: [ 871.774785][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 871.780401][ C0] kmsan_alloc_page+0x12a/0x310 [ 871.785254][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 871.790791][ C0] alloc_pages_current+0x67d/0x990 [ 871.795900][ C0] alloc_slab_page+0x111/0x12f0 [ 871.800760][ C0] new_slab+0x2bc/0x1130 [ 871.804987][ C0] ___slab_alloc+0x1533/0x1f30 [ 871.809733][ C0] kmem_cache_alloc+0xb23/0xd70 [ 871.814570][ C0] inet_reqsk_alloc+0xac/0x830 [ 871.819316][ C0] tcp_conn_request+0x753/0x4d10 [ 871.824238][ C0] tcp_v4_conn_request+0x19b/0x240 [ 871.829345][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 871.834702][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 871.839293][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 871.843801][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 871.849264][ C0] ip_local_deliver+0x62a/0x7c0 [ 871.854206][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 871.859051][ C0] ip_list_rcv+0x8eb/0x950 [ 871.863464][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 871.869607][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 871.875834][ C0] napi_complete_done+0x2ef/0xb60 [ 871.880855][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 871.886212][ C0] virtnet_poll+0x1468/0x19f0 [ 871.890875][ C0] net_rx_action+0x786/0x1aa0 [ 871.895541][ C0] __do_softirq+0x311/0x83d 05:13:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:48 executing program 3: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:13:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) munlockall() 05:13:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:48 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) 05:13:48 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:48 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:49 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) 05:13:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/506], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 05:13:49 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:13:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0) 05:13:50 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) [ 875.153852][T21872] BTRFS error (device loop2): superblock checksum mismatch [ 875.178360][T21872] BTRFS error (device loop2): open_ctree failed 05:13:51 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=.']) 05:13:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 05:13:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000880)={0xb, @vbi}) 05:13:51 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:52 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x11}, 0x10) 05:13:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) 05:13:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8d2586a7172a6452ce679e50263d1652d0a0634d937c5ac5573f9c6e3316f900c881b818e26ca9bafd2ea2ecaf21a347b91001fbd26f20ad9a3a5807d01f477dfc91bf7f96532ace323c7f8342381b4e", 0x50}, {&(0x7f00000004c0)="6319e6ae3152883e30b8129f75395edf432201ff03e0a2ed13", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000005c0)="e27f9718b1675965bc4c56aff2a754939b6cd68ff1083fe1ede974c1719ebfac4aa1a8348618683089e5b780fbf39bd3779f5d3fc677e4b8401bdf5a1d86ab397cf9c8d2f7912103a4251dc14c86395a7d6c7a047428f378a3ceb04c74e5ea969c4657d932270e", 0x67}, {&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f96", 0x7b}, {&(0x7f0000000ac0)="5e80c36f136c7c962ab19a752dda6e54053869b6032b091e08ada9126ab8bdacd32b07530be715f077a3cdd86f213a8b0bcdb79baf04e636f7efc169ae6a8a9851dc82d6ea96f753529040b84e198317641e283a557981394ae30107799ae62f2e613b59bcb690a9dbfe8acadd444718151042686b0c060c781102500877433539c6ebc3289618e577a51e24126a8c512c4e40d5caeae1962c4e4f9b", 0x9c}, {&(0x7f0000001340)="4a5ee29babc909e40d9fbc8f433dd22b6874a1798767227fbfd665a8d762c85ec34bc8ad708c87fa90f24dbf8272afcd40f1010257a23e1f51010c91727e597e454a5ce26a4c6b813bed89822978f86e8bd448211290e36f3d61dc3f33daeba4ff2ea7ccffbcdb189a174b6610eec156b834c9463c5e3a8de549f51ea0a318f8845f905da3d14eec52710948c1ba14651f9acb256a99aeee66d4632b7bf4c3727b1fa9b15aa6957537a2305f9b6eec417e536c381f8b0777c818f594d85e95a9d82ed2c6cfd1c42722494a8e2ab46598db075d5c5d1f6a385d0c638b57c39bbc6d1675dbedfeb1beec2f3d", 0xeb}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda6, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)={0x470, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x425, 0xe, "43f3f9fd2bfaaa84c6f656fafebb3d1ca2ddfc9bb93dc947aeca7d749dfea348c5ea3b7ea3a961616411539d7ff91bf927fa2adadadfd9b29965313438a2d74d0d69f354db5af3934e32262e0773e068087424c9b0e2de39ef8e4b8a6865558063c9b0654b65864c2d16d0568d70f4a00f81b65696e3f36dc4b61bb310550f4ee95a4b2d2315f9d023fd960a2475ba6093c08f55a211b9011ee1989b55f14cdd8ff8150eed70d4af68ed364bacc9077b078ae105b65ea8ddde1b8039cc8c5a725c02bef585ad403d37399610316a7ea86800383b229127f9bb5282086f2c3adb503852732245b5dcb9d8522d9ab5db9d71c5d09b3f0fa448eedcae3b9590d396d982397bd020a5d3588d8667bbc154103ff81f4c3ae4d7b5c442f58e7a89202f64893693a7595f511eb2a3129d32d7fe4d57ca4d94ec1e3126cdb0e12d8cc30c06efd6197167068b2a9905407e6afbf0f783a23a08c8df3c005fd864a931d75ccd3a4a1c0f85143b3cc7a1759c45c7ddb38f0bbc6be1a24b0a87b12d79368783673bc929e93594ba9162c8deac704892e657df727806d806086e4fab78af24d0db0bd25dbb8a32825dbc5b5480fbbf6078ba7d60fabaaea7cdb8b6cb7059266898c7c1c9044d5fdc11f0f1bbca2e5e443394ab3af2b1875385d3e53007c1c38a6a4ee4f7a51d984c7b06bf2d7ba5e43ec46fd76d87d93fd768a11f9fd3d4d721b3bd7c0694f1ccf0f7b4c3c89cb36d3a4d68dbb8fd9dc85fc29ac00c7431005e9734dac1fa2f88e6affaf956fbdc7519adc2447fa61ecc50b9562cf1710a61c78db04d954f97774a55c84ead300ec1e959087bd93c8225e538dae2fdcea4c03ee3f081cd35b24ca5335659d61fe64d793ac9d50459d8cdc205ba3c3f74408d8dc8ef0dae65cc43075d5e243027952fae7d9115a409c2e72e20c396018183bd55fbdaabbbcc6b9926382f9d571e58182c44ffd5834099c32210a847c4bad57c23292820c8c68106dcbe9d0f443b65fa35e94f1e57acf8ba23922da40111da7c489f7ec2ce50ec81ab511bde09a6c222564bfaa487085e1fb72e14a2141ec8827336da7dc4dd5c88a8c59eeccc68da4fdfac94c233653dceaa0b78ee8f55f626c93d0b5d61653edb009959abf277f3da685ecf70fd53212943393203698335b8c651003666c55cfb86280b83c6a74da8d38d5e4c8da4f4df65270403e43e04a49a6c92834bf9e2567e73be429dbf22b40036033dbbb20c6711e828e4d45f3f16b102705c7c5db92aeb75a9ccd9714b3edae4933ca19b84fe6ad40e4052bdeaa1369e54ab870b104e11c72503156b7c74b5d89e14b383aba89a8510934688f5b4e5668f1ce40954d500eab21de40981b32fb235e58baa69cd11646fcb897ac3e96171b379078d41b34c865b0b5072596c63a07ff03bd528f28a1aa1c656b9ca93fd621d575f113be07c748a682210de29fb2eb33a787f8c0356607c695d258e43e7a7"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0x0, 0x0, 0x0]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}]}, 0x470}}, 0x0) 05:13:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 05:13:52 executing program 2: mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() 05:13:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) 05:13:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) 05:13:55 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000005c0)="e27f9718b1675965bc4c56aff2a754939b6cd68ff1083fe1ede974c1719ebfac4aa1a8348618683089e5b780fbf39bd3779f5d3fc677e4b8401bdf5a1d86ab397cf9c8d2f7912103a4251dc14c86395a7d6c7a047428f378a3ceb04c74e5ea969c4657d932270e", 0x67}, {&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f96", 0x7b}, {&(0x7f0000000ac0)="5e80c36f136c7c962ab19a752dda6e54053869b6032b091e08ada9126ab8bdacd32b07530be715f077a3cdd86f213a8b0bcdb79baf04e636f7efc169ae6a8a9851dc82d6ea96f753529040b84e198317641e283a557981394ae30107799ae62f2e613b59bcb690a9dbfe8acadd444718151042686b0c060c781102500877433539c6ebc3289618e577a51e24126a8c512c4e40d5caeae1962c4e4f9b", 0x9c}, {&(0x7f0000001340)="4a5ee29babc909e40d9fbc8f433dd22b6874a1798767227fbfd665a8d762c85ec34bc8ad708c87fa90f24dbf8272afcd40f1010257a23e1f51010c91727e597e454a5ce26a4c6b813bed89822978f86e8bd448211290e36f3d61dc3f33daeba4ff2ea7ccffbcdb189a174b6610eec156b834c9463c5e3a8de549f51ea0a318f8845f905da3d14eec527109", 0x8b}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda6, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)={0x3dc, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x3b1, 0xe, "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"}]}, 0x3dc}}, 0x0) 05:13:55 executing program 2: mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() 05:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2d) 05:13:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) 05:13:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:58 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:13:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:58 executing program 3: fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) 05:13:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101}, 0x14}}, 0x0) 05:13:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000500) 05:13:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) [ 882.664742][ T32] audit: type=1804 audit(1584335638.724:135): pid=21990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir357302563/syzkaller.cMsRNt/494/cgroup.controllers" dev="sda1" ino=16545 res=1 05:13:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:13:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:13:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) 05:13:59 executing program 4: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:13:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() [ 883.968561][ C1] not chained 250000 origins [ 883.973227][ C1] CPU: 1 PID: 11674 Comm: kworker/u4:0 Not tainted 5.6.0-rc2-syzkaller #0 [ 883.981748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.991817][ C1] Workqueue: krdsd rds_connect_worker [ 883.997189][ C1] Call Trace: [ 884.000477][ C1] [ 884.003362][ C1] dump_stack+0x1c9/0x220 [ 884.007819][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 884.013574][ C1] ? xfrm_lookup_route+0x2c1/0x370 [ 884.018715][ C1] ? ip_route_output_flow+0x35a/0x3d0 [ 884.024106][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.029315][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.034525][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 884.040346][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 884.046515][ C1] ? tcp_select_initial_window+0x60d/0x6c0 [ 884.052375][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.057584][ C1] __msan_chain_origin+0x50/0x90 [ 884.062537][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 884.067851][ C1] tcp_conn_request+0x33d7/0x4d10 [ 884.072931][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.078148][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.083364][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.088514][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 884.093555][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 884.098849][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.104247][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.109461][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 884.115460][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 884.121557][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.126777][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.131390][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.135961][ C1] ? tcp_filter+0xf0/0xf0 [ 884.140296][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.145878][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.150753][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 884.155786][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 884.161440][ C1] ip_rcv+0x6cf/0x750 [ 884.165448][ C1] ? ip_rcv_core+0x1270/0x1270 [ 884.170218][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 884.175865][ C1] process_backlog+0xf0b/0x1410 [ 884.180756][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.185971][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 884.191659][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 884.196969][ C1] net_rx_action+0x786/0x1aa0 [ 884.201767][ C1] ? net_tx_action+0xc30/0xc30 [ 884.206555][ C1] __do_softirq+0x311/0x83d [ 884.211088][ C1] do_softirq_own_stack+0x49/0x80 [ 884.216116][ C1] [ 884.219074][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 884.224317][ C1] local_bh_enable+0x36/0x40 [ 884.228927][ C1] ip_finish_output2+0x2115/0x2610 [ 884.234071][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 884.239818][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 884.245839][ C1] __ip_finish_output+0xaa7/0xd80 [ 884.250896][ C1] ip_finish_output+0x166/0x410 [ 884.257592][ C1] ip_output+0x593/0x680 [ 884.261858][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 884.267148][ C1] ? ip_finish_output+0x410/0x410 [ 884.272186][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 884.277144][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 884.282718][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.287964][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.293185][ C1] ip_queue_xmit+0xcc/0xf0 [ 884.297616][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 884.302480][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 884.307688][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 884.313541][ C1] tcp_connect+0x4337/0x6920 [ 884.318144][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 884.323471][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.328990][ C1] tcp_v4_connect+0x21fd/0x2370 [ 884.333909][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 884.338861][ C1] __inet_stream_connect+0x2fb/0x1340 [ 884.344248][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 884.349553][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.354766][ C1] inet_stream_connect+0x101/0x180 [ 884.359891][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 884.365540][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 884.371193][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 884.376525][ C1] ? rds_tcp_state_change+0x390/0x390 [ 884.381933][ C1] rds_connect_worker+0x2a6/0x470 [ 884.386965][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 884.393045][ C1] ? rds_addr_cmp+0x200/0x200 [ 884.397723][ C1] process_one_work+0x1555/0x1f40 [ 884.402779][ C1] worker_thread+0xef6/0x2450 [ 884.407487][ C1] kthread+0x4b5/0x4f0 [ 884.411552][ C1] ? process_one_work+0x1f40/0x1f40 [ 884.416761][ C1] ? kthread_blkcg+0xf0/0xf0 [ 884.421367][ C1] ret_from_fork+0x35/0x40 [ 884.425834][ C1] Uninit was stored to memory at: [ 884.430877][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.436618][ C1] __msan_chain_origin+0x50/0x90 [ 884.441558][ C1] tcp_conn_request+0x1781/0x4d10 [ 884.446587][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.451756][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 884.456786][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.462161][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.466751][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.471256][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.476719][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.481571][ C1] ip_rcv+0x6cf/0x750 [ 884.485650][ C1] process_backlog+0xf0b/0x1410 [ 884.490506][ C1] net_rx_action+0x786/0x1aa0 [ 884.495186][ C1] __do_softirq+0x311/0x83d [ 884.499676][ C1] [ 884.501999][ C1] Uninit was stored to memory at: [ 884.507028][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.512745][ C1] __msan_chain_origin+0x50/0x90 [ 884.517685][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 884.522967][ C1] tcp_conn_request+0x33d7/0x4d10 [ 884.527993][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.533104][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 884.538126][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.543500][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.548111][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.552617][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.558073][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.562925][ C1] ip_rcv+0x6cf/0x750 [ 884.566918][ C1] process_backlog+0xf0b/0x1410 [ 884.571772][ C1] net_rx_action+0x786/0x1aa0 [ 884.576452][ C1] __do_softirq+0x311/0x83d [ 884.580944][ C1] [ 884.583267][ C1] Uninit was stored to memory at: [ 884.588430][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.594157][ C1] __msan_chain_origin+0x50/0x90 [ 884.599117][ C1] tcp_conn_request+0x1781/0x4d10 [ 884.604167][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.609286][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 884.614402][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.619775][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.624376][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.628879][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.634338][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.639209][ C1] ip_rcv+0x6cf/0x750 [ 884.643368][ C1] process_backlog+0xf0b/0x1410 [ 884.648664][ C1] net_rx_action+0x786/0x1aa0 [ 884.653351][ C1] __do_softirq+0x311/0x83d [ 884.657932][ C1] [ 884.660257][ C1] Uninit was stored to memory at: [ 884.665295][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.671068][ C1] __msan_chain_origin+0x50/0x90 [ 884.676018][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 884.681318][ C1] tcp_conn_request+0x33d7/0x4d10 [ 884.686347][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.691542][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.696919][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.701510][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.706101][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.711567][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.716425][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 884.721326][ C1] ip_list_rcv+0x8eb/0x950 [ 884.725747][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 884.731904][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 884.738180][ C1] napi_complete_done+0x2ef/0xb60 [ 884.743208][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 884.748581][ C1] virtnet_poll+0x1468/0x19f0 [ 884.753264][ C1] net_rx_action+0x786/0x1aa0 [ 884.757949][ C1] __do_softirq+0x311/0x83d [ 884.762441][ C1] [ 884.764783][ C1] Uninit was stored to memory at: [ 884.769831][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.776953][ C1] __msan_chain_origin+0x50/0x90 [ 884.781902][ C1] tcp_conn_request+0x1781/0x4d10 [ 884.787589][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.793332][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.799321][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.804000][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.808515][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.814690][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.819897][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 884.824755][ C1] ip_list_rcv+0x8eb/0x950 [ 884.830239][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 884.836487][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 884.842836][ C1] napi_complete_done+0x2ef/0xb60 [ 884.847959][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 884.853945][ C1] virtnet_poll+0x1468/0x19f0 [ 884.858798][ C1] net_rx_action+0x786/0x1aa0 [ 884.863502][ C1] __do_softirq+0x311/0x83d [ 884.869123][ C1] [ 884.872944][ C1] Uninit was stored to memory at: [ 884.878757][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.884483][ C1] __msan_chain_origin+0x50/0x90 [ 884.889520][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 884.894817][ C1] tcp_conn_request+0x33d7/0x4d10 [ 884.900283][ C1] tcp_v4_conn_request+0x19b/0x240 [ 884.905399][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 884.912356][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 884.917526][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 884.922555][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 884.928893][ C1] ip_local_deliver+0x62a/0x7c0 [ 884.933841][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 884.938836][ C1] ip_list_rcv+0x8eb/0x950 [ 884.943782][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 884.950031][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 884.956364][ C1] napi_complete_done+0x2ef/0xb60 [ 884.961405][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 884.966784][ C1] virtnet_poll+0x1468/0x19f0 [ 884.971560][ C1] net_rx_action+0x786/0x1aa0 [ 884.976946][ C1] __do_softirq+0x311/0x83d [ 884.981879][ C1] [ 884.984208][ C1] Uninit was stored to memory at: [ 884.989851][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 884.995844][ C1] __msan_chain_origin+0x50/0x90 [ 885.000878][ C1] tcp_conn_request+0x1781/0x4d10 [ 885.006081][ C1] tcp_v4_conn_request+0x19b/0x240 [ 885.011212][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 885.018255][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 885.024077][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 885.028589][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 885.034051][ C1] ip_local_deliver+0x62a/0x7c0 [ 885.038990][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 885.048894][ C1] ip_list_rcv+0x8eb/0x950 [ 885.053323][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 885.059500][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 885.067538][ C1] napi_complete_done+0x2ef/0xb60 [ 885.072585][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 885.078488][ C1] virtnet_poll+0x1468/0x19f0 [ 885.083264][ C1] net_rx_action+0x786/0x1aa0 [ 885.088121][ C1] __do_softirq+0x311/0x83d [ 885.092619][ C1] [ 885.094952][ C1] Uninit was created at: [ 885.099929][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 885.105849][ C1] kmsan_alloc_page+0x12a/0x310 [ 885.110908][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 885.116476][ C1] alloc_pages_current+0x67d/0x990 [ 885.121595][ C1] alloc_slab_page+0x111/0x12f0 [ 885.128537][ C1] new_slab+0x2bc/0x1130 [ 885.132783][ C1] ___slab_alloc+0x1533/0x1f30 [ 885.137551][ C1] kmem_cache_alloc+0xb23/0xd70 [ 885.142785][ C1] inet_reqsk_alloc+0xac/0x830 [ 885.147642][ C1] tcp_conn_request+0x753/0x4d10 [ 885.152777][ C1] tcp_v4_conn_request+0x19b/0x240 [ 885.157890][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 885.163554][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 885.168696][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 885.173206][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 885.178839][ C1] ip_local_deliver+0x62a/0x7c0 [ 885.185035][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 885.189922][ C1] ip_list_rcv+0x8eb/0x950 [ 885.194975][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 885.201413][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 885.207669][ C1] napi_complete_done+0x2ef/0xb60 [ 885.213227][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 885.218784][ C1] virtnet_poll+0x1468/0x19f0 [ 885.223662][ C1] net_rx_action+0x786/0x1aa0 [ 885.228362][ C1] __do_softirq+0x311/0x83d 05:14:01 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:14:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x4008ae06, 0x0) 05:14:01 executing program 2: syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6100, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:14:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:01 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:14:02 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) restart_syscall() r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0xfffffffffffffd54}, 0xfffffe36) 05:14:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='coredump_filter\x00') write$cgroup_subtree(r0, 0x0, 0x7) 05:14:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:02 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@smackfshat={'smackfshat', 0x3d, '-eth1ppp0'}}]}) 05:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x82) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000f96000)={0x8001, 0x8005}, 0x8) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x75, 0x0, &(0x7f000095dffc)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000600)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}]}, 0xc0}}, 0x0) 05:14:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x75}}], 0x1, 0x0) [ 886.954572][T22068] tmpfs: Unknown parameter 'smackfshat' [ 887.072639][T22068] tmpfs: Unknown parameter 'smackfshat' 05:14:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet(0x2, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x5]}, &(0x7f0000000080), 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x511901, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1e) 05:14:05 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x86a) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000340)={{0x0, 0x0, @reserved="c6999cbcba78bc3439a0a707f481f4484aca964001c48c44b2ef4d958cf7e822"}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) 05:14:05 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:14:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 889.431070][T22105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 05:14:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a) 05:14:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:14:05 executing program 0: syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 890.049104][T22118] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 890.057922][T22118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 890.105608][T22118] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 890.116389][T22118] attempt to access beyond end of device [ 890.122456][T22118] loop0: rw=12288, want=8200, limit=20 [ 890.128444][T22118] attempt to access beyond end of device [ 890.134466][T22118] loop0: rw=12288, want=12296, limit=20 [ 890.140171][T22118] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 05:14:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x25) 05:14:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) [ 890.601964][T22118] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 