404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}]}}}]}, 0x68}}, 0x0) 13:26:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000, 0x381e11}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000880, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5a}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000011, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) 13:26:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000, 0x381e11}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:11 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f500000000080012000200010000197ba58e00000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 915.278194][T25910] netem: incorrect gi model size [ 915.283515][T25910] netem: change failed [ 915.350746][T25917] netem: incorrect gi model size [ 915.356102][T25917] netem: change failed 13:26:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000880, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5a}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000011, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) 13:26:14 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x401, 0xd0b, 0x4) 13:26:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}]}}}]}, 0x68}}, 0x0) 13:26:14 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f500000000080012000200010000197ba58e00000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:26:14 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:26:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 916.055144][T25929] netem: incorrect gi model size [ 916.060224][T25929] netem: change failed 13:26:15 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:15 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x401, 0xd0b, 0x4) 13:26:15 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f500000000080012000200010000197ba58e00000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:26:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}]}}}]}, 0x68}}, 0x0) 13:26:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 916.876424][T25948] netem: incorrect gi model size [ 916.881519][T25948] netem: change failed 13:26:15 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x401, 0xd0b, 0x4) 13:26:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:26:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}]}}}]}, 0x68}}, 0x0) 13:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:16 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:16 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') [ 917.783871][T25964] netem: incorrect gi model size [ 917.788956][T25964] netem: change failed 13:26:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:17 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:26:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:17 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:18 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:18 executing program 1: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:18 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:26:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:19 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:19 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:19 executing program 1: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:19 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:26:20 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:26:20 executing program 2: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:26:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0)) 13:26:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:21 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000202"], 0x0) 13:26:21 executing program 1: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:26:21 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x1}]}) 13:26:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0)) 13:26:21 executing program 2: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 922.852404][ T3218] usb 1-1: new high-speed USB device number 25 using dummy_hcd 13:26:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x1}]}) [ 923.111912][ T3218] usb 1-1: Using ep0 maxpacket: 8 13:26:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0)) 13:26:22 executing program 2: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 923.243486][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.254002][ T3218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 13:26:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 923.523256][ T3218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.532546][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.540621][ T3218] usb 1-1: Product: syz [ 923.545017][ T3218] usb 1-1: Manufacturer: syz [ 923.549699][ T3218] usb 1-1: SerialNumber: syz 13:26:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x1}]}) [ 923.795209][ T3218] usb 1-1: selecting invalid altsetting 1 13:26:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0)) [ 924.002180][ T3218] cdc_ncm 1-1:1.0: bind() failure [ 924.065055][ T3218] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 924.072003][ T3218] cdc_ncm 1-1:1.1: bind() failure [ 924.174886][ T3218] usb 1-1: USB disconnect, device number 25 [ 924.782363][ T3218] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 925.032698][ T3218] usb 1-1: Using ep0 maxpacket: 8 [ 925.153147][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.163606][ T3218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.363649][ T3218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.372944][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.381002][ T3218] usb 1-1: Product: syz [ 925.385339][ T3218] usb 1-1: Manufacturer: syz [ 925.390038][ T3218] usb 1-1: SerialNumber: syz [ 925.506492][ T3218] usb 1-1: selecting invalid altsetting 1 [ 925.722105][ T3218] cdc_ncm 1-1:1.0: bind() failure 13:26:24 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000202"], 0x0) 13:26:24 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x1}]}) 13:26:24 executing program 2: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:26:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 925.786602][ T3218] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 925.793664][ T3218] cdc_ncm 1-1:1.1: bind() failure [ 925.916994][ T3218] usb 1-1: USB disconnect, device number 26 13:26:25 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:26:25 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309001a03a000", 0x33a) [ 926.591817][ T3218] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 926.842994][ T3218] usb 1-1: Using ep0 maxpacket: 8 13:26:25 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:26:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:25 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309001a03a000", 0x33a) 13:26:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 926.983037][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.993422][ T3218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.284031][ T3218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.293316][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.301530][ T3218] usb 1-1: Product: syz [ 927.305762][ T3218] usb 1-1: Manufacturer: syz [ 927.310429][ T3218] usb 1-1: SerialNumber: syz [ 927.515577][ T3218] usb 1-1: selecting invalid altsetting 1 [ 927.722054][ T3218] cdc_ncm 1-1:1.0: bind() failure [ 927.791317][ T3218] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 927.798610][ T3218] cdc_ncm 1-1:1.1: bind() failure [ 927.857884][ T3218] usb 1-1: USB disconnect, device number 27 [ 928.325677][ C0] not chained 220000 origins [ 928.330393][ C0] CPU: 0 PID: 20351 Comm: kworker/u4:1 Not tainted 5.8.0-rc5-syzkaller #0 [ 928.338881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.348969][ C0] Workqueue: krdsd rds_connect_worker [ 928.354337][ C0] Call Trace: [ 928.357619][ C0] [ 928.360481][ C0] dump_stack+0x21c/0x280 [ 928.364850][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 928.370575][ C0] ? __tcp_send_ack+0x6e9/0x8c0 [ 928.375431][ C0] ? tcp_send_ack+0x68/0x90 [ 928.379933][ C0] ? tcp_rcv_synsent_state_process+0x42a3/0x42d0 [ 928.386257][ C0] ? tcp_rcv_state_process+0x445/0x45b0 [ 928.391797][ C0] ? tcp_v6_do_rcv+0x11cb/0x1fe0 [ 928.396746][ C0] ? __release_sock+0x26c/0x690 [ 928.401594][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.406790][ C0] ? __should_failslab+0x1f6/0x290 [ 928.411915][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.417114][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.422915][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 928.429062][ C0] ? tcp_parse_options+0x206d/0x2100 [ 928.434365][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.439567][ C0] __msan_chain_origin+0x50/0x90 [ 928.444501][ C0] tcp_conn_request+0x15d4/0x4c30 [ 928.449528][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.455355][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.460564][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.466392][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 928.472548][ C0] ? __queue_work+0x1e13/0x2050 [ 928.477404][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.482602][ C0] tcp_v6_conn_request+0x27f/0x330 [ 928.487712][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 928.493005][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 928.498382][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.503580][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.509379][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.514585][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.519787][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 928.524573][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 928.529437][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 928.533977][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 928.539178][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 928.544934][ C0] ip6_input+0x2dd/0x370 [ 928.549193][ C0] ? ip6_input+0x370/0x370 [ 928.553613][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 928.559507][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 928.564183][ C0] ipv6_rcv+0x3bb/0x460 [ 928.568337][ C0] ? local_bh_enable+0x40/0x40 [ 928.573106][ C0] __netif_receive_skb+0x265/0x670 [ 928.578230][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 928.583769][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 928.588624][ C0] process_backlog+0x50d/0xba0 [ 928.593406][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.599218][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 928.604497][ C0] napi_poll+0x43b/0xfd0 [ 928.608754][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.613960][ C0] net_rx_action+0x35c/0xd40 [ 928.618566][ C0] ? net_tx_action+0xdc0/0xdc0 [ 928.623327][ C0] __do_softirq+0x2ea/0x7f5 [ 928.627846][ C0] asm_call_on_stack+0xf/0x20 [ 928.632514][ C0] [ 928.635464][ C0] do_softirq_own_stack+0x7c/0xa0 [ 928.640488][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 928.645701][ C0] local_bh_enable+0x36/0x40 [ 928.650289][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 928.655502][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.660699][ C0] __ip6_finish_output+0x9c0/0xa90 [ 928.665839][ C0] ip6_finish_output+0x14b/0x4b0 [ 928.670781][ C0] ip6_output+0x68d/0x7f0 [ 928.675118][ C0] ? ip6_output+0x7f0/0x7f0 [ 928.679619][ C0] ? ac6_seq_show+0x200/0x200 [ 928.684303][ C0] ip6_xmit+0x2475/0x2b40 [ 928.688647][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 928.693155][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 928.697847][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 928.703479][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 928.708678][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 928.714262][ C0] tcp_connect+0x153f/0x3bb0 [ 928.718856][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 928.724147][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.729971][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 928.735876][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 928.740756][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 928.745959][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 928.751431][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.756638][ C0] inet_stream_connect+0x101/0x180 [ 928.761757][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 928.767391][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 928.773030][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.778233][ C0] ? rds_tcp_state_change+0x400/0x400 [ 928.783601][ C0] rds_connect_worker+0x36b/0x550 [ 928.788628][ C0] ? rds_addr_cmp+0x290/0x290 [ 928.793309][ C0] process_one_work+0x1688/0x2140 [ 928.798352][ C0] worker_thread+0x10bc/0x2730 [ 928.803116][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.808308][ C0] ? kmsan_get_metadata+0x116/0x180 [ 928.813521][ C0] kthread+0x551/0x590 [ 928.817596][ C0] ? process_one_work+0x2140/0x2140 [ 928.822817][ C0] ? kthread_blkcg+0x110/0x110 [ 928.827583][ C0] ret_from_fork+0x1f/0x30 [ 928.832004][ C0] Uninit was stored to memory at: [ 928.837035][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 928.842775][ C0] __msan_chain_origin+0x50/0x90 [ 928.847734][ C0] tcp_conn_request+0x19d6/0x4c30 [ 928.852765][ C0] tcp_v6_conn_request+0x27f/0x330 [ 928.857878][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 928.863246][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 928.868002][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 928.872505][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 928.878231][ C0] ip6_input+0x2dd/0x370 [ 928.882471][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 928.887152][ C0] ipv6_rcv+0x3bb/0x460 [ 928.891307][ C0] __netif_receive_skb+0x265/0x670 [ 928.896428][ C0] process_backlog+0x50d/0xba0 [ 928.901189][ C0] napi_poll+0x43b/0xfd0 [ 928.905446][ C0] net_rx_action+0x35c/0xd40 [ 928.910034][ C0] __do_softirq+0x2ea/0x7f5 [ 928.914527][ C0] [ 928.916848][ C0] Uninit was stored to memory at: [ 928.921870][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 928.927584][ C0] __msan_chain_origin+0x50/0x90 [ 928.932529][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 928.937812][ C0] tcp_conn_request+0x3046/0x4c30 [ 928.942830][ C0] tcp_v6_conn_request+0x27f/0x330 [ 928.947930][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 928.953300][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 928.958057][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 928.962562][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 928.968275][ C0] ip6_input+0x2dd/0x370 [ 928.972518][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 928.977191][ C0] ipv6_rcv+0x3bb/0x460 [ 928.981342][ C0] __netif_receive_skb+0x265/0x670 [ 928.986464][ C0] process_backlog+0x50d/0xba0 [ 928.991240][ C0] napi_poll+0x43b/0xfd0 [ 928.995480][ C0] net_rx_action+0x35c/0xd40 [ 929.000079][ C0] __do_softirq+0x2ea/0x7f5 [ 929.004578][ C0] [ 929.006896][ C0] Uninit was stored to memory at: [ 929.011936][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 929.017653][ C0] __msan_chain_origin+0x50/0x90 [ 929.022587][ C0] tcp_conn_request+0x19d6/0x4c30 [ 929.027608][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.032721][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.038091][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.042848][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.047345][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.053061][ C0] ip6_input+0x2dd/0x370 [ 929.057304][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.061989][ C0] ipv6_rcv+0x3bb/0x460 [ 929.066147][ C0] __netif_receive_skb+0x265/0x670 [ 929.071276][ C0] process_backlog+0x50d/0xba0 [ 929.076179][ C0] napi_poll+0x43b/0xfd0 [ 929.080426][ C0] net_rx_action+0x35c/0xd40 [ 929.085228][ C0] __do_softirq+0x2ea/0x7f5 [ 929.089714][ C0] [ 929.092035][