890.610506][T22118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 890.665205][T22118] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 890.676136][T22118] attempt to access beyond end of device [ 890.682242][T22118] loop0: rw=12288, want=8200, limit=20 [ 890.689339][T22118] attempt to access beyond end of device [ 890.695228][T22118] loop0: rw=12288, want=12296, limit=20 [ 890.700958][T22118] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 05:14:06 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:14:07 executing program 0: syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:14:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='setgroups\x00') fanotify_mark(r0, 0x2, 0x8000060, 0xffffffffffffffff, 0x0) [ 891.612224][T22163] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 891.620062][T22163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 891.666309][T22163] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 891.675947][T22163] attempt to access beyond end of device [ 891.681656][T22163] loop0: rw=12288, want=8200, limit=20 [ 891.687557][T22163] attempt to access beyond end of device [ 891.693432][T22163] loop0: rw=12288, want=12296, limit=20 [ 891.699132][T22163] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 05:14:08 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:14:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:14:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 05:14:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x2}) 05:14:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040280ecdb4cb92e0a480e000d000000e8bd6efb250400000e000200404e02ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 05:14:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r3) 05:14:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) 05:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:11 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}}, 0x0) tkill(r0, 0x16) 05:14:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:11 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}, 0x10) 05:14:11 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0xf9}, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x4}, {}, {}, {0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:14:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) 05:14:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:12 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x0, 0x0, 0x0) 05:14:12 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 897.715235][ C0] not chained 260000 origins [ 897.719878][ C0] CPU: 0 PID: 12834 Comm: kworker/u4:1 Not tainted 5.6.0-rc2-syzkaller #0 [ 897.728475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.738649][ C0] Workqueue: krdsd rds_connect_worker [ 897.744021][ C0] Call Trace: [ 897.747312][ C0] [ 897.750167][ C0] dump_stack+0x1c9/0x220 [ 897.754509][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 897.760289][ C0] ? should_fail+0x72/0x9e0 [ 897.764967][ C0] ? ret_from_fork+0x35/0x40 [ 897.769661][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 897.775748][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 897.780695][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.785888][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.791485][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 897.797358][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 897.802481][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 897.808518][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 897.814694][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 897.821458][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.826957][ C0] __msan_chain_origin+0x50/0x90 [ 897.832017][ C0] tcp_conn_request+0x174b/0x4d10 [ 897.837097][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.842333][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.847656][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 897.853557][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.859208][ C0] tcp_v4_conn_request+0x19b/0x240 [ 897.864482][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 897.869779][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 897.876758][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 897.882578][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.887880][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 897.893689][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 897.900027][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 897.905224][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 897.910099][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 897.914678][ C0] ? tcp_filter+0xf0/0xf0 [ 897.919025][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 897.924502][ C0] ip_local_deliver+0x62a/0x7c0 [ 897.929404][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 897.934634][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 897.940268][ C0] ip_rcv+0x6cf/0x750 [ 897.944262][ C0] ? ip_rcv_core+0x1270/0x1270 [ 897.949214][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 897.954860][ C0] process_backlog+0xf0b/0x1410 [ 897.959813][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 897.965670][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 897.970983][ C0] net_rx_action+0x786/0x1aa0 [ 897.975767][ C0] ? net_tx_action+0xc30/0xc30 [ 897.980526][ C0] __do_softirq+0x311/0x83d [ 897.985033][ C0] do_softirq_own_stack+0x49/0x80 [ 897.990585][ C0] [ 897.993556][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 897.998747][ C0] local_bh_enable+0x36/0x40 [ 898.003431][ C0] ip_finish_output2+0x2115/0x2610 [ 898.008585][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 898.014314][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 898.020680][ C0] __ip_finish_output+0xaa7/0xd80 [ 898.025898][ C0] ip_finish_output+0x166/0x410 [ 898.030856][ C0] ip_output+0x593/0x680 [ 898.035210][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 898.040503][ C0] ? ip_finish_output+0x410/0x410 [ 898.045528][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 898.050462][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 898.056271][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 898.061697][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 898.066938][ C0] ip_queue_xmit+0xcc/0xf0 [ 898.071484][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 898.077043][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 898.082516][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 898.088376][ C0] tcp_connect+0x4337/0x6920 [ 898.092978][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 898.098289][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 898.103545][ C0] tcp_v4_connect+0x21fd/0x2370 [ 898.108873][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 898.113819][ C0] __inet_stream_connect+0x2fb/0x1340 [ 898.119191][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 898.124485][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 898.129693][ C0] inet_stream_connect+0x101/0x180 [ 898.134979][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 898.140805][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 898.146445][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 898.151646][ C0] ? rds_tcp_state_change+0x390/0x390 [ 898.157048][ C0] rds_connect_worker+0x2a6/0x470 [ 898.162078][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 898.168153][ C0] ? rds_addr_cmp+0x200/0x200 [ 898.172941][ C0] process_one_work+0x1555/0x1f40 [ 898.178360][ C0] worker_thread+0xef6/0x2450 [ 898.183870][ C0] kthread+0x4b5/0x4f0 [ 898.187947][ C0] ? process_one_work+0x1f40/0x1f40 [ 898.193248][ C0] ? kthread_blkcg+0xf0/0xf0 [ 898.197833][ C0] ret_from_fork+0x35/0x40 [ 898.202247][ C0] Uninit was stored to memory at: [ 898.207364][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.213097][ C0] __msan_chain_origin+0x50/0x90 [ 898.218387][ C0] tcp_conn_request+0x1781/0x4d10 [ 898.223526][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.228797][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.233811][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.239197][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.243889][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.248399][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.253942][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.258891][ C0] ip_rcv+0x6cf/0x750 [ 898.263921][ C0] process_backlog+0xf0b/0x1410 [ 898.269108][ C0] net_rx_action+0x786/0x1aa0 [ 898.273794][ C0] __do_softirq+0x311/0x83d [ 898.278299][ C0] [ 898.280622][ C0] Uninit was stored to memory at: [ 898.285654][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.291806][ C0] __msan_chain_origin+0x50/0x90 [ 898.296754][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 898.302313][ C0] tcp_conn_request+0x33d7/0x4d10 [ 898.307400][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.312867][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.317991][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.324250][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.328937][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.333524][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.338993][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.343833][ C0] ip_rcv+0x6cf/0x750 [ 898.347817][ C0] process_backlog+0xf0b/0x1410 [ 898.352663][ C0] net_rx_action+0x786/0x1aa0 [ 898.357765][ C0] __do_softirq+0x311/0x83d [ 898.362254][ C0] [ 898.364654][ C0] Uninit was stored to memory at: [ 898.369955][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.376379][ C0] __msan_chain_origin+0x50/0x90 [ 898.381669][ C0] tcp_conn_request+0x1781/0x4d10 [ 898.386705][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.392118][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.397646][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.403200][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.407959][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.412490][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.418026][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.422974][ C0] ip_rcv+0x6cf/0x750 [ 898.426961][ C0] process_backlog+0xf0b/0x1410 [ 898.431825][ C0] net_rx_action+0x786/0x1aa0 [ 898.436501][ C0] __do_softirq+0x311/0x83d [ 898.440998][ C0] [ 898.443688][ C0] Uninit was stored to memory at: [ 898.448847][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.454649][ C0] __msan_chain_origin+0x50/0x90 [ 898.459780][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 898.465052][ C0] tcp_conn_request+0x33d7/0x4d10 [ 898.470077][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.475192][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.480301][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.485665][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.490244][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.494888][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.500462][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.505693][ C0] ip_rcv+0x6cf/0x750 [ 898.509776][ C0] process_backlog+0xf0b/0x1410 [ 898.516100][ C0] net_rx_action+0x786/0x1aa0 [ 898.520774][ C0] __do_softirq+0x311/0x83d [ 898.525259][ C0] [ 898.527574][ C0] Uninit was stored to memory at: [ 898.532590][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.538313][ C0] __msan_chain_origin+0x50/0x90 [ 898.543672][ C0] tcp_conn_request+0x1781/0x4d10 [ 898.548688][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.553791][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.558976][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.564509][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.569302][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.573794][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.579256][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.584265][ C0] ip_rcv+0x6cf/0x750 [ 898.588329][ C0] process_backlog+0xf0b/0x1410 [ 898.593308][ C0] net_rx_action+0x786/0x1aa0 [ 898.598341][ C0] __do_softirq+0x311/0x83d [ 898.602828][ C0] [ 898.605425][ C0] Uninit was stored to memory at: [ 898.610452][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.616158][ C0] __msan_chain_origin+0x50/0x90 [ 898.621298][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 898.626578][ C0] tcp_conn_request+0x33d7/0x4d10 [ 898.631769][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.636960][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.642068][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.647441][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.652045][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.656547][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.662167][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.667104][ C0] ip_rcv+0x6cf/0x750 [ 898.671434][ C0] process_backlog+0xf0b/0x1410 [ 898.676286][ C0] net_rx_action+0x786/0x1aa0 [ 898.681038][ C0] __do_softirq+0x311/0x83d [ 898.685536][ C0] [ 898.687962][ C0] Uninit was stored to memory at: [ 898.693102][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 898.699056][ C0] __msan_chain_origin+0x50/0x90 [ 898.703995][ C0] tcp_conn_request+0x1781/0x4d10 [ 898.709137][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.714266][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 898.719302][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.724756][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.729538][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.734052][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.739882][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.744735][ C0] ip_rcv+0x6cf/0x750 [ 898.748708][ C0] process_backlog+0xf0b/0x1410 [ 898.753550][ C0] net_rx_action+0x786/0x1aa0 [ 898.758313][ C0] __do_softirq+0x311/0x83d [ 898.762794][ C0] [ 898.765107][ C0] Uninit was created at: [ 898.769336][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 898.774955][ C0] kmsan_alloc_page+0x12a/0x310 [ 898.779796][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 898.785328][ C0] alloc_pages_current+0x67d/0x990 [ 898.790424][ C0] alloc_slab_page+0x111/0x12f0 [ 898.795264][ C0] new_slab+0x2bc/0x1130 [ 898.799492][ C0] ___slab_alloc+0x1533/0x1f30 [ 898.804238][ C0] kmem_cache_alloc+0xb23/0xd70 [ 898.809096][ C0] inet_reqsk_alloc+0xac/0x830 [ 898.813855][ C0] tcp_conn_request+0x753/0x4d10 [ 898.818791][ C0] tcp_v4_conn_request+0x19b/0x240 [ 898.823893][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 898.829255][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 898.834278][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 898.839572][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 898.845220][ C0] ip_local_deliver+0x62a/0x7c0 [ 898.850063][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 898.854905][ C0] ip_list_rcv+0x8eb/0x950 [ 898.859332][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 898.865583][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 898.872082][ C0] napi_complete_done+0x2ef/0xb60 [ 898.877105][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 898.882469][ C0] virtnet_poll+0x1468/0x19f0 [ 898.887152][ C0] net_rx_action+0x786/0x1aa0 [ 898.891818][ C0] __do_softirq+0x311/0x83d 05:14:15 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:14:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8d2586a7172a6452ce679e50263d1652d0a0634d937c5ac5573f9c6e3316f900c881b818e26ca9bafd2ea2ecaf21a347b91001fbd26f20ad9a3a5807d01f477dfc91bf7f96532ace323c7f8342381b4e", 0x50}, {&(0x7f00000004c0)="6319e6ae3152883e30b8129f75395edf432201ff03e0a2ed13", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000005c0)="e27f9718b1675965bc4c56aff2a754939b6cd68ff1083fe1ede974c1719ebfac4aa1a8348618683089e5b780fbf39bd3779f5d3fc677e4b8401bdf5a1d86ab397cf9c8d2f7912103a4251dc14c86395a7d6c7a047428f378a3ceb04c74e5ea969c4657d932270e", 0x67}, {&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f96", 0x7b}, {&(0x7f0000000ac0)="5e80c36f136c7c962ab19a752dda6e54053869b6032b091e08ada9126ab8bdacd32b07530be715f077a3cdd86f213a8b0bcdb79baf04e636f7efc169ae6a8a9851dc82d6ea96f753529040b84e198317641e283a557981394ae30107799ae62f2e613b59bcb690a9dbfe8acadd444718151042686b0c060c781102500877433539c6ebc3289618e577a51e24126a8c512c4e40d5caeae1962c4e4f9b", 0x9c}, {&(0x7f0000001340)="4a5ee29babc909e40d9fbc8f433dd22b6874a1798767227fbfd665a8d762c85ec34bc8", 0x23}], 0x4}}], 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)={0x344, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x319, 0xe, "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"}]}, 0x344}}, 0x0) 05:14:15 executing program 4: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x4}, {}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:14:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:15 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:15 executing program 3: r0 = fsopen(&(0x7f0000000040)='bfs\x00', 0x0) fsmount(r0, 0x0, 0x0) 05:14:15 executing program 0: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:15 executing program 3: kexec_load(0x0, 0x1, &(0x7f0000000780)=[{&(0x7f0000000240)}], 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 05:14:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:18 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:14:18 executing program 3: syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@errors_remount='errors=remount-ro'}]}) 05:14:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:18 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) munlockall() 05:14:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 05:14:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000000007, 0x0) 05:14:19 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x4}, {}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x1}}, 0x4c, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:14:19 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:21 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x16) 05:14:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:14:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:14:21 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)) 05:14:22 executing program 4: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x42) 05:14:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:14:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lsetxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@ng, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 05:14:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:25 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x8de38a14d309fd01, 0x0, 0x0) tkill(r0, 0x16) 05:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, 0x0) 05:14:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000007, 0x0) 05:14:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:25 executing program 2: mlockall(0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() 05:14:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:25 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000880)={0x0, @vbi}) 05:14:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) 05:14:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x0, 0x0) 05:14:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007051a00004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32=r2, @ANYBLOB="d7c5d2150000000000000000"], 0x24}}, 0x4) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 910.859541][ C1] not chained 270000 origins [ 910.864285][ C1] CPU: 1 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 910.872764][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.882816][ C1] Workqueue: krdsd rds_connect_worker [ 910.888176][ C1] Call Trace: [ 910.891484][ C1] [ 910.894373][ C1] dump_stack+0x1c9/0x220 [ 910.898790][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 910.904506][ C1] ? should_fail+0x72/0x9e0 [ 910.908994][ C1] ? ret_from_fork+0x35/0x40 [ 910.913573][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 910.919620][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 910.924588][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.929782][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.934962][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 910.940775][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 910.945866][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 910.951654][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 910.957788][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 910.963096][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.968304][ C1] __msan_chain_origin+0x50/0x90 [ 910.973223][ C1] tcp_conn_request+0x174b/0x4d10 [ 910.978273][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.983464][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.988666][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 910.994475][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 910.999675][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.004784][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 911.009799][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 911.015069][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.020427][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.025612][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 911.031438][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 911.037496][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.042698][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.047288][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.051806][ C1] ? tcp_filter+0xf0/0xf0 [ 911.056116][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.061606][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.066449][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 911.071451][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 911.077069][ C1] ip_rcv+0x6cf/0x750 [ 911.081042][ C1] ? ip_rcv_core+0x1270/0x1270 [ 911.085802][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 911.091428][ C1] process_backlog+0xf0b/0x1410 [ 911.096284][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 911.101919][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 911.107186][ C1] net_rx_action+0x786/0x1aa0 [ 911.111855][ C1] ? net_tx_action+0xc30/0xc30 [ 911.116614][ C1] __do_softirq+0x311/0x83d [ 911.121113][ C1] do_softirq_own_stack+0x49/0x80 [ 911.126145][ C1] [ 911.129208][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 911.134410][ C1] local_bh_enable+0x36/0x40 [ 911.138987][ C1] ip_finish_output2+0x2115/0x2610 [ 911.144093][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 911.149796][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 911.155771][ C1] __ip_finish_output+0xaa7/0xd80 [ 911.160810][ C1] ip_finish_output+0x166/0x410 [ 911.165663][ C1] ip_output+0x593/0x680 [ 911.169895][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 911.175218][ C1] ? ip_finish_output+0x410/0x410 [ 911.180223][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 911.185146][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 911.190675][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.195862][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.201045][ C1] ip_queue_xmit+0xcc/0xf0 [ 911.205447][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 911.210282][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 911.215495][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 911.221344][ C1] tcp_connect+0x4337/0x6920 [ 911.225936][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 911.231232][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.236441][ C1] tcp_v4_connect+0x21fd/0x2370 [ 911.241449][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 911.246395][ C1] __inet_stream_connect+0x2fb/0x1340 [ 911.251766][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 911.257150][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.262350][ C1] inet_stream_connect+0x101/0x180 [ 911.267452][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 911.273084][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 911.278724][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 911.283908][ C1] ? rds_tcp_state_change+0x390/0x390 [ 911.289266][ C1] rds_connect_worker+0x2a6/0x470 [ 911.294270][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 911.300347][ C1] ? rds_addr_cmp+0x200/0x200 [ 911.305006][ C1] process_one_work+0x1555/0x1f40 [ 911.310024][ C1] worker_thread+0xef6/0x2450 [ 911.314719][ C1] kthread+0x4b5/0x4f0 [ 911.318887][ C1] ? process_one_work+0x1f40/0x1f40 [ 911.324076][ C1] ? kthread_blkcg+0xf0/0xf0 [ 911.328660][ C1] ret_from_fork+0x35/0x40 [ 911.333066][ C1] Uninit was stored to memory at: [ 911.338082][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.343843][ C1] __msan_chain_origin+0x50/0x90 [ 911.348767][ C1] tcp_conn_request+0x1781/0x4d10 [ 911.353819][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.358911][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 911.363918][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.369274][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.373882][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.378367][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.383805][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.388636][ C1] ip_rcv+0x6cf/0x750 [ 911.392605][ C1] process_backlog+0xf0b/0x1410 [ 911.397452][ C1] net_rx_action+0x786/0x1aa0 [ 911.402159][ C1] __do_softirq+0x311/0x83d [ 911.406806][ C1] [ 911.409118][ C1] Uninit was stored to memory at: [ 911.414146][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.419844][ C1] __msan_chain_origin+0x50/0x90 [ 911.424773][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 911.430093][ C1] tcp_conn_request+0x33d7/0x4d10 [ 911.435112][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.440212][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 911.445225][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.450586][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.455166][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.459662][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.465127][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.469973][ C1] ip_rcv+0x6cf/0x750 [ 911.473937][ C1] process_backlog+0xf0b/0x1410 [ 911.478768][ C1] net_rx_action+0x786/0x1aa0 [ 911.483429][ C1] __do_softirq+0x311/0x83d [ 911.487901][ C1] [ 911.490207][ C1] Uninit was stored to memory at: [ 911.495215][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.500913][ C1] __msan_chain_origin+0x50/0x90 [ 911.505831][ C1] tcp_conn_request+0x1781/0x4d10 [ 911.510847][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.515948][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 911.520949][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.526300][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.530871][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.535378][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.540828][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.545656][ C1] ip_rcv+0x6cf/0x750 [ 911.549699][ C1] process_backlog+0xf0b/0x1410 [ 911.554544][ C1] net_rx_action+0x786/0x1aa0 [ 911.559203][ C1] __do_softirq+0x311/0x83d [ 911.563724][ C1] [ 911.566030][ C1] Uninit was stored to memory at: [ 911.571911][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.577617][ C1] __msan_chain_origin+0x50/0x90 [ 911.582542][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 911.587829][ C1] tcp_conn_request+0x33d7/0x4d10 [ 911.592838][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.597944][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.603299][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.607875][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.612366][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.617803][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.622639][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 911.627517][ C1] ip_list_rcv+0x8eb/0x950 [ 911.631927][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 911.638180][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 911.644415][ C1] napi_complete_done+0x2ef/0xb60 [ 911.649441][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 911.654814][ C1] virtnet_poll+0x1468/0x19f0 [ 911.659485][ C1] net_rx_action+0x786/0x1aa0 [ 911.664147][ C1] __do_softirq+0x311/0x83d [ 911.668644][ C1] [ 911.670949][ C1] Uninit was stored to memory at: [ 911.675960][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.681668][ C1] __msan_chain_origin+0x50/0x90 [ 911.686595][ C1] tcp_conn_request+0x1781/0x4d10 [ 911.691601][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.696702][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.702076][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.706643][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.711125][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.716570][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.721410][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 911.726236][ C1] ip_list_rcv+0x8eb/0x950 [ 911.730641][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 911.738211][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 911.744435][ C1] napi_complete_done+0x2ef/0xb60 [ 911.749476][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 911.754841][ C1] virtnet_poll+0x1468/0x19f0 [ 911.759514][ C1] net_rx_action+0x786/0x1aa0 [ 911.764216][ C1] __do_softirq+0x311/0x83d [ 911.768692][ C1] [ 911.771029][ C1] Uninit was stored to memory at: [ 911.776043][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.781751][ C1] __msan_chain_origin+0x50/0x90 [ 911.786676][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 911.791971][ C1] tcp_conn_request+0x33d7/0x4d10 [ 911.796977][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.802086][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.807487][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.812060][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.816544][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.821990][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.826833][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 911.831795][ C1] ip_list_rcv+0x8eb/0x950 [ 911.836271][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 911.842472][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 911.848695][ C1] napi_complete_done+0x2ef/0xb60 [ 911.853820][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 911.859228][ C1] virtnet_poll+0x1468/0x19f0 [ 911.863945][ C1] net_rx_action+0x786/0x1aa0 [ 911.868614][ C1] __do_softirq+0x311/0x83d [ 911.873129][ C1] [ 911.875444][ C1] Uninit was stored to memory at: [ 911.880520][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 911.886220][ C1] __msan_chain_origin+0x50/0x90 [ 911.891154][ C1] tcp_conn_request+0x1781/0x4d10 [ 911.896173][ C1] tcp_v4_conn_request+0x19b/0x240 [ 911.901275][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 911.906636][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 911.911216][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 911.915715][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 911.921177][ C1] ip_local_deliver+0x62a/0x7c0 [ 911.926020][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 911.930858][ C1] ip_list_rcv+0x8eb/0x950 [ 911.935366][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 911.941500][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 911.947741][ C1] napi_complete_done+0x2ef/0xb60 [ 911.952763][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 911.958127][ C1] virtnet_poll+0x1468/0x19f0 [ 911.962789][ C1] net_rx_action+0x786/0x1aa0 [ 911.967460][ C1] __do_softirq+0x311/0x83d [ 911.971932][ C1] [ 911.974236][ C1] Uninit was created at: [ 911.978461][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 911.984086][ C1] kmsan_alloc_page+0x12a/0x310 [ 911.988915][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 911.994439][ C1] alloc_pages_current+0x67d/0x990 [ 911.999541][ C1] alloc_slab_page+0x111/0x12f0 [ 912.004397][ C1] new_slab+0x2bc/0x1130 [ 912.008620][ C1] ___slab_alloc+0x1533/0x1f30 [ 912.013385][ C1] kmem_cache_alloc+0xb23/0xd70 [ 912.018237][ C1] inet_reqsk_alloc+0xac/0x830 [ 912.023016][ C1] tcp_conn_request+0x753/0x4d10 [ 912.027945][ C1] tcp_v4_conn_request+0x19b/0x240 [ 912.033035][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 912.038383][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 912.042962][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 912.047472][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 912.052933][ C1] ip_local_deliver+0x62a/0x7c0 [ 912.057764][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 912.062602][ C1] ip_list_rcv+0x8eb/0x950 [ 912.067008][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 912.073412][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 912.079639][ C1] napi_complete_done+0x2ef/0xb60 [ 912.084651][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 912.090014][ C1] virtnet_poll+0x1468/0x19f0 [ 912.094820][ C1] net_rx_action+0x786/0x1aa0 [ 912.099480][ C1] __do_softirq+0x311/0x83d 05:14:28 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x8de38a14d309fd01, 0x0, 0x0) tkill(r0, 0x16) 05:14:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) 05:14:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x0, 0x0) 05:14:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285628, &(0x7f0000000040)={0x4}) 05:14:28 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000140021010000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="080002007f0000b1"], 0x20}}, 0x0) 05:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d) 05:14:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) 05:14:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000340)=""/243) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24044809, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x0, 0x0) 05:14:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3b) 05:14:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) 05:14:29 executing program 3: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setfsgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}], {0x4, 0x3}, [{}, {}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x1}}, 0x4c, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 914.110663][ T32] audit: type=1804 audit(1584335670.164:136): pid=22494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487006792/syzkaller.T79a2Z/112/file0/file0" dev="sda1" ino=17632 res=1 05:14:31 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x8de38a14d309fd01, 0x0, 0x0) tkill(r0, 0x16) 05:14:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61) shutdown(r1, 0x1) 05:14:31 executing program 1: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(r1, 0x5452, 0x0) shutdown(r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x58c, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x5ea) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000400)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 05:14:31 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') socket$inet_tcp(0x2, 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) memfd_create(0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 05:14:31 executing program 0: io_setup(0x800, &(0x7f0000000080)) 05:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:32 executing program 0: nanosleep(&(0x7f0000000040)={0x2}, 0x0) 05:14:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/144) 05:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:14:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCSFF(r2, 0x402c4580, &(0x7f0000000200)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 918.164600][ T0] NOHZ: local_softirq_pending 08 05:14:35 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {0x0, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:14:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) 05:14:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:35 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1fe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 05:14:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000001a00)="b3f1c55199868f4e762a94e9b6f6644d0cee4949951d5befef2b8492ad19ed7309c34e3e73668ecccb3241d0af7dc96189f1ba4b16800e0b727502436814f631154f682f261da37de80687d452b2a4a8ca4cd36b8b74a9d745caf82bf70ea5ee2ce226148fd9f622b71a0a8575fcef215be7b8788eef10a1978e83d3660c3c67903a5a4e6c1bdaf6c80eb3b0f3bb8ffcaaac0c8c7536b3442fc85c7b17fd5fcf3ba7b1ce7624a6b7f2baf23f38ae670be850397de1361ff98f0503d2907be0b5aa807db38f340e07c994e4e22339b5a309a6e166df0d7fe30408095bcda83666be5bb42b99f6ca3a73b26381537a5ba086342a2529986eea32b999109604ffd8d311935633fd2ad6686b7a5fc483d3aad27bcab00a6956779f49977d78540167430643a186c155628ce26e3d57b389b5ffb283da4d965e404e83f9515c2892756ddf6cab12d3b6e726a3be4bbaec41ff118eccb39d56c52af8584bfb1cb3d42f519fe461cb56f093eae41e0079a3b9ca2542537c3fcb0f4a85d05dcbf2f208855917d840b503cc408680d1e90c76384c4b88e3da7377b33748c4ad612ceaa800f619e4a4b3d616ea65130a0662793d22b3c964723786cde6ca1e4643b76b1e7783a31385f7b1af220c05d357748f5dfe5fa864ca535fcae27897306076858d2d9e669d1e440b6f05d5f61b6f5889814df9f906d082d3976bf52bea4c39359b9bc2513ee7cb9226d89ab3ef3ff970eaa5e5362872e195944302d9715da98ec88bde8f6a53ea71f6c6203cf445a09991ce2e6550f5082fc6e31d6d6adb803b972e850ab29d49290e3ba3e03c59eab73602fc2bdde43480b9232759bfcb27c99bf5f1d6df66392da53b558d4202f28000e11e9ae9797f2745e0bf6e77cc196617c28e7481c6e2cd97db7cc6a00c49bb5491761363eec1c40e3fb589c439fd02a74e9cb4b70af717f59c3dd0990014d092724cc9846f185dae5cb55e3e021508676904d9def44b2ea98401d5a3bb3fa68d795f3c1ca275085346b090d83963b0f6ed38b9f7d0e52d5693f12b48231c058137d9aaf31255f8509fcd3172336cb858bcf4abc87cf4288b8926e86b23fba14183ebfbce201deb8bb5de9d8580bada26952662eab7a7f09c5ed8e7bc95965e31d131bff64a616a55facf2998c2eed7ff502ae291e9ecd3693a9580eebe56dbdb1d62b02fdb36b71340f53df0d35de9900914908111e25f56218ea2b8844ffa746d70bc87eacf90a44484ec0abb56f4e744e7613c6f3bd489d2c22dacce7fa31c1674114ecf5d400de55e7518fc35dc31c171e3bf76c177ab35e274d47e263f02b9dc68675561bd42eef589ccb5b3e900e312302a50c509f09841d35eb8a5ced38dab58551dbf5b782e555ea196ae472ce691377dd2a54149d9c7827ae5b09cfd42761b936a4899659f579e8d740ec4057751bd4ea6e96be2b5b3d838d5aca9da0b85591d0003c10f55a76c2b228e1919c527fe81c6d2cc0d98bbb1f5fa0f17d8853d8a2c3d1771d314f60948321a248ccf38cedd3b55d0702bf1ea99f04b6f25f94a30b213bc843f5e6680cd28f3f1769d6fa197fa6d5c90aef4e47dea43478f76403c0262a676a359fb00ff6212178552fcdb0f725bc656c5817932aa54e8c216aa3757449e02b7a6402d092c0917d1a22126ae97f86b7bb1c59bce03b46bde2dec4fc8f3f67b9bd28ea240fb47c134f490bccfa18206f8977c378bbe36b4ca1e7efbaaaa770be9af07b89f771fbc9061012c1f38eb5636f5f5f56bea5203d9a2faf5263e96b480ff628bbb78e857ea99f62d268b823e36a370f09fa245a1365241d52d670498c89713f2da4ddd1412dfe5644d692fac46102b4b286bc81b92790143a1f6ce2513be2993eb59ab0605113e345a126b6d05c4403e2d64389b5c657a2ce13233a5703e5c641d05a9a42c19a412ada73c480e6547d1a3c8ca357461993dc2b4e5f9126e4c796538c56addb6d92af4aa5242d57b40b79696c044e9b712f22570ddb1c126ee193c20825438edf93b214318073c4d272feb5f07e53434525002e54f0cac70efb56e2cec4575f2be6e60aa534d9c297447268ff6bb2ea4b017a69e31264b7d8486f3e2b21ef8b27fba6be57e01deacddb3861f1a3cd3057250fb7c78f93c956a0df2a1c684c44a86b96be8b642ea6373370ae1b7ea11c6025e828748c52c2b2c3ca6528b458549826c26f371f4310a6b72aa7f1cb1a2be383b810cc4a7db9b6fcce2d6b2f40223b17f16473817ffdb40a3799bf5a8497b2dd29fa3acd00d5c62ceb33b283e13ad23c9d2cb9e165b23179539caaf83b0b273c113b0684b9db6d173f332e1e4fa9b601a049481f391ce204174754f9def1a4106680c1b2557cc8488eab0ba4c132186ef2d7b414edcb311870a8890a74e821dab4fdec85766a2cef457df507e82a3d5e94b7042e0baa0556ca0b2747cbbb62fc0d00621f6a7982a74aa38a77b0e2b7fbf89026488ebccf6b63148ca7534a2ead7ff09e736a81ed9e6e09036ecdff42c21e8f4e7f4aa01313910a70da5b2b19a4fad626351157905b43351a3ecdfa183d1ff048d415da862b8fadc07566403442d169eff5aa439c30be9ca3cad12a3eb57736c63fb9dd090dbb734d98c97fd19d7beacfbb9166267fb1b61f3df423fa9535e22e1e2737d4c0170f8dd5f9154835131d66367ad6f15f1e317dfc2639516c02b425dae5bc902fadebc4e745dfbdf0211d3b995b1ba610c9b1f7b55ae2e4f9c19d37a21ea970bb1ed234c16b28e4d67226120b28c39172e8db32cbcc1f295cb538b26d6bcae7372bd2214c5e01be1979e3169554f061abba4651d513395e1246a2349f771e74fc00a6a7c9133201da53066b325afdae633d6b39d02632dde0c1a18112384cf4dc446e8756b2031452f06370093659ab7a066fdec8297701ffaf900af007b89c12b44290dd1908fb82970312bd8bee12f559badfa0009e3beaf12949fdd0782ed4a2a04070fb384f3e7d3ec659f9108dd837c7db99ed71eb784c075efe61c8a9971ddd34c04a6459d2cdaa6e70d0da0b9f254fc3e62a814c0a944a2cb947219e1c071ffc881809bd097cdefea3849cb96e4d091b150980e7af54949ebb970f15edaa790c8c4d1dc01ee3fc5a4877d4c66beed156160c4d6582032c1777cd5a3ce50f93c37dc6e34b4a87bbbd6c48c8e2167a59f060e604136e62b1f24fa236f488e30f4030c6c749b49308649a0c3f6703971c5b790b2b9104b2071b490d8c062f1bb665aeb8580d92deae36f78c652c4a5a39766f80ff61b909f4917bb33bb065752da7aa839c731f0011bf75798a6fe6b64eca51bfc104f422cd5ba17a5b598609e65232fa3f3bbbeb9facb48fce069cdda60f0e604dfa5dbdbbbe010a1c241ee2a89226b50716d65e623c6045f223fcdc280bf2ba62a179d3167e745b67059b4cf5c53a266ed41d64743fd70ce3525cb8aadacda256bf3430431eb8709daa64d19aa1d494eb1e639a14503021bd7ed7a3c9b700b047a2f5f1120a81804ca4ed6b7ca75f3b5472889f7962925ebeb95b268d8fe9b7285f5dfead869328e8e880024f31364093f4347b9e5b4d6b5857be4aeab4ab13bbb10b41daba73338cea85d5dbedc6a1f002132ac412341caf0efefa4e8231bde1a4c2db811b92c273ac581c8b85c4713f08db9c2089e66c14e76abbc6f2cad3d1aeb9b144a12683ee76609d6e07dd83b1ab57fa8e0fa69f28ce86f143b68865d81ffd5d7cb1d4f174aa5afb650cb1118490fac13db4e46ab5962a7eb160cbadb706c67659624428e214e83f6d05250ba5e5387ce5d40a627e5c6f462ca5c5c86259c546be72104f2bb7f4fcf91bd605f1852c7306ad17c8fe65d23cad249f4670536a6ae912b208db548ca4d88a01750a2a70905f92db5b9bebda3d3f52c1d0775f06c2bc32b9b3ecdac06b1305a7f37421dc3cfd411b3fd24735991d543ac7384358c91a59e25c71360237577701b8e3caa4f7ac13225809e8d9573bf1ea041772154f424bdf9e59941e82cdcc4925092c2c7e88fd546ba48a16a20cfc6bd884ad7b9d9e603c1d60adda6a0bf7c9821d8631c225dead65faf21d8ce8e712f924b65d6f15d70d329547da4d66f26ed0737afeab84644e4a2dbf049471d48da0733d9aef52b968201b1b0b58265be45810c606d825cedbce88c8cb26f9ceb4e6109a07f5c8974e65bbf46645a85faff4f41e3564e362f1ee55b895ab0c078c13f05f42e82107b723ed1d587aced3e9966d56a1dca74958b42cc820b4b0db34641673fd871ed3ee42612738cff2697930a484c38b02833f9d0639837b35e0b7feb2a8621f4ba5c1a8da4718c03af1f915d59bdd7d294a7bafdb48e9cbfe5827596bd9bbb6f22da37efcf754460e8b2d3e7690019ea1d49a9e57a4ba9c12b7836174572ada052c164d54249c65d3433d0fdcc91919f8ebcb94752ee8b52ea71b754328c81c7ca9123a4070d7e96aaf89030b37e1217149f3bc41943228cf98a0408536468fb72736b1e675db801a3645ccb95ed9bb6939258d1775d6d25af12fb606da874b895c52ca44f956393ec7526681689495f57f26672442e5b9fc20b57814f17bb226c8647688b0a3fab7cd2900a4eb10809d15626cba079c09eb9a71909d23cd0b4eeb723ac915079db9d5e6ea595ee0e35b29466caed07d5575c821db8a79cb820d22c25b550b368c971be6a983ef1b68cc536eb01eac73c5f4da4869794006b68fdb5346f457fdc245ffdd2173dc6a1b59dd893f6ad7248398c05b949d8d62bdc16b888769181fcda1caaaf7934084281b105bf88499bda9ba1e0a655325923363eb384cca7756302c205fff3ff810642faf012c1329d803db54a3a0752087236d50e84d4050270fe508cda97ca1a4df7d1b92db4bfd17d87c861eda6a34ec782ba556863ae1dfd2da14734d4c48acbd2a36b24dcc62864f1051c0772ceec7aa7d02b1cbbefe805cac6b0128f3039cf016650282358d4525cf356d9c4e4", 0xde0}, {&(0x7f0000000180)="902f5cd3ec32171cf26d2c23229bb19cbf17ab1518a98ddcc9926023c27b3845cda6ccf91c5a36b8d47a390d5c455986a69dbab271ddda4936d596214ac8c916997606816c31bc6d2dfbde5b1d59ff076238d16fcc1080f45407be92e974fcf58213805d3e0e9ae22ac44d74b589", 0x6e}, {&(0x7f0000000200)="93b6038403a2d2d818c1c1403f7de9fba985a2f09f60d3d3389ecc84ca5f70b2651359488320403b8692a5efbcbf6411ff5591c7c7ef81a97fab6a1b01885818d2f5054cb578707bdb", 0x49}], 0x3, 0x4) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:35 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe2$9p(0x0, 0x800) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) keyctl$set_reqkey_keyring(0xe, 0x0) 05:14:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) 05:14:35 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:35 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:35 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe2$9p(0x0, 0x800) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) keyctl$set_reqkey_keyring(0xe, 0x0) 05:14:36 executing program 0: clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x1e8, 0x0, 0x1e8, 0x98030000, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {0x0, 0x2a02}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xae6b, 0x5}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 05:14:36 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) keyctl$set_reqkey_keyring(0xe, 0x0) [ 920.434648][T22600] xt_hashlimit: overflow, try lower: 0/0 [ 920.516686][T22604] xt_hashlimit: overflow, try lower: 0/0 [ 922.291439][ C0] not chained 280000 origins [ 922.296129][ C0] CPU: 0 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 922.304616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.314678][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 922.320307][ C0] Call Trace: [ 922.323590][ C0] [ 922.326450][ C0] dump_stack+0x1c9/0x220 [ 922.330799][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 922.336527][ C0] ? tcp_fin+0x1f9/0x890 [ 922.340776][ C0] ? tcp_data_queue+0x24ce/0x9c40 [ 922.345805][ C0] ? tcp_rcv_state_process+0x67db/0x7140 [ 922.351443][ C0] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 922.356220][ C0] ? tcp_v4_rcv+0x4398/0x4d00 [ 922.360906][ C0] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 922.366537][ C0] ? ip_local_deliver+0x62a/0x7c0 [ 922.371550][ C0] ? ip_rcv+0x6cf/0x750 [ 922.375711][ C0] ? process_backlog+0xf0b/0x1410 [ 922.380723][ C0] ? net_rx_action+0x786/0x1aa0 [ 922.385571][ C0] ? __do_softirq+0x311/0x83d [ 922.390440][ C0] ? do_softirq_own_stack+0x49/0x80 [ 922.395856][ C0] ? kmsan_internal_chain_origin+0x30/0x130 [ 922.401748][ C0] ? ip_finish_output2+0x2115/0x2610 [ 922.407036][ C0] ? __ip_finish_output+0xaa7/0xd80 [ 922.412239][ C0] ? ip_finish_output+0x166/0x410 [ 922.417256][ C0] ? ip_output+0x593/0x680 [ 922.421679][ C0] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 922.426791][ C0] ? ip_queue_xmit+0xcc/0xf0 [ 922.431377][ C0] ? __tcp_transmit_skb+0x439c/0x6090 [ 922.436736][ C0] ? tcp_write_xmit+0x30e1/0xb470 [ 922.441761][ C0] ? __tcp_push_pending_frames+0x124/0x4e0 [ 922.447560][ C0] ? tcp_send_fin+0x131e/0x1570 [ 922.452494][ C0] ? tcp_shutdown+0x188/0x200 [ 922.457186][ C0] ? inet_shutdown+0x342/0x5e0 [ 922.461940][ C0] ? kernel_sock_shutdown+0x9d/0xc0 [ 922.467128][ C0] ? rds_tcp_accept_one+0xe17/0x1060 [ 922.472403][ C0] ? rds_tcp_accept_worker+0x61/0x160 [ 922.477768][ C0] ? process_one_work+0x1555/0x1f40 [ 922.482953][ C0] ? worker_thread+0xef6/0x2450 [ 922.487791][ C0] ? kthread+0x4b5/0x4f0 [ 922.492024][ C0] ? ret_from_fork+0x35/0x40 [ 922.496608][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.501798][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 922.507592][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 922.513646][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.518831][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 922.524631][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 922.530773][ C0] ? __msan_get_context_state+0x9/0x20 [ 922.536232][ C0] ? __module_get+0x19/0x230 [ 922.540834][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.546039][ C0] __msan_chain_origin+0x50/0x90 [ 922.550987][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 922.556200][ C0] tcp_time_wait+0xaca/0x10b0 [ 922.560888][ C0] tcp_fin+0x1f9/0x890 [ 922.564963][ C0] tcp_data_queue+0x24ce/0x9c40 [ 922.569816][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 922.575850][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 922.581933][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 922.587388][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.592601][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.597795][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 922.602382][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 922.606915][ C0] ? tcp_filter+0xf0/0xf0 [ 922.611246][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 922.616715][ C0] ip_local_deliver+0x62a/0x7c0 [ 922.621572][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 922.626606][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 922.632237][ C0] ip_rcv+0x6cf/0x750 [ 922.636221][ C0] ? ip_rcv_core+0x1270/0x1270 [ 922.640979][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 922.646601][ C0] process_backlog+0xf0b/0x1410 [ 922.651445][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.656636][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 922.662273][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 922.667547][ C0] net_rx_action+0x786/0x1aa0 [ 922.672234][ C0] ? net_tx_action+0xc30/0xc30 [ 922.676988][ C0] __do_softirq+0x311/0x83d [ 922.681496][ C0] do_softirq_own_stack+0x49/0x80 [ 922.686507][ C0] [ 922.689453][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 922.694646][ C0] local_bh_enable+0x36/0x40 [ 922.699230][ C0] ip_finish_output2+0x2115/0x2610 [ 922.704343][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 922.710056][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 922.716059][ C0] __ip_finish_output+0xaa7/0xd80 [ 922.721085][ C0] ip_finish_output+0x166/0x410 [ 922.725935][ C0] ip_output+0x593/0x680 [ 922.730185][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 922.735459][ C0] ? ip_finish_output+0x410/0x410 [ 922.740491][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 922.745430][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 922.751056][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.756256][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.761450][ C0] ip_queue_xmit+0xcc/0xf0 [ 922.765863][ C0] ? tcp_v6_send_response+0x2920/0x2920 [ 922.771399][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 922.776621][ C0] tcp_write_xmit+0x30e1/0xb470 [ 922.781523][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 922.787150][ C0] tcp_send_fin+0x131e/0x1570 [ 922.791830][ C0] tcp_shutdown+0x188/0x200 [ 922.796328][ C0] ? tcp_set_state+0x9d0/0x9d0 [ 922.801083][ C0] inet_shutdown+0x342/0x5e0 [ 922.805679][ C0] ? inet_recvmsg+0x7d0/0x7d0 [ 922.810344][ C0] kernel_sock_shutdown+0x9d/0xc0 [ 922.815367][ C0] rds_tcp_accept_one+0xe17/0x1060 [ 922.820465][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 922.825678][ C0] rds_tcp_accept_worker+0x61/0x160 [ 922.830880][ C0] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 922.835916][ C0] process_one_work+0x1555/0x1f40 [ 922.840970][ C0] worker_thread+0xef6/0x2450 [ 922.845675][ C0] kthread+0x4b5/0x4f0 [ 922.849753][ C0] ? process_one_work+0x1f40/0x1f40 [ 922.854955][ C0] ? kthread_blkcg+0xf0/0xf0 [ 922.859550][ C0] ret_from_fork+0x35/0x40 [ 922.864053][ C0] Uninit was stored to memory at: [ 922.869071][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 922.874779][ C0] __msan_chain_origin+0x50/0x90 [ 922.879705][ C0] inet_twsk_alloc+0xab6/0xba0 [ 922.884457][ C0] tcp_time_wait+0xcd/0x10b0 [ 922.889030][ C0] tcp_fin+0x1f9/0x890 [ 922.893084][ C0] tcp_data_queue+0x24ce/0x9c40 [ 922.897932][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 922.903385][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 922.907960][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 922.912453][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 922.917894][ C0] ip_local_deliver+0x62a/0x7c0 [ 922.922727][ C0] ip_rcv+0x6cf/0x750 [ 922.926698][ C0] process_backlog+0xf0b/0x1410 [ 922.931531][ C0] net_rx_action+0x786/0x1aa0 [ 922.936195][ C0] __do_softirq+0x311/0x83d [ 922.940676][ C0] [ 922.942986][ C0] Uninit was stored to memory at: [ 922.948172][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 922.953877][ C0] __msan_chain_origin+0x50/0x90 [ 922.958800][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 922.963984][ C0] tcp_time_wait+0xaca/0x10b0 [ 922.968656][ C0] tcp_fin+0x1f9/0x890 [ 922.972719][ C0] tcp_data_queue+0x24ce/0x9c40 [ 922.977558][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 922.983020][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 922.987627][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 922.992144][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 922.997596][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.002437][ C0] ip_rcv+0x6cf/0x750 [ 923.006411][ C0] process_backlog+0xf0b/0x1410 [ 923.011251][ C0] net_rx_action+0x786/0x1aa0 [ 923.015919][ C0] __do_softirq+0x311/0x83d [ 923.020399][ C0] [ 923.022720][ C0] Uninit was stored to memory at: [ 923.027818][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 923.033521][ C0] __msan_chain_origin+0x50/0x90 [ 923.038444][ C0] tcp_time_wait+0xb7e/0x10b0 [ 923.043110][ C0] tcp_fin+0x1f9/0x890 [ 923.047175][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.052021][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.057467][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.062042][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.066533][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.071992][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.076841][ C0] ip_rcv+0x6cf/0x750 [ 923.080815][ C0] process_backlog+0xf0b/0x1410 [ 923.085670][ C0] net_rx_action+0x786/0x1aa0 [ 923.090356][ C0] __do_softirq+0x311/0x83d [ 923.094840][ C0] [ 923.097154][ C0] Uninit was stored to memory at: [ 923.102191][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 923.107903][ C0] __msan_chain_origin+0x50/0x90 [ 923.112833][ C0] inet_twsk_alloc+0xab6/0xba0 [ 923.117584][ C0] tcp_time_wait+0xcd/0x10b0 [ 923.122159][ C0] tcp_fin+0x1f9/0x890 [ 923.126212][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.131046][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.136489][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.141076][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.145568][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.151011][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.155954][ C0] ip_rcv+0x6cf/0x750 [ 923.159945][ C0] process_backlog+0xf0b/0x1410 [ 923.164793][ C0] net_rx_action+0x786/0x1aa0 [ 923.169479][ C0] __do_softirq+0x311/0x83d [ 923.173967][ C0] [ 923.176290][ C0] Uninit was stored to memory at: [ 923.181321][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 923.187045][ C0] __msan_chain_origin+0x50/0x90 [ 923.191977][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 923.197178][ C0] tcp_time_wait+0xaca/0x10b0 [ 923.201844][ C0] tcp_fin+0x1f9/0x890 [ 923.205905][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.210751][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.216214][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.220800][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.225306][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.230768][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.235609][ C0] ip_rcv+0x6cf/0x750 [ 923.239792][ C0] process_backlog+0xf0b/0x1410 [ 923.244637][ C0] net_rx_action+0x786/0x1aa0 [ 923.249309][ C0] __do_softirq+0x311/0x83d [ 923.253793][ C0] [ 923.256111][ C0] Uninit was stored to memory at: [ 923.261136][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 923.266848][ C0] __msan_chain_origin+0x50/0x90 [ 923.271779][ C0] tcp_time_wait+0xb7e/0x10b0 [ 923.276443][ C0] tcp_fin+0x1f9/0x890 [ 923.280510][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.285345][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.290798][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.295376][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.299867][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.305309][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.310145][ C0] ip_rcv+0x6cf/0x750 [ 923.314113][ C0] process_backlog+0xf0b/0x1410 [ 923.318950][ C0] net_rx_action+0x786/0x1aa0 [ 923.323739][ C0] __do_softirq+0x311/0x83d [ 923.328232][ C0] [ 923.330548][ C0] Uninit was stored to memory at: [ 923.335573][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 923.341292][ C0] __msan_chain_origin+0x50/0x90 [ 923.346223][ C0] inet_twsk_alloc+0xab6/0xba0 [ 923.350981][ C0] tcp_time_wait+0xcd/0x10b0 [ 923.355562][ C0] tcp_fin+0x1f9/0x890 [ 923.359640][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.364479][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.369924][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.374515][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.379007][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.384451][ C0] ip_local_deliver+0x62a/0x7c0 [ 923.389298][ C0] ip_rcv+0x6cf/0x750 [ 923.393362][ C0] process_backlog+0xf0b/0x1410 [ 923.398200][ C0] net_rx_action+0x786/0x1aa0 [ 923.402960][ C0] __do_softirq+0x311/0x83d [ 923.407442][ C0] [ 923.409760][ C0] Uninit was created at: [ 923.413991][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 923.419730][ C0] kmsan_alloc_page+0x12a/0x310 [ 923.424577][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 923.430118][ C0] alloc_pages_current+0x67d/0x990 [ 923.435217][ C0] alloc_slab_page+0x111/0x12f0 [ 923.440054][ C0] new_slab+0x2bc/0x1130 [ 923.444286][ C0] ___slab_alloc+0x1533/0x1f30 [ 923.449034][ C0] kmem_cache_alloc+0xb23/0xd70 [ 923.453874][ C0] inet_twsk_alloc+0x135/0xba0 [ 923.458626][ C0] tcp_time_wait+0xcd/0x10b0 [ 923.463308][ C0] tcp_fin+0x1f9/0x890 [ 923.467377][ C0] tcp_data_queue+0x24ce/0x9c40 [ 923.472250][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 923.477701][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 923.482278][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 923.486770][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 923.492227][ C0] ip_local_deliver+0x62a/0x7c0 05:14:38 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {0x0, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:14:38 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:38 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:38 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$join(0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 05:14:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:38 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe2$9p(&(0x7f0000000400), 0x800) r3 = dup2(r2, r1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') keyctl$set_reqkey_keyring(0xe, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) [ 923.497060][ C0] ip_rcv+0x6cf/0x750 [ 923.501026][ C0] process_backlog+0xf0b/0x1410 [ 923.505860][ C0] net_rx_action+0x786/0x1aa0 [ 923.510521][ C0] __do_softirq+0x311/0x83d [ 923.688116][T22622] fuse: Bad value for 'fd' 05:14:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r5, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f00000003c0)=0xe1) shutdown(r5, 0x1) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x58c, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x5ea) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, 0x0, &(0x7f0000000400)) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x6) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x8, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000780)='(\x00', 0x0) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 05:14:40 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe2$9p(&(0x7f0000000400), 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') keyctl$set_reqkey_keyring(0xe, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 05:14:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 924.675325][T22646] fuse: Bad value for 'fd' 05:14:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 925.094967][T22630] vivid-001: kernel_thread() failed 05:14:42 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {0x0, r2+10000000}}, 0x0) tkill(r0, 0x16) 05:14:42 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr="ff3efc882c22996f041d103af500"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 05:14:42 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 927.085241][T22677] fuse: Bad value for 'fd' [ 927.207527][T22681] fuse: Bad value for 'fd' 05:14:43 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:14:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCSFF(r2, 0x402c4580, 0x0) 05:14:43 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:14:44 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001a00)="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", 0xb2c}, {&(0x7f0000000180)}], 0x2, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:46 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, 0x0}}, 0x0) tkill(r0, 0x16) 05:14:46 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1fe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 05:14:46 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)=""/154, 0x9a}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0xca, 0x0) 05:14:46 executing program 4: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:14:46 executing program 1: socket$packet(0x11, 0x0, 0x300) clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x1e8, 0x0, 0x1e8, 0x98030000, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {0x0, 0x2a02}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0xae6b, 0x5}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 05:14:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) vmsplice(r0, &(0x7f0000000100), 0x0, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 930.142497][T22721] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 05:14:46 executing program 1: socket$packet(0x11, 0x0, 0x300) clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x1e8, 0x0, 0x1e8, 0x98030000, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {0x0, 0x2a02}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0xae6b, 0x5}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 05:14:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:14:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000080}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr="ff3efc882c22996f041d103af500"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 05:14:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCSFF(r2, 0x402c4580, &(0x7f0000000200)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 05:14:47 executing program 1: socket$packet(0x11, 0x0, 0x300) clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x1e8, 0x0, 0x1e8, 0x98030000, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {0x0, 0x2a02}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0xae6b, 0x5}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 05:14:47 executing program 2: socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) memfd_create(&(0x7f0000000780)='(\x00', 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 05:14:49 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, 0x0}}, 0x0) tkill(r0, 0x16) 05:14:49 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:49 executing program 1: socket$packet(0x11, 0x0, 0x300) clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x1e8, 0x0, 0x1e8, 0x98030000, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {0x0, 0x2a02}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0xae6b, 0x5}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 05:14:49 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b4c, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 05:14:49 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3180, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) socket$tipc(0x1e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 05:14:49 executing program 4: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 05:14:49 executing program 3: bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 05:14:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fe}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:14:50 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) 05:14:50 executing program 3: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 934.812424][T22812] fuse: blksize only supported for fuseblk [ 934.822102][T22812] fuse: blksize only supported for fuseblk [ 936.089433][ C0] not chained 290000 origins [ 936.094054][ C0] CPU: 0 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 936.102528][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.112670][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 936.118300][ C0] Call Trace: [ 936.121663][ C0] [ 936.124507][ C0] dump_stack+0x1c9/0x220 [ 936.128854][ C0] ? ip_finish_output+0x410/0x410 [ 936.133881][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 936.139622][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 936.145687][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.150869][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 936.156659][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 936.162816][ C0] ? should_fail+0x72/0x9e0 [ 936.167318][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.172521][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.177928][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.183122][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 936.189114][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.194301][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 936.200122][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 936.206197][ C0] ? kmem_cache_alloc+0x178/0xd70 [ 936.211217][ C0] ? inet_twsk_alloc+0x135/0xba0 [ 936.216144][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.221347][ C0] __msan_chain_origin+0x50/0x90 [ 936.226298][ C0] inet_twsk_alloc+0xab6/0xba0 [ 936.231065][ C0] tcp_time_wait+0xcd/0x10b0 [ 936.235645][ C0] ? tcp_send_ack+0x68/0x90 [ 936.240132][ C0] tcp_fin+0x1f9/0x890 [ 936.244194][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.249048][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 936.254883][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 936.261009][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.266527][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.271757][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.276961][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.281553][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.286079][ C0] ? tcp_filter+0xf0/0xf0 [ 936.290450][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.296170][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.301038][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 936.306061][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 936.311676][ C0] ip_rcv+0x6cf/0x750 [ 936.315661][ C0] ? ip_rcv_core+0x1270/0x1270 [ 936.320522][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 936.326141][ C0] process_backlog+0xf0b/0x1410 [ 936.330990][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 936.336617][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 936.342018][ C0] net_rx_action+0x786/0x1aa0 [ 936.346733][ C0] ? net_tx_action+0xc30/0xc30 [ 936.351598][ C0] __do_softirq+0x311/0x83d [ 936.356113][ C0] do_softirq_own_stack+0x49/0x80 [ 936.361115][ C0] [ 936.364048][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 936.369252][ C0] local_bh_enable+0x36/0x40 [ 936.373839][ C0] ip_finish_output2+0x2115/0x2610 [ 936.378938][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 936.384731][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 936.390847][ C0] __ip_finish_output+0xaa7/0xd80 [ 936.395869][ C0] ip_finish_output+0x166/0x410 [ 936.400715][ C0] ip_output+0x593/0x680 [ 936.404955][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 936.410232][ C0] ? ip_finish_output+0x410/0x410 [ 936.415239][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 936.420154][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 936.425686][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.430889][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.436107][ C0] ip_queue_xmit+0xcc/0xf0 [ 936.440534][ C0] ? tcp_v6_send_response+0x2920/0x2920 [ 936.446080][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 936.451283][ C0] tcp_write_xmit+0x30e1/0xb470 [ 936.456174][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 936.461817][ C0] tcp_send_fin+0x131e/0x1570 [ 936.466485][ C0] tcp_shutdown+0x188/0x200 [ 936.470989][ C0] ? tcp_set_state+0x9d0/0x9d0 [ 936.475768][ C0] inet_shutdown+0x342/0x5e0 [ 936.480359][ C0] ? inet_recvmsg+0x7d0/0x7d0 [ 936.485030][ C0] kernel_sock_shutdown+0x9d/0xc0 [ 936.490062][ C0] rds_tcp_accept_one+0xe17/0x1060 [ 936.495152][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 936.500359][ C0] rds_tcp_accept_worker+0x61/0x160 [ 936.505548][ C0] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 936.510570][ C0] process_one_work+0x1555/0x1f40 [ 936.515604][ C0] worker_thread+0xef6/0x2450 [ 936.520282][ C0] kthread+0x4b5/0x4f0 [ 936.524331][ C0] ? process_one_work+0x1f40/0x1f40 [ 936.529526][ C0] ? kthread_blkcg+0xf0/0xf0 [ 936.534096][ C0] ret_from_fork+0x35/0x40 [ 936.538757][ C0] Uninit was stored to memory at: [ 936.543760][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.549456][ C0] __msan_chain_origin+0x50/0x90 [ 936.554383][ C0] inet_twsk_alloc+0xab6/0xba0 [ 936.559141][ C0] tcp_time_wait+0xcd/0x10b0 [ 936.563716][ C0] tcp_fin+0x1f9/0x890 [ 936.567820][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.572771][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.578214][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.582786][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.587274][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.592762][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.597597][ C0] ip_rcv+0x6cf/0x750 [ 936.601566][ C0] process_backlog+0xf0b/0x1410 [ 936.606397][ C0] net_rx_action+0x786/0x1aa0 [ 936.611051][ C0] __do_softirq+0x311/0x83d [ 936.615526][ C0] [ 936.617833][ C0] Uninit was stored to memory at: [ 936.622837][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.628547][ C0] __msan_chain_origin+0x50/0x90 [ 936.633520][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 936.638759][ C0] tcp_time_wait+0xaca/0x10b0 [ 936.643432][ C0] tcp_fin+0x1f9/0x890 [ 936.647482][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.652370][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.657853][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.662423][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.666935][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.672381][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.677209][ C0] ip_rcv+0x6cf/0x750 [ 936.681169][ C0] process_backlog+0xf0b/0x1410 [ 936.686009][ C0] net_rx_action+0x786/0x1aa0 [ 936.690663][ C0] __do_softirq+0x311/0x83d [ 936.695144][ C0] [ 936.697448][ C0] Uninit was stored to memory at: [ 936.702451][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.708150][ C0] __msan_chain_origin+0x50/0x90 [ 936.713069][ C0] tcp_time_wait+0xb7e/0x10b0 [ 936.718173][ C0] tcp_fin+0x1f9/0x890 [ 936.722595][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.727442][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.734458][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.739139][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.743629][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.749954][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.755142][ C0] ip_rcv+0x6cf/0x750 [ 936.759279][ C0] process_backlog+0xf0b/0x1410 [ 936.764435][ C0] net_rx_action+0x786/0x1aa0 [ 936.769106][ C0] __do_softirq+0x311/0x83d [ 936.774620][ C0] [ 936.777118][ C0] Uninit was stored to memory at: [ 936.782223][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.787925][ C0] __msan_chain_origin+0x50/0x90 [ 936.792963][ C0] inet_twsk_alloc+0xab6/0xba0 [ 936.797719][ C0] tcp_time_wait+0xcd/0x10b0 [ 936.802290][ C0] tcp_fin+0x1f9/0x890 [ 936.806685][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.811858][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.817316][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.822022][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.826533][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.835539][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.840384][ C0] ip_rcv+0x6cf/0x750 [ 936.844345][ C0] process_backlog+0xf0b/0x1410 [ 936.849173][ C0] net_rx_action+0x786/0x1aa0 [ 936.853830][ C0] __do_softirq+0x311/0x83d [ 936.858355][ C0] [ 936.860667][ C0] Uninit was stored to memory at: [ 936.865680][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.871402][ C0] __msan_chain_origin+0x50/0x90 [ 936.876332][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 936.881515][ C0] tcp_time_wait+0xaca/0x10b0 [ 936.886181][ C0] tcp_fin+0x1f9/0x890 [ 936.890236][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.895068][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.900508][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.905077][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.909566][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.915000][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.919823][ C0] ip_rcv+0x6cf/0x750 [ 936.923786][ C0] process_backlog+0xf0b/0x1410 [ 936.928621][ C0] net_rx_action+0x786/0x1aa0 [ 936.933289][ C0] __do_softirq+0x311/0x83d [ 936.937771][ C0] [ 936.940072][ C0] Uninit was stored to memory at: [ 936.945072][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 936.950775][ C0] __msan_chain_origin+0x50/0x90 [ 936.955690][ C0] tcp_time_wait+0xb7e/0x10b0 [ 936.960341][ C0] tcp_fin+0x1f9/0x890 [ 936.964391][ C0] tcp_data_queue+0x24ce/0x9c40 [ 936.969335][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 936.974783][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 936.979355][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 936.983852][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 936.989302][ C0] ip_local_deliver+0x62a/0x7c0 [ 936.994139][ C0] ip_rcv+0x6cf/0x750 [ 936.998244][ C0] process_backlog+0xf0b/0x1410 [ 937.003088][ C0] net_rx_action+0x786/0x1aa0 [ 937.007754][ C0] __do_softirq+0x311/0x83d [ 937.012231][ C0] [ 937.014537][ C0] Uninit was stored to memory at: [ 937.019545][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 937.025253][ C0] __msan_chain_origin+0x50/0x90 [ 937.030556][ C0] inet_twsk_alloc+0xab6/0xba0 [ 937.035335][ C0] tcp_time_wait+0xcd/0x10b0 [ 937.039963][ C0] tcp_fin+0x1f9/0x890 [ 937.044367][ C0] tcp_data_queue+0x24ce/0x9c40 [ 937.049198][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 937.054809][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 937.059405][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 937.063914][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 937.069872][ C0] ip_local_deliver+0x62a/0x7c0 [ 937.074803][ C0] ip_rcv+0x6cf/0x750 [ 937.078798][ C0] process_backlog+0xf0b/0x1410 [ 937.083635][ C0] net_rx_action+0x786/0x1aa0 [ 937.088304][ C0] __do_softirq+0x311/0x83d [ 937.092825][ C0] [ 937.095137][ C0] Uninit was created at: [ 937.099361][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 937.104974][ C0] kmsan_alloc_page+0x12a/0x310 [ 937.109812][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 937.115353][ C0] alloc_pages_current+0x67d/0x990 [ 937.120466][ C0] alloc_slab_page+0x111/0x12f0 [ 937.125295][ C0] new_slab+0x2bc/0x1130 [ 937.129522][ C0] ___slab_alloc+0x1533/0x1f30 [ 937.134277][ C0] kmem_cache_alloc+0xb23/0xd70 [ 937.139106][ C0] inet_twsk_alloc+0x135/0xba0 [ 937.143858][ C0] tcp_time_wait+0xcd/0x10b0 [ 937.148432][ C0] tcp_fin+0x1f9/0x890 [ 937.152496][ C0] tcp_data_queue+0x24ce/0x9c40 [ 937.157332][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 937.162777][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 937.167352][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 937.171848][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 937.177297][ C0] ip_local_deliver+0x62a/0x7c0 [ 937.182152][ C0] ip_rcv+0x6cf/0x750 [ 937.186178][ C0] process_backlog+0xf0b/0x1410 [ 937.191142][ C0] net_rx_action+0x786/0x1aa0 [ 937.195829][ C0] __do_softirq+0x311/0x83d 05:14:53 executing program 3: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x60, 0x8000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) 05:14:53 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, 0x0}}, 0x0) tkill(r0, 0x16) 05:14:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x4c}}, 0x0) 05:14:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr="ff3efc882c22996f041d103af500"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 05:14:53 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b4c, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 05:14:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCSFF(r2, 0x80084504, 0x0) 05:14:53 executing program 4: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x60, 0x8000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:14:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000001a00)="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", 0x2ef}, {0x0}], 0x2, 0x4) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 938.370903][T22848] fuse: Bad value for 'fd' [ 938.495309][T22849] fuse: Bad value for 'fd' 05:14:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:14:54 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0xa, 0x4000000801, 0x0) connect$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 05:14:54 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x0, 0x6}, {0x0, 0x6}]}, 0x18, 0x0) 05:14:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 939.498249][T22873] fuse: Bad value for 'fd' [ 939.555481][T22873] fuse: Bad value for 'fd' 05:14:56 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:14:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x200001cb) 05:14:56 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:14:56 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x8000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x28081) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:14:56 executing program 3: 05:14:56 executing program 0: 05:14:57 executing program 0: 05:14:57 executing program 3: 05:14:57 executing program 1: 05:14:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) 05:14:57 executing program 3: 05:14:57 executing program 0: 05:14:58 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:14:58 executing program 4: 05:14:58 executing program 1: 05:14:58 executing program 3: 05:14:58 executing program 0: 05:14:58 executing program 2: 05:14:58 executing program 4: 05:14:58 executing program 3: 05:14:58 executing program 1: 05:14:58 executing program 0: 05:14:58 executing program 2: 05:14:59 executing program 3: 05:14:59 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) tkill(0x0, 0x16) 05:14:59 executing program 1: 05:14:59 executing program 4: 05:14:59 executing program 0: 05:14:59 executing program 2: 05:14:59 executing program 3: 05:14:59 executing program 1: 05:14:59 executing program 0: 05:14:59 executing program 4: 05:15:00 executing program 3: 05:15:00 executing program 1: 05:15:00 executing program 2: 05:15:00 executing program 0: 05:15:00 executing program 4: 05:15:00 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x0) 05:15:01 executing program 2: 05:15:01 executing program 0: 05:15:01 executing program 1: 05:15:01 executing program 3: 05:15:01 executing program 4: 05:15:01 executing program 0: 05:15:01 executing program 1: 05:15:02 executing program 2: 05:15:02 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x0) 05:15:02 executing program 3: 05:15:02 executing program 4: 05:15:02 executing program 0: 05:15:02 executing program 1: 05:15:02 executing program 2: 05:15:02 executing program 3: 05:15:02 executing program 0: 05:15:02 executing program 4: 05:15:03 executing program 1: 05:15:03 executing program 3: 05:15:03 executing program 2: 05:15:03 executing program 4: 05:15:03 executing program 0: 05:15:03 executing program 5: r0 = gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000180)="aa", 0x1, 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x8de38a14d309fd01, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) tkill(r0, 0x0) 05:15:03 executing program 3: 05:15:03 executing program 2: 05:15:03 executing program 1: 05:15:04 executing program 4: 05:15:04 executing program 0: 05:15:04 executing program 2: 05:15:04 executing program 3: 05:15:04 executing program 1: 05:15:04 executing program 4: 05:15:04 executing program 0: 05:15:04 executing program 5: 05:15:05 executing program 2: 05:15:05 executing program 1: 05:15:05 executing program 3: 05:15:05 executing program 4: 05:15:05 executing program 0: 05:15:05 executing program 5: 05:15:05 executing program 2: 05:15:05 executing program 1: 05:15:05 executing program 3: 05:15:05 executing program 4: 05:15:06 executing program 0: 05:15:06 executing program 5: 05:15:06 executing program 2: 05:15:06 executing program 3: 05:15:06 executing program 4: 05:15:06 executing program 1: 05:15:06 executing program 0: 05:15:06 executing program 2: 05:15:06 executing program 5: 05:15:06 executing program 3: 05:15:06 executing program 4: 05:15:07 executing program 0: 05:15:07 executing program 1: 05:15:07 executing program 5: 05:15:07 executing program 2: 05:15:07 executing program 4: 05:15:07 executing program 3: 05:15:07 executing program 0: 05:15:07 executing program 1: 05:15:07 executing program 5: 05:15:07 executing program 2: 05:15:07 executing program 4: 05:15:08 executing program 3: 05:15:08 executing program 0: 05:15:08 executing program 1: 05:15:08 executing program 2: 05:15:08 executing program 5: 05:15:08 executing program 4: 05:15:08 executing program 3: 05:15:08 executing program 5: 05:15:08 executing program 0: 05:15:08 executing program 1: 05:15:08 executing program 2: 05:15:09 executing program 3: 05:15:09 executing program 4: 05:15:09 executing program 2: 05:15:09 executing program 5: 05:15:09 executing program 0: 05:15:09 executing program 1: 05:15:09 executing program 4: 05:15:09 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'syz_tun\x00', 0xefd5}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)={0x1, 0x2, [@broadcast, @random="8c879defcb7d"]}) r3 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x20, 0x8140, 0x17, 0x20, 0x0, 0x1}}, 0x50) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf9b3}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 05:15:09 executing program 2: 05:15:09 executing program 5: 05:15:09 executing program 0: 05:15:10 executing program 1: 05:15:10 executing program 4: 05:15:10 executing program 2: 05:15:10 executing program 3: 05:15:10 executing program 0: 05:15:10 executing program 5: 05:15:10 executing program 1: 05:15:10 executing program 2: 05:15:10 executing program 3: 05:15:10 executing program 4: 05:15:10 executing program 5: 05:15:11 executing program 0: 05:15:11 executing program 1: 05:15:11 executing program 4: 05:15:11 executing program 3: 05:15:11 executing program 2: 05:15:11 executing program 0: 05:15:11 executing program 5: 05:15:11 executing program 1: 05:15:11 executing program 4: 05:15:11 executing program 3: 05:15:12 executing program 2: 05:15:12 executing program 0: 05:15:12 executing program 5: 05:15:12 executing program 1: 05:15:12 executing program 4: 05:15:12 executing program 3: 05:15:12 executing program 2: 05:15:12 executing program 0: 05:15:12 executing program 5: 05:15:12 executing program 4: 05:15:13 executing program 2: 05:15:13 executing program 3: 05:15:13 executing program 1: 05:15:13 executing program 0: 05:15:13 executing program 5: 05:15:13 executing program 4: 05:15:13 executing program 2: 05:15:13 executing program 3: 05:15:13 executing program 0: 05:15:13 executing program 1: 05:15:13 executing program 5: 05:15:14 executing program 2: 05:15:14 executing program 4: 05:15:14 executing program 0: 05:15:14 executing program 3: 05:15:14 executing program 1: 05:15:14 executing program 5: 05:15:14 executing program 2: 05:15:14 executing program 0: 05:15:14 executing program 4: 05:15:14 executing program 3: 05:15:15 executing program 1: 05:15:15 executing program 5: 05:15:15 executing program 2: [ 959.130099][ C0] not chained 300000 origins [ 959.134746][ C0] CPU: 0 PID: 12837 Comm: kworker/u4:2 Not tainted 5.6.0-rc2-syzkaller #0 [ 959.143265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.153345][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 959.158979][ C0] Call Trace: [ 959.162280][ C0] [ 959.165133][ C0] dump_stack+0x1c9/0x220 [ 959.169478][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 959.175194][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 959.181254][ C0] ? kmsan_internal_chain_origin+0xad/0x130 [ 959.187138][ C0] ? __msan_chain_origin+0x50/0x90 [ 959.192244][ C0] ? inet_twsk_alloc+0xa8a/0xba0 [ 959.197181][ C0] ? tcp_time_wait+0xcd/0x10b0 [ 959.201936][ C0] ? tcp_fin+0x1f9/0x890 [ 959.206166][ C0] ? tcp_data_queue+0x24ce/0x9c40 [ 959.211175][ C0] ? tcp_rcv_state_process+0x67db/0x7140 [ 959.216793][ C0] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 959.222080][ C0] ? tcp_v4_rcv+0x4398/0x4d00 [ 959.226744][ C0] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 959.232373][ C0] ? ip_local_deliver+0x62a/0x7c0 [ 959.237395][ C0] ? ip_rcv+0x6cf/0x750 [ 959.241542][ C0] ? process_backlog+0xf0b/0x1410 [ 959.246556][ C0] ? net_rx_action+0x786/0x1aa0 [ 959.251393][ C0] ? __do_softirq+0x311/0x83d [ 959.256057][ C0] ? do_softirq_own_stack+0x49/0x80 [ 959.261261][ C0] ? __local_bh_enable_ip+0x184/0x1d0 [ 959.266636][ C0] ? local_bh_enable+0x36/0x40 [ 959.271390][ C0] ? ip_finish_output2+0x2115/0x2610 [ 959.276679][ C0] ? __ip_finish_output+0xaa7/0xd80 [ 959.281881][ C0] ? ip_finish_output+0x166/0x410 [ 959.286901][ C0] ? ip_output+0x593/0x680 [ 959.291307][ C0] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 959.296420][ C0] ? ip_queue_xmit+0xcc/0xf0 [ 959.301008][ C0] ? __tcp_transmit_skb+0x439c/0x6090 [ 959.306369][ C0] ? tcp_write_xmit+0x30e1/0xb470 [ 959.311409][ C0] ? __tcp_push_pending_frames+0x124/0x4e0 [ 959.317222][ C0] ? tcp_send_fin+0x131e/0x1570 [ 959.322090][ C0] ? tcp_shutdown+0x188/0x200 [ 959.326768][ C0] ? inet_shutdown+0x342/0x5e0 [ 959.331636][ C0] ? kernel_sock_shutdown+0x9d/0xc0 [ 959.336834][ C0] ? rds_tcp_accept_one+0xe17/0x1060 [ 959.342115][ C0] ? rds_tcp_accept_worker+0x61/0x160 [ 959.347480][ C0] ? process_one_work+0x1555/0x1f40 [ 959.352666][ C0] ? worker_thread+0xef6/0x2450 [ 959.357505][ C0] ? kthread+0x4b5/0x4f0 [ 959.361735][ C0] ? ret_from_fork+0x35/0x40 [ 959.366334][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.371522][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 959.377319][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 959.383372][ C0] ? kmem_cache_alloc+0x178/0xd70 [ 959.388389][ C0] ? inet_twsk_alloc+0x135/0xba0 [ 959.393331][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.398519][ C0] __msan_chain_origin+0x50/0x90 [ 959.403448][ C0] inet_twsk_alloc+0xab6/0xba0 [ 959.408211][ C0] tcp_time_wait+0xcd/0x10b0 [ 959.412799][ C0] ? tcp_send_ack+0x68/0x90 [ 959.417295][ C0] tcp_fin+0x1f9/0x890 [ 959.421383][ C0] tcp_data_queue+0x24ce/0x9c40 [ 959.426255][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 959.432061][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 959.438153][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 959.443616][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.448823][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.454016][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 959.458605][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 959.463135][ C0] ? tcp_filter+0xf0/0xf0 [ 959.467466][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 959.472926][ C0] ip_local_deliver+0x62a/0x7c0 [ 959.483593][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 959.488603][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 959.494227][ C0] ip_rcv+0x6cf/0x750 [ 959.498207][ C0] ? ip_rcv_core+0x1270/0x1270 [ 959.502962][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 959.508581][ C0] process_backlog+0xf0b/0x1410 [ 959.513444][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 959.519094][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 959.524476][ C0] net_rx_action+0x786/0x1aa0 [ 959.529176][ C0] ? net_tx_action+0xc30/0xc30 [ 959.533971][ C0] __do_softirq+0x311/0x83d [ 959.538487][ C0] do_softirq_own_stack+0x49/0x80 [ 959.543497][ C0] [ 959.546436][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 959.551649][ C0] local_bh_enable+0x36/0x40 [ 959.556235][ C0] ip_finish_output2+0x2115/0x2610 [ 959.561336][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 959.567048][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 959.573040][ C0] __ip_finish_output+0xaa7/0xd80 [ 959.578092][ C0] ip_finish_output+0x166/0x410 [ 959.582954][ C0] ip_output+0x593/0x680 [ 959.587208][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 959.592491][ C0] ? ip_finish_output+0x410/0x410 [ 959.597634][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 959.602571][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 959.608235][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.613443][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.618640][ C0] ip_queue_xmit+0xcc/0xf0 [ 959.623057][ C0] ? tcp_v6_send_response+0x2920/0x2920 [ 959.628613][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 959.633847][ C0] tcp_write_xmit+0x30e1/0xb470 [ 959.638770][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 959.644418][ C0] tcp_send_fin+0x131e/0x1570 [ 959.649113][ C0] tcp_shutdown+0x188/0x200 [ 959.653615][ C0] ? tcp_set_state+0x9d0/0x9d0 [ 959.658376][ C0] inet_shutdown+0x342/0x5e0 [ 959.662988][ C0] ? inet_recvmsg+0x7d0/0x7d0 [ 959.667661][ C0] kernel_sock_shutdown+0x9d/0xc0 [ 959.672682][ C0] rds_tcp_accept_one+0xe17/0x1060 [ 959.677782][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 959.682987][ C0] rds_tcp_accept_worker+0x61/0x160 [ 959.688196][ C0] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 959.693210][ C0] process_one_work+0x1555/0x1f40 [ 959.698245][ C0] worker_thread+0xef6/0x2450 [ 959.702936][ C0] kthread+0x4b5/0x4f0 [ 959.706993][ C0] ? process_one_work+0x1f40/0x1f40 [ 959.712195][ C0] ? kthread_blkcg+0xf0/0xf0 [ 959.716782][ C0] ret_from_fork+0x35/0x40 [ 959.721222][ C0] Uninit was stored to memory at: [ 959.726257][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 959.731986][ C0] __msan_chain_origin+0x50/0x90 [ 959.736944][ C0] inet_twsk_alloc+0xab6/0xba0 [ 959.741708][ C0] tcp_time_wait+0xcd/0x10b0 [ 959.746297][ C0] tcp_fin+0x1f9/0x890 [ 959.750446][ C0] tcp_data_queue+0x24ce/0x9c40 [ 959.755373][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 959.760820][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 959.765401][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 959.769993][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 959.775455][ C0] ip_local_deliver+0x62a/0x7c0 [ 959.780391][ C0] ip_rcv+0x6cf/0x750 [ 959.784397][ C0] process_backlog+0xf0b/0x1410 [ 959.789244][ C0] net_rx_action+0x786/0x1aa0 [ 959.794115][ C0] __do_softirq+0x311/0x83d [ 959.798599][ C0] [ 959.800921][ C0] Uninit was stored to memory at: [ 959.805952][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 959.812184][ C0] __msan_chain_origin+0x50/0x90 [ 959.817636][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 959.822931][ C0] tcp_time_wait+0xaca/0x10b0 [ 959.827681][ C0] tcp_fin+0x1f9/0x890 [ 959.832468][ C0] tcp_data_queue+0x24ce/0x9c40 [ 959.837749][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 959.843216][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 959.847795][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 959.852672][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 959.858140][ C0] ip_local_deliver+0x62a/0x7c0 [ 959.865771][ C0] ip_rcv+0x6cf/0x750 [ 959.869753][ C0] process_backlog+0xf0b/0x1410 [ 959.874678][ C0] net_rx_action+0x786/0x1aa0 [ 959.879465][ C0] __do_softirq+0x311/0x83d [ 959.883943][ C0] [ 959.886264][ C0] Uninit was stored to memory at: [ 959.891286][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 959.896995][ C0] __msan_chain_origin+0x50/0x90 [ 959.901923][ C0] tcp_time_wait+0xb7e/0x10b0 [ 959.906586][ C0] tcp_fin+0x1f9/0x890 [ 959.910728][ C0] tcp_data_queue+0x24ce/0x9c40 [ 959.915564][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 959.921012][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 959.925623][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 959.930114][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 959.935574][ C0] ip_local_deliver+0x62a/0x7c0 [ 959.940421][ C0] ip_rcv+0x6cf/0x750 [ 959.944399][ C0] process_backlog+0xf0b/0x1410 [ 959.949245][ C0] net_rx_action+0x786/0x1aa0 [ 959.953915][ C0] __do_softirq+0x311/0x83d [ 959.958399][ C0] [ 959.960714][ C0] Uninit was stored to memory at: [ 959.965725][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 959.971429][ C0] __msan_chain_origin+0x50/0x90 [ 959.976352][ C0] inet_twsk_alloc+0xab6/0xba0 [ 959.981100][ C0] tcp_time_wait+0xcd/0x10b0 [ 959.985675][ C0] tcp_fin+0x1f9/0x890 [ 959.989728][ C0] tcp_data_queue+0x24ce/0x9c40 [ 959.994664][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 960.000120][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 960.004695][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 960.009182][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 960.014633][ C0] ip_local_deliver+0x62a/0x7c0 [ 960.019476][ C0] ip_rcv+0x6cf/0x750 [ 960.023514][ C0] process_backlog+0xf0b/0x1410 [ 960.028372][ C0] net_rx_action+0x786/0x1aa0 [ 960.033040][ C0] __do_softirq+0x311/0x83d [ 960.037611][ C0] [ 960.039929][ C0] Uninit was stored to memory at: [ 960.044945][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 960.050653][ C0] __msan_chain_origin+0x50/0x90 [ 960.055579][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 960.060765][ C0] tcp_time_wait+0xaca/0x10b0 [ 960.065430][ C0] tcp_fin+0x1f9/0x890 [ 960.069485][ C0] tcp_data_queue+0x24ce/0x9c40 [ 960.074322][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 960.079778][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 960.084381][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 960.088880][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 960.094327][ C0] ip_local_deliver+0x62a/0x7c0 [ 960.099164][ C0] ip_rcv+0x6cf/0x750 [ 960.103132][ C0] process_backlog+0xf0b/0x1410 [ 960.107974][ C0] net_rx_action+0x786/0x1aa0 [ 960.112635][ C0] __do_softirq+0x311/0x83d [ 960.117115][ C0] [ 960.119427][ C0] Uninit was stored to memory at: [ 960.124437][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 960.130152][ C0] __msan_chain_origin+0x50/0x90 [ 960.135075][ C0] tcp_time_wait+0xb7e/0x10b0 [ 960.139746][ C0] tcp_fin+0x1f9/0x890 [ 960.143801][ C0] tcp_data_queue+0x24ce/0x9c40 [ 960.148634][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 960.154089][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 960.158684][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 960.163173][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 960.168629][ C0] ip_local_deliver+0x62a/0x7c0 [ 960.173482][ C0] ip_rcv+0x6cf/0x750 [ 960.177465][ C0] process_backlog+0xf0b/0x1410 [ 960.182303][ C0] net_rx_action+0x786/0x1aa0 [ 960.186966][ C0] __do_softirq+0x311/0x83d [ 960.191518][ C0] [ 960.193848][ C0] Uninit was stored to memory at: [ 960.198873][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 960.204587][ C0] __msan_chain_origin+0x50/0x90 [ 960.209517][ C0] inet_twsk_alloc+0xab6/0xba0 [ 960.214282][ C0] tcp_time_wait+0xcd/0x10b0 [ 960.218859][ C0] tcp_fin+0x1f9/0x890 [ 960.222917][ C0] tcp_data_queue+0x24ce/0x9c40 [ 960.227792][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 960.233339][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 960.237915][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 960.242402][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 960.254705][ C0] ip_local_deliver+0x62a/0x7c0 [ 960.259540][ C0] ip_rcv+0x6cf/0x750 [ 960.263522][ C0] process_backlog+0xf0b/0x1410 [ 960.268363][ C0] net_rx_action+0x786/0x1aa0 [ 960.273069][ C0] __do_softirq+0x311/0x83d [ 960.277549][ C0] [ 960.279954][ C0] Uninit was created at: [ 960.284189][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 960.289807][ C0] kmsan_alloc_page+0x12a/0x310 [ 960.294643][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 960.300175][ C0] alloc_pages_current+0x67d/0x990 [ 960.305283][ C0] alloc_slab_page+0x111/0x12f0 [ 960.310121][ C0] new_slab+0x2bc/0x1130 [ 960.314491][ C0] ___slab_alloc+0x1533/0x1f30 [ 960.319245][ C0] kmem_cache_alloc+0xb23/0xd70 [ 960.324089][ C0] inet_twsk_alloc+0x135/0xba0 [ 960.328851][ C0] tcp_time_wait+0xcd/0x10b0 [ 960.335648][ C0] tcp_fin+0x1f9/0x890 [ 960.339993][ C0] tcp_data_queue+0x24ce/0x9c40 [ 960.344860][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 960.350317][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 960.355031][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 960.359638][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 960.365368][ C0] ip_local_deliver+0x62a/0x7c0 [ 960.370215][ C0] ip_rcv+0x6cf/0x750 [ 960.374252][ C0] process_backlog+0xf0b/0x1410 [ 960.379345][ C0] net_rx_action+0x786/0x1aa0 05:15:16 executing program 0: [ 960.384036][ C0] __do_softirq+0x311/0x83d 05:15:16 executing program 3: 05:15:16 executing program 4: 05:15:16 executing program 1: 05:15:16 executing program 5: 05:15:16 executing program 0: 05:15:17 executing program 3: 05:15:17 executing program 4: 05:15:17 executing program 2: 05:15:17 executing program 1: 05:15:17 executing program 0: 05:15:17 executing program 3: 05:15:17 executing program 5: 05:15:17 executing program 4: 05:15:17 executing program 2: 05:15:17 executing program 1: 05:15:17 executing program 0: 05:15:18 executing program 3: 05:15:18 executing program 4: 05:15:18 executing program 5: 05:15:18 executing program 1: 05:15:18 executing program 0: 05:15:18 executing program 4: 05:15:18 executing program 3: 05:15:18 executing program 1: 05:15:18 executing program 5: 05:15:19 executing program 2: 05:15:19 executing program 3: 05:15:19 executing program 0: 05:15:19 executing program 4: 05:15:19 executing program 5: 05:15:19 executing program 1: 05:15:19 executing program 2: 05:15:19 executing program 0: 05:15:19 executing program 3: 05:15:19 executing program 4: 05:15:19 executing program 5: 05:15:19 executing program 1: 05:15:19 executing program 2: 05:15:20 executing program 0: 05:15:20 executing program 3: 05:15:20 executing program 5: 05:15:20 executing program 4: 05:15:20 executing program 1: 05:15:20 executing program 2: 05:15:20 executing program 0: 05:15:20 executing program 5: 05:15:20 executing program 3: 05:15:20 executing program 4: 05:15:21 executing program 2: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 05:15:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 05:15:21 executing program 0: 05:15:21 executing program 4: 05:15:21 executing program 5: 05:15:21 executing program 3: 05:15:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r1, 0x3, 0x8001, 0x8000) fallocate(r1, 0x3, 0x0, 0xfff9) 05:15:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000000300009800000000000000980100009800000000000000680200006802000068020000680200006802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000100000000000000000000000000000000000000006800706879736465760000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000068737230000000000000000000000000000000000000000000000000000000000008000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ac1e0001ac1414bb000000000000000074756e6c3000000000000000000000006e657470636930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000715800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) 05:15:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 05:15:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:15:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{r2, r3/1000+30000}, 0x16, 0x1, 0x8}, {{}, 0x15, 0x8, 0x3ff}, {{0x0, 0x7530}, 0x0, 0x5, 0x3ff}, {{0x0, 0x2710}, 0x17, 0x8a87, 0x3}], 0x60) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r4 = memfd_create(&(0x7f0000000340)='B\x8b\xb0\'%nod\x05\x00\x00\x1d-v\xcak\xff\xccX\xe2^)]\x00\x00\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\xc6Tl\xce%\xe4\x95[l5R\xb7\x02\fF', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x5) write(r4, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r4, 0x0) r5 = gettid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') fchdir(r6) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r5, 0x36) 05:15:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x0, 0x0, 0x90, 0x90, 0x0, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}, {0x0, 0x0, 0xffffffff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 966.700738][ T32] audit: type=1400 audit(1584335722.754:137): avc: denied { mounton } for pid=23406 comm="syz-executor.3" path="/proc/23406/task/23406" dev="proc" ino=251067 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 966.711864][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:22 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x2dd, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141542, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x5408, 0x5, 0x2000}, 0xfffffe07) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r4, 0x406, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x10099b3) sendfile(r1, r3, 0x0, 0x88000fc000000) 05:15:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c00300000801000008010000200200000000000000000000f0020000f0020000f0020000f0020000f00200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f7365300000000000000000000000626f6e645f736c6176655f300000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000048006c696d69740000000000000000000000000000000000000000000000000000000000050000000000000071ca530a56e3a5970000000065f867f9855e2b370000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 966.957857][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 967.088699][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="a8e09ab398ffcbac420c92c0587bf39114ed9fee39249bf61fbb2d674d9ae997e2ab64dbadd3141fa15fb16c42ec45416472fcb10f523373f74315a7604a544b4005f2f10bfaf05d240eab1df558bb3922eba112fa200258651ea4eb90a0cbb6b20e70c30c2d679365d61437b74c631fffde2b700d99ed983827cf0a15f3f8c93ff94bf60b6be99895a470806b61da2c35bc7c16f53d33dad3a0", 0x9a}], 0x1, 0x81000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$1(0x1, &(0x7f0000000140)='cpusetsecurity\x00') r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RMKNOD(r4, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x1, 0x1, 0x7}}, 0x14) write(r0, &(0x7f0000000000), 0x52698b21) [ 967.346520][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 967.407735][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x5}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 967.507080][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:23 executing program 2: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000003400)=[{{&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 05:15:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) r5 = inotify_init1(0x0) dup3(r5, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) [ 968.219380][ T32] audit: type=1804 audit(1584335724.274:138): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/481/bus" dev="sda1" ino=16643 res=1 05:15:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @remote}, @in=@initdev}}, {{@in6=@mcast1}}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00WR'], 0x20}}, 0x0) 05:15:25 executing program 1: socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 969.406550][ T32] audit: type=1804 audit(1584335725.464:139): pid=23453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/481/bus" dev="sda1" ino=16643 res=1 05:15:25 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 05:15:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/144, 0x90}], 0x100000000000006b, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xfd13, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2bd}, 0x48) 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) 05:15:26 executing program 0: capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x5, 0x7ff}) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') 05:15:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:26 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x0, 0x0, 0x200, 0x310, 0x310, 0x310, 0x310, 0x310, 0x310, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5c}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'sit0\x00', {0x5b, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3df) [ 970.893384][ T32] audit: type=1804 audit(1584335726.954:140): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/481/bus" dev="sda1" ino=16643 res=1 [ 971.046128][ T32] audit: type=1804 audit(1584335726.984:141): pid=23451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/481/bus" dev="sda1" ino=16643 res=1 05:15:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') sendfile(r0, r1, 0x0, 0x800000bf) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x34, 0x6, 0x0, {0x0, 0x0, 0xb, 0x0, 'clear_refs\x00'}}, 0x34) lstat(0x0, 0x0) 05:15:27 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xee01}}) 05:15:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 05:15:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 971.073342][ T32] audit: type=1804 audit(1584335726.984:142): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/481/bus" dev="sda1" ino=16643 res=1 05:15:27 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4de08", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "dbd321", 0x0, 0x3b, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}}, 0x0) 05:15:27 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000082c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/4103, 0x1007}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 05:15:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:27 executing program 4: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000003400)=[{{&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000040)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5330e1bcf", 0x31}], 0x1}}], 0x1, 0x0) 05:15:27 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) r1 = dup2(r0, r0) mq_timedreceive(r1, &(0x7f00000003c0)=""/131, 0x83, 0x0, &(0x7f0000000280)) 05:15:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 05:15:27 executing program 1: [ 971.954443][T23526] netlink: 31935 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.966045][T23526] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. 05:15:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001640)=""/4078, 0xfee}], 0x1, 0x4) [ 972.204803][ T32] audit: type=1804 audit(1584335728.264:143): pid=23538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/483/bus" dev="sda1" ino=17313 res=1 05:15:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) 05:15:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x10002) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @random}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000}}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8000) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x284, r4, 0x210, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0xffffffffffffffff}}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_IE={0x236, 0x2a, "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"}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x3f428a543f10b702) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x240}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(r0, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f00000000c0)=""/49) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x3d, 0x22004853, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f00000003c0)='F', 0x1, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) [ 972.393152][ T32] audit: type=1804 audit(1584335728.314:144): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/483/bus" dev="sda1" ino=17313 res=1 05:15:28 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x48) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 05:15:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x75}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:15:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 972.862218][ T32] audit: type=1326 audit(1584335728.914:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=23551 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f76d99 code=0x0 [ 973.022007][ T32] audit: type=1804 audit(1584335728.954:146): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir966766853/syzkaller.BU1OH3/579/bus" dev="sda1" ino=17201 res=1 [ 973.050191][ T32] audit: type=1804 audit(1584335728.974:147): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir966766853/syzkaller.BU1OH3/579/bus" dev="sda1" ino=17201 res=1 [ 973.116612][T23560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:15:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x34, 0x6, 0x0, {0x0, 0x0, 0xb, 0x0, 'clear_refs\x00'}}, 0x34) 05:15:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:29 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 973.674358][ T32] audit: type=1804 audit(1584335729.734:148): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir966766853/syzkaller.BU1OH3/579/bus" dev="sda1" ino=17201 res=1 [ 973.819628][ T32] audit: type=1326 audit(1584335729.764:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=23551 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f76d99 code=0x0 [ 973.845145][ T32] audit: type=1804 audit(1584335729.824:150): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir966766853/syzkaller.BU1OH3/579/bus" dev="sda1" ino=17201 res=1 [ 973.872997][ T32] audit: type=1804 audit(1584335729.824:151): pid=23578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir966766853/syzkaller.BU1OH3/579/bus" dev="sda1" ino=17201 res=1 05:15:30 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 05:15:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c) 05:15:30 executing program 2: madvise(&(0x7f0000080000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 05:15:30 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) acct(0x0) 05:15:30 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) 05:15:30 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 974.688592][ T32] audit: type=1804 audit(1584335730.744:152): pid=23605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/485/bus" dev="sda1" ino=16640 res=1 05:15:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x4040) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02", 0x3}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:15:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1000000000000a}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 05:15:31 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x6, 0x101}, 0x14}}, 0x0) 05:15:31 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:31 executing program 4: sched_setattr(0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000000c0)='[\'eth1-\x16', 0xffffffffffffffff) 05:15:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 05:15:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 05:15:32 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpriority(0x0, 0x0) 05:15:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@case_sensitive_yes='case_sensitive=yes'}]}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x20}}, 0x0) 05:15:32 executing program 2: clone(0x5228100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0x110, 0x0, 0x0, 0x110, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 05:15:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 05:15:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 05:15:34 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) msgget(0x3, 0x0) ftruncate(r3, 0x80006) sendfile(r0, r3, 0x0, 0x8000fffffffe) 05:15:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000000000"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 05:15:34 executing program 4: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x80800, 0x2000000000000080) 05:15:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) socket$inet_udplite(0x2, 0x2, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r1, r0, 0x0) 05:15:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 05:15:34 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r2, r3) mount$9p_fd(0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) [ 978.683032][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 978.683089][ T32] audit: type=1800 audit(1584335734.744:157): pid=23679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16676 res=0 05:15:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0x0, 0x100, 0x100, 0x100, 0x190, 0x190, 0x190, 0x190, 0x190, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x800}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'sit0\x00', 'rose0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 05:15:35 executing program 0: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4248a, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/216, &(0x7f00000000c0)=0xd8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x112, 0x3, 0x0, 0x0) 05:15:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x8910, 0x719000) 05:15:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400cdffffff9e000001010000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0) 05:15:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:15:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) 05:15:36 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) 05:15:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@case_sensitive_yes='case_sensitive=yes'}]}) 05:15:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0xc0184d00, 0x0) 05:15:36 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r1) write$binfmt_script(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400"], 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000340)=""/92, 0x5c}], 0x3, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f00000002c0)}, {&(0x7f0000000680)=""/222, 0xde}], 0x6, 0x0) [ 981.547992][T23792] ntfs: (device loop4): parse_options(): Unrecognized mount option . 05:15:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@case_sensitive_yes='case_sensitive=yes'}]}) 05:15:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0x0, 0x100, 0x100, 0x100, 0x190, 0x190, 0x190, 0x190, 0x190, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x800}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'sit0\x00', 'rose0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "3237fb"}}}}}, 0xfdef) 05:15:38 executing program 5: creat(&(0x7f00000000c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="030211000000030067c28cd69976c75f434678d5052b10114d0acc59c77e1a0dd5b7429484bfc3c4330aac960b70e85aa08b4a7179424b9cfa5873b5c891deef38964b993b7fed6baac7582ef422145c36a064061d8b9a4fa1589773921297e3ce2205c2e35d060586aa4a11a02db0c1"], 0x70, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 05:15:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 982.664409][T23809] ntfs: (device loop4): parse_options(): Unrecognized mount option . 05:15:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 983.255551][ T32] audit: type=1804 audit(1584335739.314:158): pid=23821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/490/bus" dev="sda1" ino=16683 res=1 [ 983.794705][T23821] ima: Can not allocate sm3-256 (reason: -2) [ 983.801322][ T32] audit: type=1800 audit(1584335739.854:159): pid=23821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16683 res=0 [ 984.558847][ C1] not chained 310000 origins [ 984.563501][ C1] CPU: 1 PID: 1556 Comm: kworker/u4:37 Not tainted 5.6.0-rc2-syzkaller #0 [ 984.572011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.582086][ C1] Workqueue: krdsd rds_connect_worker [ 984.587465][ C1] Call Trace: [ 984.590760][ C1] [ 984.593621][ C1] dump_stack+0x1c9/0x220 [ 984.597972][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 984.603699][ C1] ? should_fail+0x72/0x9e0 [ 984.608211][ C1] ? ret_from_fork+0x35/0x40 [ 984.612816][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 984.618888][ C1] ? arch_stack_walk+0x34c/0x3e0 [ 984.623930][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.629164][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.634378][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 984.640205][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 984.645333][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 984.651149][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 984.657408][ C1] ? tcp_parse_options+0x1ada/0x1b90 [ 984.662735][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.667949][ C1] __msan_chain_origin+0x50/0x90 [ 984.672909][ C1] tcp_conn_request+0x13ce/0x4d10 [ 984.677956][ C1] ? rb_first+0x31/0x100 [ 984.682245][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.687469][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.692683][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.697892][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 984.703972][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.709212][ C1] tcp_v4_conn_request+0x19b/0x240 [ 984.714357][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 984.719389][ C1] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 984.724683][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 984.730068][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.735280][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 984.741106][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 984.747208][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.752436][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 984.757052][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 984.761786][ C1] ? tcp_filter+0xf0/0xf0 [ 984.766133][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 984.771624][ C1] ip_local_deliver+0x62a/0x7c0 [ 984.776510][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 984.781630][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 984.787296][ C1] ip_rcv+0x6cf/0x750 [ 984.791477][ C1] ? ip_rcv_core+0x1270/0x1270 [ 984.796257][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 984.801898][ C1] process_backlog+0xf0b/0x1410 05:15:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7fff}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:15:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) dup3(r1, r0, 0x0) 05:15:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 05:15:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e1d3d2", 0x50, 0x2f, 0x0, @remote, @mcast2, {[@dstopts={0x3e, 0x0, [0x8, 0x0, 0x2]}], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x3f]}}}}}}}, 0x0) [ 984.806760][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 984.812421][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 984.817717][ C1] net_rx_action+0x786/0x1aa0 [ 984.822428][ C1] ? net_tx_action+0xc30/0xc30 [ 984.827208][ C1] __do_softirq+0x311/0x83d [ 984.831728][ C1] do_softirq_own_stack+0x49/0x80 [ 984.836745][ C1] [ 984.839723][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 984.844933][ C1] local_bh_enable+0x36/0x40 [ 984.849522][ C1] ip_finish_output2+0x2115/0x2610 [ 984.854628][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 984.860341][ C1] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 984.866507][ C1] __ip_finish_output+0xaa7/0xd80 [ 984.871552][ C1] ip_finish_output+0x166/0x410 [ 984.876522][ C1] ip_output+0x593/0x680 [ 984.880782][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 984.886063][ C1] ? ip_finish_output+0x410/0x410 [ 984.891086][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 984.896025][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 984.901571][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.906774][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.912057][ C1] ip_queue_xmit+0xcc/0xf0 [ 984.916475][ C1] ? tcp_v4_fill_cb+0x580/0x580 [ 984.921314][ C1] __tcp_transmit_skb+0x439c/0x6090 [ 984.926500][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 984.932320][ C1] tcp_connect+0x4337/0x6920 [ 984.936899][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 984.942174][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.947386][ C1] tcp_v4_connect+0x21fd/0x2370 [ 984.952255][ C1] ? tcp_twsk_unique+0xba0/0xba0 [ 984.957182][ C1] __inet_stream_connect+0x2fb/0x1340 [ 984.962547][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 984.967831][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.973024][ C1] inet_stream_connect+0x101/0x180 [ 984.978215][ C1] ? __inet_stream_connect+0x1340/0x1340 [ 984.983841][ C1] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 984.989488][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 984.994687][ C1] ? rds_tcp_state_change+0x390/0x390 [ 985.000069][ C1] rds_connect_worker+0x2a6/0x470 [ 985.005092][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 985.011171][ C1] ? rds_addr_cmp+0x200/0x200 [ 985.015873][ C1] process_one_work+0x1555/0x1f40 [ 985.020920][ C1] worker_thread+0xef6/0x2450 [ 985.025628][ C1] kthread+0x4b5/0x4f0 [ 985.029687][ C1] ? process_one_work+0x1f40/0x1f40 [ 985.034885][ C1] ? kthread_blkcg+0xf0/0xf0 [ 985.039485][ C1] ret_from_fork+0x35/0x40 [ 985.043900][ C1] Uninit was stored to memory at: [ 985.048919][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.054623][ C1] __msan_chain_origin+0x50/0x90 [ 985.059544][ C1] tcp_conn_request+0x1781/0x4d10 [ 985.064551][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.069656][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 985.074674][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.080043][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.084622][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.089110][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.094553][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.099387][ C1] ip_rcv+0x6cf/0x750 [ 985.103372][ C1] process_backlog+0xf0b/0x1410 [ 985.108212][ C1] net_rx_action+0x786/0x1aa0 [ 985.112874][ C1] __do_softirq+0x311/0x83d [ 985.117358][ C1] [ 985.119666][ C1] Uninit was stored to memory at: [ 985.124675][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.130381][ C1] __msan_chain_origin+0x50/0x90 [ 985.135309][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 985.140577][ C1] tcp_conn_request+0x33d7/0x4d10 [ 985.145585][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.150679][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 985.155775][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.161160][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.165746][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.170239][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.175711][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.180737][ C1] ip_rcv+0x6cf/0x750 [ 985.184974][ C1] process_backlog+0xf0b/0x1410 [ 985.189819][ C1] net_rx_action+0x786/0x1aa0 [ 985.194503][ C1] __do_softirq+0x311/0x83d [ 985.198985][ C1] [ 985.201309][ C1] Uninit was stored to memory at: [ 985.206361][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.212081][ C1] __msan_chain_origin+0x50/0x90 [ 985.217105][ C1] tcp_conn_request+0x1781/0x4d10 [ 985.222133][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.227244][ C1] tcp_v6_conn_request+0xb5/0x2d0 [ 985.232270][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.237642][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.242253][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.246752][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.252205][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.262619][ C1] ip_rcv+0x6cf/0x750 [ 985.266616][ C1] process_backlog+0xf0b/0x1410 [ 985.271459][ C1] net_rx_action+0x786/0x1aa0 [ 985.276909][ C1] __do_softirq+0x311/0x83d [ 985.281397][ C1] [ 985.283711][ C1] Uninit was stored to memory at: [ 985.288726][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.294780][ C1] __msan_chain_origin+0x50/0x90 [ 985.300171][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 985.306249][ C1] tcp_conn_request+0x33d7/0x4d10 [ 985.311257][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.317835][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.324741][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.330563][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.335092][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.341348][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.347617][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 985.352556][ C1] ip_list_rcv+0x8eb/0x950 [ 985.357328][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 985.363472][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 985.369702][ C1] napi_complete_done+0x2ef/0xb60 [ 985.374729][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 985.380086][ C1] virtnet_poll+0x1468/0x19f0 [ 985.384769][ C1] net_rx_action+0x786/0x1aa0 [ 985.389462][ C1] __do_softirq+0x311/0x83d [ 985.393944][ C1] [ 985.396264][ C1] Uninit was stored to memory at: [ 985.401297][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.407023][ C1] __msan_chain_origin+0x50/0x90 [ 985.412020][ C1] tcp_conn_request+0x1781/0x4d10 [ 985.417056][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.422163][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.427626][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.432207][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.436698][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.442139][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.446974][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 985.451896][ C1] ip_list_rcv+0x8eb/0x950 [ 985.456306][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 985.462456][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 985.468879][ C1] napi_complete_done+0x2ef/0xb60 [ 985.473908][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 985.479287][ C1] virtnet_poll+0x1468/0x19f0 [ 985.483954][ C1] net_rx_action+0x786/0x1aa0 [ 985.488722][ C1] __do_softirq+0x311/0x83d [ 985.493212][ C1] [ 985.495536][ C1] Uninit was stored to memory at: [ 985.500585][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.506316][ C1] __msan_chain_origin+0x50/0x90 [ 985.511276][ C1] tcp_openreq_init_rwin+0xc22/0xc80 [ 985.516581][ C1] tcp_conn_request+0x33d7/0x4d10 [ 985.521633][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.526743][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.532107][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.536697][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.541205][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.546679][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.551522][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 985.556372][ C1] ip_list_rcv+0x8eb/0x950 [ 985.560779][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 985.566928][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 985.573154][ C1] napi_complete_done+0x2ef/0xb60 [ 985.578180][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 985.583679][ C1] virtnet_poll+0x1468/0x19f0 [ 985.588362][ C1] net_rx_action+0x786/0x1aa0 [ 985.593049][ C1] __do_softirq+0x311/0x83d [ 985.597535][ C1] [ 985.599853][ C1] Uninit was stored to memory at: [ 985.604870][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 985.610580][ C1] __msan_chain_origin+0x50/0x90 [ 985.615515][ C1] tcp_conn_request+0x1781/0x4d10 [ 985.620532][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.625633][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.631002][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.635579][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.640184][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.645651][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.650496][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 985.655347][ C1] ip_list_rcv+0x8eb/0x950 [ 985.659779][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 985.665948][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 985.672192][ C1] napi_complete_done+0x2ef/0xb60 [ 985.677215][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 985.682672][ C1] virtnet_poll+0x1468/0x19f0 [ 985.687351][ C1] net_rx_action+0x786/0x1aa0 [ 985.692014][ C1] __do_softirq+0x311/0x83d [ 985.696506][ C1] [ 985.698833][ C1] Uninit was created at: [ 985.703073][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 985.708777][ C1] kmsan_alloc_page+0x12a/0x310 [ 985.713612][ C1] __alloc_pages_nodemask+0x5712/0x5e80 [ 985.719144][ C1] alloc_pages_current+0x67d/0x990 [ 985.724255][ C1] alloc_slab_page+0x111/0x12f0 [ 985.729100][ C1] new_slab+0x2bc/0x1130 [ 985.733341][ C1] ___slab_alloc+0x1533/0x1f30 [ 985.738104][ C1] kmem_cache_alloc+0xb23/0xd70 [ 985.742954][ C1] inet_reqsk_alloc+0xac/0x830 [ 985.747714][ C1] tcp_conn_request+0x753/0x4d10 [ 985.752728][ C1] tcp_v4_conn_request+0x19b/0x240 [ 985.757839][ C1] tcp_rcv_state_process+0x26b/0x7140 [ 985.764199][ C1] tcp_v4_do_rcv+0xb0f/0xd70 [ 985.768791][ C1] tcp_v4_rcv+0x3f39/0x4d00 [ 985.773329][ C1] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 985.778775][ C1] ip_local_deliver+0x62a/0x7c0 [ 985.783624][ C1] ip_sublist_rcv+0x11fa/0x13c0 [ 985.788461][ C1] ip_list_rcv+0x8eb/0x950 [ 985.792880][ C1] __netif_receive_skb_list_core+0x1311/0x1380 [ 985.799021][ C1] netif_receive_skb_list_internal+0xf62/0x1620 [ 985.805262][ C1] napi_complete_done+0x2ef/0xb60 [ 985.810274][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 985.815630][ C1] virtnet_poll+0x1468/0x19f0 [ 985.820417][ C1] net_rx_action+0x786/0x1aa0 [ 985.825109][ C1] __do_softirq+0x311/0x83d [ 985.861534][T23838] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0xe 05:15:43 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYPTR, @ANYRES32=0x0, @ANYBLOB="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"], 0x5}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x9, "3237fb"}}}}}, 0xfdef) 05:15:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000000)=""/72, 0x48) 05:15:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e1d3d2", 0x50, 0x2f, 0x0, @remote, @mcast2, {[@dstopts={0x3e, 0x0, [0x8, 0x0, 0x2]}], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x3f]}}}}}}}, 0x0) 05:15:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) [ 987.423065][T23871] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0xe 05:15:43 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) syz_mount_image$btrfs(0x0, &(0x7f0000000140)='./bus\x00', 0x6, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="73706163655f63616368653d76322c0000766963653d2e2f6275732c73706163655f63616368653d76312c6e6f7373642c6d657461646174615f726174696f3d30783030303030302e3030303030303030302c7065726d69745f646972656374696f2c736d61636b6673f26f6f743d2c6d61736b3d5e4d41595f455845432c646f6e745f686173682c61707072616973214954d2cb44be5273652c7569643c3359e6d7a04662b6b8be4cfcb6d920814c5226019cf1ec665bed40866f8246d6194c1da22d", @ANYRESDEC=0x0, @ANYBLOB]) r2 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000007c0)="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") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x480442, 0x0) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f00000008c0)=@in6={0xa, 0x0, 0x99e0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000940)="afa7d750dbcbef4a67ea05499f56d55606f8e07ea42f2bb1134595d4fb52e3a648c09c45cd1ba04691346bebdbbb3708d42724827eed5c6ee06d15662a5a59dbd9f0bfe9ca36b7f6a3d97e12b34b304c2bff6952ae005733b5f82cb526b655d7c06aca24a73e6d", 0x67}], 0x1}, 0x40804) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f3) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0)={0x2, 0x0, @rand_addr=0x40}, 0x10, 0x0}}], 0x1, 0x804) ftruncate(r3, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf2513000000140006800800010006000000080001000000000004000180e000018044000400200001000a004e20ffff000100000000000000000000ffffe000000200000000200002000a004e2400000401fe8000000000000000000000000000aac401000008000300030000000800030008000000080003008609"], 0x3}}, 0x2c000005) 05:15:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e5199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d6a4cf10ce619a25ac9fa07fdffed203782ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1003f5435282d27194a232de4acfd8dd899dec6c2ec7937c23b41815cb2b03a6dd3a248c3c5a3", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 05:15:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2f]}}}, 0xa}]}) 05:15:43 executing program 1: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000013) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 988.243427][T23898] tmpfs: Bad value for 'mpol' 05:15:45 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='dax\x00', 0x0, 0x0) 05:15:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 05:15:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) 05:15:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0xffffff7f}, 0x0) [ 989.562119][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 989.655280][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 989.711744][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 989.781667][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 989.838560][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 989.890728][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready 05:15:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x44}}, 0x0) [ 989.976446][T23930] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 990.122384][ T680] tipc: TX() has been purged, node left! [ 990.227521][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 990.240499][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 990.248559][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 990.256369][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 990.264497][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 990.272725][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 990.280698][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 05:15:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 05:15:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x0) 05:15:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) 05:15:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x44}}, 0x0) 05:15:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/216) 05:15:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x44}}, 0x0) [ 993.517803][T23991] IPVS: ftp: loaded support on port[0] = 21 [ 993.930515][T23991] netdevsim0 speed is unknown, defaulting to 1000 [ 995.667681][T23991] chnl_net:caif_netlink_parms(): no params data found [ 996.010610][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.018202][T23991] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.027577][T23991] device bridge_slave_0 entered promiscuous mode [ 996.048637][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.056146][T23991] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.071483][T23991] device bridge_slave_1 entered promiscuous mode [ 996.195242][T23991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.220084][T23991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.302072][ T680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.309675][ T680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.319085][ T680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.329189][ T680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.339434][ T680] device bridge_slave_1 left promiscuous mode [ 996.345958][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.394856][ T680] device bridge_slave_0 left promiscuous mode [ 996.401265][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.459216][ T680] device veth1_macvtap left promiscuous mode [ 996.465440][ T680] device veth0_macvtap left promiscuous mode [ 996.472027][ T680] device veth1_vlan left promiscuous mode [ 996.477835][ T680] device veth0_vlan left promiscuous mode [ 999.163542][ T680] device hsr_slave_0 left promiscuous mode [ 999.202554][ T680] device hsr_slave_1 left promiscuous mode [ 999.278083][ T680] team0 (unregistering): Port device team_slave_1 removed [ 999.294523][ T680] team0 (unregistering): Port device team_slave_0 removed [ 999.311656][ T680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.353100][ T680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.480945][ T680] bond0 (unregistering): Released all slaves [ 999.590502][T23991] team0: Port device team_slave_0 added [ 999.605627][T23991] team0: Port device team_slave_1 added [ 999.645521][T23991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.652673][T23991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.679477][T23991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.697922][T23991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.705062][T23991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.732235][T23991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.816784][T23991] device hsr_slave_0 entered promiscuous mode [ 999.872974][T23991] device hsr_slave_1 entered promiscuous mode [ 999.912008][T23991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.919908][T23991] Cannot create hsr debugfs directory [ 1000.366595][T23991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.412387][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.421556][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1000.440323][T23991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.461224][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1000.470785][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.480087][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.487261][T11427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.499429][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.518620][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.528737][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.538158][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.545497][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.593169][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.604302][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.644092][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.653779][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.667139][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.676982][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.705042][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.713959][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.723738][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.734094][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.743205][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.758376][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.847049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1000.855167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1000.894279][T23991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.089340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.105071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.190687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1001.201598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1001.220076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.230070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.256821][T23991] device veth0_vlan entered promiscuous mode [ 1001.302583][T23991] device veth1_vlan entered promiscuous mode [ 1001.409031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1001.417828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1001.427294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1001.436933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1001.459117][T23991] device veth0_macvtap entered promiscuous mode [ 1001.477071][T23991] device veth1_macvtap entered promiscuous mode [ 1001.516508][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.527466][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.537502][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.548055][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.558006][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.568549][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.578598][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.589211][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.599370][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.609930][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.623625][T23991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.639269][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1001.648667][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1001.658229][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.668121][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.708230][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.719151][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.729219][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.739781][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.749961][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.760562][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.770659][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.781415][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.791605][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.802236][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.815986][T23991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.826829][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1001.836754][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1002.443581][ T32] audit: type=1400 audit(1584335758.494:160): avc: denied { watch watch_reads } for pid=24049 comm="syz-executor.1" path="/proc/24049" dev="proc" ino=257402 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1002.449775][T24050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12148 sclass=netlink_route_socket pid=24050 comm=syz-executor.1 05:15:58 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x4000000000000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 05:15:58 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:15:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 05:15:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xddf5) 05:15:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="cefaad1bb83c000007dc", 0xa}], 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x80000001) 05:15:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099bb) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) [ 1002.682313][ T680] tipc: TX() has been purged, node left! [ 1002.926267][ T32] audit: type=1804 audit(1584335758.984:161): pid=24079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487006792/syzkaller.T79a2Z/192/bus" dev="sda1" ino=16522 res=1 [ 1003.142126][ T32] audit: type=1804 audit(1584335759.114:162): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/494/bus" dev="sda1" ino=16733 res=1 [ 1003.189695][T24083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=24083 comm=syz-executor.4 05:15:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) [ 1003.864749][ T32] audit: type=1804 audit(1584335759.924:163): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/494/bus" dev="sda1" ino=16733 res=1 [ 1004.165978][ T32] audit: type=1804 audit(1584335759.974:164): pid=24094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/494/bus" dev="sda1" ino=16733 res=1 [ 1004.193320][ T32] audit: type=1804 audit(1584335760.014:165): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir595683149/syzkaller.rh1DZH/494/bus" dev="sda1" ino=16733 res=1 05:16:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) close(r0) 05:16:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 05:16:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0x3ef) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xffffc205, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 1004.587898][ T680] device ip6gretap0 left promiscuous mode 05:16:01 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019002d00e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 05:16:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) [ 1005.850686][ T32] audit: type=1800 audit(1584335761.904:166): pid=24079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16522 res=0 [ 1005.956751][T24117] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1005.967507][T24117] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1005.977459][T24117] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1006.055818][T24117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1006.063333][T24117] EXT4-fs error (device loop4): ext4_read_inode_bitmap:135: comm syz-executor.4: Invalid inode bitmap blk 0 in block_group 0 [ 1006.100509][T24117] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 05:16:02 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x4000000000000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 05:16:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:02 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x4000000000000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) ioperm(0x3, 0x0, 0x0) 05:16:02 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x81, 0x2) [ 1008.791417][T24155] IPVS: ftp: loaded support on port[0] = 21 [ 1008.988970][T24155] netdevsim0 speed is unknown, defaulting to 1000 [ 1009.257780][T24155] chnl_net:caif_netlink_parms(): no params data found [ 1009.478778][T24155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.486479][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.499627][T24155] device bridge_slave_0 entered promiscuous mode [ 1009.521426][T24155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.529117][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.538910][T24155] device bridge_slave_1 entered promiscuous mode [ 1009.595554][ T680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.604164][ T680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.613334][ T680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.620812][ T680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.630734][ T680] device bridge_slave_1 left promiscuous mode [ 1009.637301][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.685822][ T680] device bridge_slave_0 left promiscuous mode [ 1009.692656][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.748846][ T680] device veth1_macvtap left promiscuous mode [ 1009.754987][ T680] device veth0_macvtap left promiscuous mode [ 1009.761014][ T680] device veth1_vlan left promiscuous mode [ 1009.767138][ T680] device veth0_vlan left promiscuous mode [ 1011.433020][ T680] device batadv0 left promiscuous mode [ 1011.603393][ T680] device hsr_slave_0 left promiscuous mode [ 1011.642085][ T680] device hsr_slave_1 left promiscuous mode [ 1011.728586][ T680] team0 (unregistering): Port device team_slave_1 removed [ 1011.747312][ T680] team0 (unregistering): Port device team_slave_0 removed [ 1011.765767][ T680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.820309][ T680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.940983][ T680] bond0 (unregistering): Released all slaves [ 1012.044089][T24155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.061067][T24155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.096578][T24155] team0: Port device team_slave_0 added [ 1012.110878][T24155] team0: Port device team_slave_1 added [ 1012.146900][T24155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.154174][T24155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.180245][T24155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.195214][T24155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.202407][T24155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.228719][T24155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.305533][T24155] device hsr_slave_0 entered promiscuous mode [ 1012.353278][T24155] device hsr_slave_1 entered promiscuous mode [ 1012.392040][T24155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1012.399679][T24155] Cannot create hsr debugfs directory [ 1012.918105][T24155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.950691][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1012.960136][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.990719][T24155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.026576][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1013.036754][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1013.045975][ T4010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.053223][ T4010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.069628][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1013.085029][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1013.094592][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1013.104044][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.111264][T11279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.132681][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1013.150764][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1013.173356][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1013.184154][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1013.226198][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1013.235139][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1013.246009][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1013.255608][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1013.265255][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1013.288419][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1013.298971][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1013.318037][T24155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1013.357236][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.365584][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1013.389639][T24155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.499187][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1013.509489][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1013.558718][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1013.569097][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1013.581286][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1013.589891][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1013.607249][T24155] device veth0_vlan entered promiscuous mode [ 1013.634532][T24155] device veth1_vlan entered promiscuous mode [ 1013.688212][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1013.697084][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1013.706325][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1013.716212][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1013.740309][T24155] device veth0_macvtap entered promiscuous mode [ 1013.758833][T24155] device veth1_macvtap entered promiscuous mode [ 1013.797470][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1013.809586][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.821444][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1013.832609][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.843651][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1013.855000][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.865986][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1013.877308][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.888480][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1013.899048][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.911552][T24155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.922380][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1013.932051][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1013.941414][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1013.951352][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1013.973525][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1013.986233][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.996294][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1014.006855][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.016991][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1014.027547][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.037527][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1014.048095][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.058089][T24155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1014.068657][T24155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.081223][T24155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.091963][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1014.101901][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1014.537193][T24189] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 05:16:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="cefaad1bb83c000007dc", 0xa}], 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x80000001) 05:16:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1688], 0x490) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 05:16:10 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000313d2d0400000000080000000a004e210000a5bd7455b9a274c6000000000000004000010900000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7367ae0000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aee00000000000000000000000000000000ffffac1e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000782c000000000000000000000000000000000a00000000000000d2db7064ff394065aee1714ee2729bf700000000000000000000000000000000000000000000000000000000010000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1700000000000000000080000000000000000000000000000000000000000000000000000000000000efff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000908d85000000000000000080000000000000000000000000000a00000000000000fe8800000000356a25f10c83171b3c052dd1bd1ad500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000004a0d6600000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000001000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c8f10bc9852e6aad092fbcbfcb00000000000000000000007000000000000000000000000000000000000000072815858e8f1165857a58b4b3ec0880cd8408af4ee4dbb5ab0023f63015dfdcbe9b4ff4f8704b34b84b8103d66f0a61113e9da11775b08aeca7d0f5ca189314df1c25cb4a12f3b26b4102d0661bea7ea15bcd29d79c23ff624825dc5b7525f019221c8a2199b998f0498366e48abfe8b34393f86f4489d5c9fe42c3900464ab906125fa85c9af09c9f0a3d31738b7f9f1d5f15b5a911bd129897532dbb15277120552b035acffba034f506d2b588e8dd9559c5d9c6f747d06f8a3815957b811b23168a69db8d8a20a8cd0a7784fd3ce19b09f5e524930190b41c807cc6af01eeeb50f357b85f8d75f0ce8360ff0000001b0589db6e1487785249195c46a06962a3001ec231383e8a83529576539fcdb58cbe6fd372d59c2c4679733a67000bb75d240b2929e2a156bdc8893bbd19a23d7bbd3ad6fe5a0793ed8f79e9786b5f9e1758097898d6f7ae19e2b38811ca065cbe9a24b35d4eee2753240f1568afc40677c3394c4a53f9d9887db3bf1be529d210aa7be241508157e7df319c4170ca48d7cd4b58016c8d0fc36313c50242aa813354a6d0d56631d94b88c808dc40d1a2d4abcc0ee7c974b38ea6b963c449f9a9fe0c0c21bcb3001ef2029edc09b59d0348babe1ae7474c10a0bb8de525c63ccd36ec25cb8dcf4cb35945f5ff85aa570f38ea0a27e7a721a28f57af8c14c1be4b15142e08ac9d4d00"/1688], 0x490) 05:16:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0x3ef) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 05:16:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1688], 0x490) 05:16:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) recvmmsg(0xffffffffffffffff, &(0x7f0000005600), 0x0, 0x0, 0x0) 05:16:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) close(r0) 05:16:11 executing program 4: 05:16:11 executing program 0: [ 1015.172027][T24217] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 05:16:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:11 executing program 2: 05:16:11 executing program 1: 05:16:11 executing program 0: 05:16:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC, @ANYBLOB="0ead808470ff00afa6068fd8cc8ac2f918dfb611567d8016cf26a2054fba17f8e0713a33a7424e76895ff91c10769735bdc67e9f7bcd35b6ffc27a274fbe56cd1b42abb5316b563bb286d22605f585fe8e5107ec17d226ff85ab8e496553f841453bb32983c90889b1a4fd5fba946f5545c9e085d120456b75ded7ca5752c703b1e89e7bcf0b923e5adbb1aa7b9e2ec33ede371f1e350c577adfbb97af0b1b6a1690105b3e", @ANYRESOCT], @ANYBLOB="db10423f3f5e821d76e7daaf1527a9f64c0f593f1a92ceab4f4344b7519bc4c8019cbdc1a4287aee204a98bb3098d40900000000000000a77f08694766c579dd23d8a7eed031932f2e2c243d"], 0x0, 0x44}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:16:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:12 executing program 1: 05:16:12 executing program 4: 05:16:12 executing program 0: 05:16:12 executing program 2: 05:16:12 executing program 4: 05:16:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:12 executing program 1: 05:16:12 executing program 0: 05:16:12 executing program 2: 05:16:12 executing program 4: 05:16:15 executing program 1: 05:16:15 executing program 0: 05:16:15 executing program 5: 05:16:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x1) getdents64(r0, &(0x7f0000000240)=""/4111, 0x100f) getdents64(r0, 0x0, 0x0) 05:16:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:15 executing program 2: 05:16:15 executing program 2: 05:16:15 executing program 1: 05:16:15 executing program 0: 05:16:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:15 executing program 4: 05:16:15 executing program 5: 05:16:15 executing program 0: 05:16:15 executing program 1: 05:16:15 executing program 2: 05:16:16 executing program 4: 05:16:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 05:16:16 executing program 5: 05:16:16 executing program 1: 05:16:16 executing program 0: 05:16:16 executing program 2: 05:16:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 05:16:16 executing program 4: 05:16:16 executing program 5: 05:16:16 executing program 1: 05:16:16 executing program 0: 05:16:16 executing program 2: 05:16:17 executing program 4: 05:16:17 executing program 5: 05:16:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 05:16:17 executing program 1: 05:16:17 executing program 0: 05:16:17 executing program 2: 05:16:17 executing program 4: 05:16:17 executing program 5: 05:16:17 executing program 1: 05:16:17 executing program 0: 05:16:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:17 executing program 2: 05:16:17 executing program 5: 05:16:17 executing program 4: 05:16:18 executing program 1: 05:16:18 executing program 0: 05:16:18 executing program 2: 05:16:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:18 executing program 4: 05:16:18 executing program 5: 05:16:18 executing program 1: 05:16:18 executing program 2: 05:16:18 executing program 0: 05:16:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 05:16:18 executing program 4: 05:16:18 executing program 5: 05:16:18 executing program 1: 05:16:19 executing program 0: 05:16:19 executing program 5: 05:16:19 executing program 4: 05:16:19 executing program 1: 05:16:19 executing program 3: 05:16:19 executing program 2: 05:16:19 executing program 3: 05:16:19 executing program 1: 05:16:19 executing program 0: 05:16:19 executing program 4: 05:16:19 executing program 5: 05:16:19 executing program 2: 05:16:20 executing program 3: 05:16:20 executing program 1: 05:16:20 executing program 0: 05:16:20 executing program 5: 05:16:20 executing program 4: 05:16:20 executing program 2: 05:16:20 executing program 3: 05:16:20 executing program 1: 05:16:20 executing program 0: 05:16:20 executing program 4: 05:16:20 executing program 2: 05:16:20 executing program 5: 05:16:21 executing program 3: 05:16:21 executing program 0: 05:16:21 executing program 1: 05:16:21 executing program 2: 05:16:21 executing program 4: 05:16:21 executing program 5: 05:16:21 executing program 3: 05:16:21 executing program 0: 05:16:21 executing program 1: 05:16:21 executing program 4: 05:16:21 executing program 2: 05:16:21 executing program 5: 05:16:21 executing program 3: 05:16:22 executing program 0: 05:16:22 executing program 1: 05:16:22 executing program 2: 05:16:22 executing program 4: 05:16:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x5f, 0x3, 0x0, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d7f95cb96dfbf5cd17fe209e83aff6b80d393593976c9ef05a5ed"}, 0x5f, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x80003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 05:16:22 executing program 5: 05:16:22 executing program 4: 05:16:22 executing program 2: 05:16:22 executing program 1: 05:16:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 05:16:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) 05:16:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xffffffef) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:16:23 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x212, 0x300000000000000) 05:16:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001740)={0x2, 0x4e22}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001780)="a83ecc5bb364180759e40b01bf5b7be3894a3d95e662f9654b53278f1055d11a84dcc5965892d292f26cc05a381b26ae251162341de2be3ec42aa076fd984cea57b00fb203d872a2891786285275e09b164bba5a2ef46e50d935758a422cddb6fc", 0x61}, {&(0x7f0000001800)="39db205a1edbc0271f56237e5bc97d9e1f639cd6cdd303f2f4a7d73516a9c137b2c39b8b", 0x24}], 0x2, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x20}}, {{&(0x7f00000018c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001900)="e1a107d6a5a4034a5c905e7d0688119336b7696930d16aea3111ad85d1d4f47d85b8b9b64de5e57489740f81ccd90c0523db861199354686a1c8ea0b4b39627154395457d7437a1b3c0d9686600322f593df395e1eed4e4b20f1f6fb5fb392d485fd33a3470a1e1b6f51cf151db8272eb334234c1ca917cc4752f3a0fdd55f32445b6c96268896d42407663394f1dd1c092ea09e42079dfa9b3ff2454a5db38430c6dfd7fb6792090427e11266e9c9b3a07ad183380fb72045e3ef76063ae05412519a776eda25867ed78fd879e8d367cf152b5c017bdd8a14d27b256ff8f385b6cd", 0xe2}, {&(0x7f0000001a00)="5d5a6b39e80a9737b9669eb219f32212830b3cdcc86c0d6e62fbbe7310a1ee63552183a0b6121af33bb52920416300b315260b175e7139e9e278b23a4661fa55f73d4c026d6681db134423c182f9864ceb53180b895550db4352cf1d62e1818617c66dcfa3955f0941f40b6d40f1cbdebc4b1e8b8eab19250ddf4fe4d1b41f4dd103c23e2680fd2bfd7bda2481300661ddd59d410b595a9960becd9c857d3f717892a7ce79efc03aabd65e567f4a5ca41f3b108fb0cd5fbb7d77c8929b79b37e0cd7a2c3389c", 0xc6}, {&(0x7f0000001b00)="63cd2f1f0671728e5a782ffb622aa3b14b71f16cd585e85017110450e5afd2821d6a9f4fe6", 0x25}], 0x3}}, {{&(0x7f0000001b80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001bc0)}}, {{&(0x7f0000001c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001c40)="97180235e2849c1f95da5f073084a3be4fc2ccf7fb85259454", 0x19}, {&(0x7f0000001c80)="824ffe12092e6bcfe3d2a6fab816405447d0f2b26d8f669ddcd46f45e6d786908f0c61d37bb7e4815df1cd0a1f05605a28b3495bcd83b9ac49e7775e4c43d99c3940d73df37012d580a7c5da6d405d2e0e7223d6ac7417976fe107a7aeea0cb2a136a016064d3be4f1b8bc35d3ebac52d11f7a0192dd387deb47525f12518d2633a666e1a822971675b8ff3370b8843bf99d1c2a97aad6229f1e3b781d26362d63dd720ba8ccfa98a1cd57f894b934fca204fae8ca62c24d7b90a9c9c9ff11", 0xbf}], 0x2, &(0x7f0000001d80)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x110, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xb9, [@remote, @remote, @rand_addr=0x1, @remote, @local, @local]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @cipso={0x86, 0x19, 0x1, [{0x1, 0xe, "831762fdf589829217a193b7"}, {0x1, 0x5, "9d9814"}]}, @lsrr={0x83, 0x17, 0x9d, [@rand_addr=0x8, @local, @rand_addr=0xb576, @empty, @rand_addr=0x2]}, @lsrr={0x83, 0x1b, 0xd9, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @cipso={0x86, 0x27, 0x1, [{0x4, 0x2}, {0x0, 0xb, "8a6b8975b4deeb3cc7"}, {0xe, 0x5, "1f15b6"}, {0x6, 0x6, 'i$+Q'}, {0x0, 0x9, "a0987c8423552a"}]}, @noop, @cipso={0x86, 0x62, 0x3, [{0x7, 0x6, "678a2c45"}, {0x0, 0xb, "08d5faa70098b2fa63"}, {0x7, 0xf, "75c149f6e6e7618bf6ecbd9caa"}, {0x2, 0x7, "0ea62e551e"}, {0x5, 0xf, "17cd436049258042e97a33ca38"}, {0x6, 0xb, "731dda3b2689565843"}, {0x5, 0x9, "a3c8992f7bd8f3"}, {0x7, 0x12, "a2be41b8a15255e978b51877d397fd47"}]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x3b, 0x0, 0xa, [0xffff, 0x3, 0x5, 0x0]}, @noop, @noop, @timestamp_addr={0x44, 0x3c, 0xb9, 0x1, 0x0, [{@local, 0x1ff}, {@multicast1, 0x6}, {@empty, 0x2}, {@multicast1, 0x8001}, {@rand_addr=0x3f, 0xfff}, {@empty, 0x6}, {@rand_addr=0xffff, 0xf4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x210}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001fc0)="6730c42e980c4cd9c6cbfdba", 0xc}, {&(0x7f0000002000)="77861c85c5ebcf5f8456bd43a6cf128a8c02f36e05c9f3c27a343ba1822d6b7cbc96767f7099fdae0b0eafe24d3bc668a8d2daa19feeec2cc760c3af73dbb0c6ee3e8410d42f9a80a5bb6f155fd6e136b3e5333fe8a3dea9e3c4c9a410d54b79df2f9611339595dc992fab4a4e036ff0d1fb0535ff7c224a", 0x78}, {&(0x7f0000002080)="b62b70f9e2c02e60eac7c3f34d14b8542d789c404529bbd61a419a535168639d36df1dfbb8ad7563848bcd441a310ce69508", 0x32}, {&(0x7f00000020c0)="540779ae8cb00829c62c1287d28f764f0d26192d1162b61b2044e8a575ca71ecbaed428dcc5f1127ee84d8d229dc7e7a1d7b7d7667654cce5d0ade4d3dea62cff238e2b7e10f5f7557393e66d90db86b357f59fcdf8505a82d513cea640b1f7a28404eabfcda263137db135f1d5e2eefeb8ee6f50fcb6e36383a0be403e4fa24341e273fe1bae94b03e248b355f75262d4261b668cfcce2d7ed16198db8ff82e612e79897a5a93", 0xa7}, {&(0x7f00000021c0)="40403a7a17a5a617b51c1a38", 0xc}, {&(0x7f0000002200)="07e4e2a82fb99b100065504599dc8eca7aae2cf24b9a84d8d9b662ef95bcdc91e9e27e7ed80bd6663fabe0a609d7dda42c733ab2e100505e41c942c2ba39d68fecb075122357272253a149ce8330c2669fb0e3141ae08127d5201881b6a4695ff71cb9a34e4e8f4bbd7d41dcc34324c6392a824616cfcfe6d54364a63197", 0x7e}, {&(0x7f0000002280)="cb861f0a7c0e3d7fd1747211fb5cab4cd5b4722809aef6a160d95c0ee44d647117cdb4db5eec9830ae75876359095ec904eb4aff9849a7f34ace1cf197086fb57db43e7549b9177fea930776", 0x4c}], 0x7, &(0x7f0000002480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0x2, [{0x1, 0xb, "4a42bbe19eaf024922"}, {0x0, 0x10, "61c3dea4253c1e0aefddcfbf81d4"}, {0x0, 0x6, "c3b22071"}, {0x5, 0x8, "562e11154943"}]}, @lsrr={0x83, 0x1f, 0xea, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0xfff, @rand_addr=0x8, @rand_addr=0x80000000, @multicast1, @multicast2]}, @rr={0x7, 0x27, 0xe4, [@remote, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @broadcast, @multicast2, @empty, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0xfb, 0x3, 0x9, [{@local, 0x1}, {@empty, 0x9}, {@local, 0x9}, {@multicast1, 0x8}, {@empty, 0xffc00000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@remote, 0x1b8}, {@rand_addr=0x4, 0x7fff}, {@multicast1, 0xb32}]}, @rr={0x7, 0x1b, 0xd8, [@empty, @multicast2, @empty, @multicast2, @broadcast, @empty]}, @noop]}}}], 0x140}}], 0x6, 0x0) 05:16:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 05:16:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "b04a83706694a7d154c629f75b71a95a8f3b289271c607adb22d4d414f70cb7b1291b1150d4d3aa20d7beebc689ab001521f48dc57042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d756bd900300000000000000a482ebf7a08c305bee6fd6"}) [ 1028.078600][T24532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:16:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 05:16:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1028.653135][T24553] Unknown ioctl 1074025829 05:16:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1028.703014][T24557] Unknown ioctl 1074025829 05:16:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, 0x0) 05:16:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 05:16:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 05:16:25 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 05:16:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x0, 0x83, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d"}, 0x45, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001740)={0x2, 0x4e22}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001780)="a83ecc5bb364180759e40b01bf5b7be3894a3d95e662f9654b53278f1055d11a84dcc5965892d292f26cc05a381b26ae251162341de2be3ec42aa076fd984cea57b00fb203d872a2891786285275e09b164bba5a2ef46e50d935758a422cddb6fc", 0x61}, {&(0x7f0000001800)="39db205a1edbc0271f56237e5bc97d9e1f639cd6cdd303f2f4a7d73516a9c137b2c39b8b", 0x24}], 0x2, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x20}}, {{&(0x7f00000018c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001900)="e1a107d6a5a4034a5c905e7d0688119336b7696930d16aea3111ad85d1d4f47d85b8b9b64de5e57489740f81ccd90c0523db861199354686a1c8ea0b4b39627154395457d7437a1b3c0d9686600322f593df395e1eed4e4b20f1f6fb5fb392d485fd33a3470a1e1b6f51cf151db8272eb334234c1ca917cc4752f3a0fdd55f32445b6c96268896d42407663394f1dd1c092ea09e42079dfa9b3ff2454a5db38430c6dfd7fb6792090427e11266e9c9b3a07ad183380fb72045e3ef76063ae05412519a776eda25867ed78fd879e8d367cf152b5c017bdd8a14d27b256ff8f385b6cd", 0xe2}, {&(0x7f0000001a00)="5d5a6b39e80a9737b9669eb219f32212830b3cdcc86c0d6e62fbbe7310a1ee63552183a0b6121af33bb52920416300b315260b175e7139e9e278b23a4661fa55f73d4c026d6681db134423c182f9864ceb53180b895550db4352cf1d62e1818617c66dcfa3955f0941f40b6d40f1cbdebc4b1e8b8eab19250ddf4fe4d1b41f4dd103c23e2680fd2bfd7bda2481300661ddd59d410b595a9960becd9c857d3f717892a7ce79efc03aabd65e567f4a5ca41f3b108fb0cd5fbb7d77c8929b79b37e0cd7a2c3389c", 0xc6}, {&(0x7f0000001b00)="63cd2f1f0671728e5a782ffb622aa3b14b71f16cd585e85017110450e5afd2821d6a9f4fe6", 0x25}], 0x3}}, {{&(0x7f0000001b80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001bc0)}}, {{&(0x7f0000001c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001c80)="824ffe12092e6bcfe3d2a6fab816405447d0f2b26d8f669ddcd46f45e6d786908f0c61d37bb7e4815df1cd0a1f05605a28b3495bcd83b9ac49e7775e4c43d99c3940d73df37012d580a7c5da6d405d2e0e7223d6ac7417976fe107a7aeea0cb2a136a016064d3be4f1b8bc35d3ebac52d11f7a0192dd387deb47525f12518d2633a666e1a822971675b8ff3370b8843bf99d1c2a97aad6229f1e3b781d26362d63dd720ba8ccfa98a1cd57f894b934fca204fae8ca62c24d7b90a9c9c9ff11", 0xbf}], 0x1, &(0x7f0000001d80)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x100, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xb9, [@remote, @remote, @rand_addr=0x1, @remote, @local, @local]}, @timestamp_prespec={0x44, 0x14, 0x28, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x6}]}, @lsrr={0x83, 0x17, 0x9d, [@rand_addr=0x8, @local, @rand_addr=0xb576, @empty, @rand_addr=0x2]}, @lsrr={0x83, 0x1b, 0xd9, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @cipso={0x86, 0x27, 0x1, [{0x4, 0x2}, {0x0, 0xb, "8a6b8975b4deeb3cc7"}, {0xe, 0x5, "1f15b6"}, {0x6, 0x6, 'i$+Q'}, {0x1, 0x9, "a0987c8423552a"}]}, @noop, @cipso={0x86, 0x62, 0x3, [{0x7, 0x6, "678a2c45"}, {0x0, 0xb, "08d5faa70098b2fa63"}, {0x7, 0xf, "75c149f6e6e7618bf6ecbd9caa"}, {0x2, 0x7, "0ea62e551e"}, {0x5, 0xf, "17cd436049258042e97a33ca38"}, {0x6, 0xb, "731dda3b2689565843"}, {0x5, 0x9, "a3c8992f7bd8f3"}, {0x7, 0x12, "a2be41b8a15255e978b51877d397fd47"}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x3b, 0x0, 0xa, [0xffff, 0x3, 0x5, 0x0]}, @noop, @timestamp_addr={0x44, 0x34, 0xb9, 0x1, 0x0, [{@local, 0x1ff}, {@empty, 0x2}, {@multicast1, 0x8001}, {@rand_addr=0x3f, 0xfff}, {@empty, 0x6}, {@rand_addr=0xffff, 0xf4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001fc0)="6730c42e980c4cd9c6cbfdba", 0xc}, {0x0}, {&(0x7f0000002080)="b62b70f9e2c02e60eac7c3f34d14b8542d789c404529bbd61a419a535168639d36df1dfbb8ad7563848bcd441a310ce69508", 0x32}, {&(0x7f00000020c0)="540779ae8cb00829c62c1287d28f764f0d26192d1162b61b2044e8a575ca71ecbaed428dcc5f1127ee84d8d229dc7e7a1d7b7d7667654cce5d0ade4d3dea62cff238e2b7e10f5f7557393e66d90db86b357f59fcdf8505a82d513cea640b1f7a28404eabfcda263137db135f1d5e2eefeb8ee6f50fcb6e36383a0be403e4fa24341e273fe1bae94b03e248b355f75262d4261b668cfcce2d7ed16198db8ff82e612e79897a5a93292c4f60a7e163993cfae2300e25dfb5a7be97ffa2ae3cce8e72cd612d40fbbd3c24326f3f416de6c5ea04fe1edad2a1644741175be18b", 0xde}, {&(0x7f00000021c0)="40403a7a17a5a617b51c1a38", 0xc}, {&(0x7f0000002200)="07e4e2a82fb99b100065504599dc8eca7aae2cf24b9a84d8d9b662ef95bcdc91e9e27e7ed80bd6663fabe0a609d7dda42c733ab2e100505e41c942c2ba39d68fecb075122357272253a149ce8330c2669fb0e3141ae08127d5201881b6a4695ff71cb9a34e4e8f4bbd7d41dcc34324c6392a824616cfcfe6d54364a63197", 0x7e}, {&(0x7f0000002280)="cb861f0a7c0e3d7fd1747211fb5cab4cd5b4722809aef6a160d95c0ee44d647117cdb4db5eec9830ae75876359095ec904eb4aff9849a7f34ace1cf197086fb57db43e7549b9177fea930776", 0x4c}], 0x7}}], 0x6, 0x0) 05:16:25 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 05:16:26 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000000)={{}, {0x2}}) 05:16:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00fb40032fc9db9d33ed18390904360006000000000000006bcfff184c8c3e9ec58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aae09076c76134b7"], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000100)) ioctl(r0, 0x6681, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000000100000020000000000000000000000ffffff7f7f0000000000000040000000000000000000000000000000000800000002000000000000000000ec84901e543b627b15b6cdcdb1dad159000007000000000000002771000000000000ff01000006000000000000"]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') socket$alg(0x26, 0x5, 0x0) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) 05:16:26 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x212, 0x300000000000000) 05:16:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x24, 0x3, 0x0, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d"}, 0x24, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x803, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) sendmmsg(r1, &(0x7f0000003080), 0x0, 0x4000) 05:16:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) getpeername$packet(r1, 0x0, 0x0) 05:16:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x3) setpriority(0x2, 0x0, 0x0) 05:16:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000000580)="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", 0x370, 0x81}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 05:16:26 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:fonts_t:s0\x00', 0x1d) syz_genetlink_get_family_id$net_dm(0x0) 05:16:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x5f, 0x3, 0x0, "7925dfdc0f7227a66bcfff184c8c3e9e", "c58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aa779076c76134b75ae6a907a26f7cb68d7f95cb96dfbf5cd17fe209e83aff6b80d393593976c9ef05a5ed"}, 0x5f, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:16:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000240)={0x20080522, r0}, 0x0) 05:16:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00fb40032fc9db9d33ed18390904360006000000000000006bcfff184c8c3e9ec58f32a70df8845d80029cdda35b1d120c64f59860c99f877dffe651d74489aae09076c76134b7"], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1031.318245][ T32] audit: type=1401 audit(1584335787.374:167): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:fonts_t:s0 [ 1031.529403][ T32] audit: type=1401 audit(1584335787.584:168): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:fonts_t:s0 05:16:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000000580)="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", 0x37e, 0x81}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 05:16:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) 05:16:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}], 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 05:16:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001900)="e1", 0x1}], 0x1}}], 0x1, 0x0) 05:16:27 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 05:16:28 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180), &(0x7f00000002c0)=0x2) [ 1032.185821][T24736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:16:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 05:16:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 05:16:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) 05:16:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000000c0)={0x44, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr="dfe17a795d8c53a51912d1458919ddf7"}}}, 0x108) 05:16:28 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/48) 05:16:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000080)) 05:16:28 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) fadvise64(r0, 0x0, 0x0, 0x2) [ 1033.047846][T24767] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 1033.056019][T24767] FAT-fs (loop3): Filesystem has been set read-only [ 1033.062946][T24767] ===================================================== [ 1033.069907][T24767] BUG: KMSAN: uninit-value in fat_evict_inode+0x2f4/0x920 [ 1033.077046][T24767] CPU: 1 PID: 24767 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 1033.085722][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.095783][T24767] Call Trace: [ 1033.099077][T24767] dump_stack+0x1c9/0x220 [ 1033.103414][T24767] kmsan_report+0xf7/0x1e0 [ 1033.107830][T24767] __msan_warning+0x58/0xa0 [ 1033.112338][T24767] fat_evict_inode+0x2f4/0x920 [ 1033.117104][T24767] ? fat_write_inode+0x250/0x250 [ 1033.122031][T24767] evict+0x4ab/0xe10 [ 1033.125948][T24767] iput+0xa70/0xe10 [ 1033.129760][T24767] fat_build_inode+0x6a3/0x840 [ 1033.134538][T24767] vfat_mkdir+0x547/0x7d0 [ 1033.138870][T24767] ? vfat_unlink+0x660/0x660 [ 1033.143454][T24767] vfs_mkdir+0x691/0x920 [ 1033.147814][T24767] do_mkdirat+0x39f/0x680 [ 1033.152162][T24767] __ia32_sys_mkdir+0x9f/0xd0 [ 1033.156829][T24767] ? __se_sys_mkdir+0x90/0x90 [ 1033.161502][T24767] do_fast_syscall_32+0x3c7/0x6e0 [ 1033.166544][T24767] entry_SYSENTER_compat+0x68/0x77 [ 1033.171657][T24767] RIP: 0023:0xf7f98d99 [ 1033.175726][T24767] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.195435][T24767] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000027 [ 1033.203838][T24767] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 1033.211796][T24767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.219756][T24767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.227713][T24767] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.235674][T24767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.243650][T24767] [ 1033.245971][T24767] Uninit was created at: [ 1033.250205][T24767] kmsan_save_stack_with_flags+0x3c/0x90 [ 1033.255829][T24767] kmsan_alloc_page+0x12a/0x310 [ 1033.260667][T24767] __alloc_pages_nodemask+0x5712/0x5e80 [ 1033.266200][T24767] alloc_pages_current+0x67d/0x990 [ 1033.271300][T24767] alloc_slab_page+0x111/0x12f0 [ 1033.276139][T24767] new_slab+0x2bc/0x1130 [ 1033.280383][T24767] ___slab_alloc+0x1533/0x1f30 [ 1033.285135][T24767] kmem_cache_alloc+0xb23/0xd70 [ 1033.290017][T24767] fat_alloc_inode+0x58/0x120 [ 1033.294706][T24767] new_inode_pseudo+0xb1/0x590 [ 1033.299480][T24767] new_inode+0x5a/0x3d0 [ 1033.303641][T24767] fat_fill_super+0x634b/0x89b0 [ 1033.308483][T24767] msdos_fill_super+0xa3/0xc0 [ 1033.313151][T24767] mount_bdev+0x654/0x880 [ 1033.317472][T24767] msdos_mount+0xc9/0xe0 [ 1033.321714][T24767] legacy_get_tree+0x169/0x2e0 [ 1033.326470][T24767] vfs_get_tree+0xdd/0x580 [ 1033.330871][T24767] do_mount+0x365c/0x4ac0 [ 1033.335193][T24767] __se_compat_sys_mount+0x3a8/0xa10 [ 1033.340465][T24767] __ia32_compat_sys_mount+0x157/0x1b0 [ 1033.345919][T24767] do_fast_syscall_32+0x3c7/0x6e0 [ 1033.350931][T24767] entry_SYSENTER_compat+0x68/0x77 [ 1033.356032][T24767] ===================================================== [ 1033.362944][T24767] Disabling lock debugging due to kernel taint [ 1033.369084][T24767] Kernel panic - not syncing: panic_on_warn set ... [ 1033.375660][T24767] CPU: 1 PID: 24767 Comm: syz-executor.3 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 1033.385784][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.395836][T24767] Call Trace: [ 1033.399132][T24767] dump_stack+0x1c9/0x220 [ 1033.404097][T24767] panic+0x3d5/0xc3e [ 1033.408018][T24767] kmsan_report+0x1df/0x1e0 [ 1033.412534][T24767] __msan_warning+0x58/0xa0 [ 1033.417040][T24767] fat_evict_inode+0x2f4/0x920 [ 1033.421825][T24767] ? fat_write_inode+0x250/0x250 [ 1033.426768][T24767] evict+0x4ab/0xe10 [ 1033.430670][T24767] iput+0xa70/0xe10 [ 1033.434489][T24767] fat_build_inode+0x6a3/0x840 [ 1033.439275][T24767] vfat_mkdir+0x547/0x7d0 [ 1033.443616][T24767] ? vfat_unlink+0x660/0x660 [ 1033.448196][T24767] vfs_mkdir+0x691/0x920 [ 1033.452463][T24767] do_mkdirat+0x39f/0x680 [ 1033.456804][T24767] __ia32_sys_mkdir+0x9f/0xd0 [ 1033.461492][T24767] ? __se_sys_mkdir+0x90/0x90 [ 1033.466178][T24767] do_fast_syscall_32+0x3c7/0x6e0 [ 1033.471222][T24767] entry_SYSENTER_compat+0x68/0x77 [ 1033.476341][T24767] RIP: 0023:0xf7f98d99 [ 1033.480403][T24767] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.500007][T24767] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000027 [ 1033.508410][T24767] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 1033.516367][T24767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.524325][T24767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.532282][T24767] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.540239][T24767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.549769][T24767] Kernel Offset: 0x25600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1033.561394][T24767] Rebooting in 86400 seconds..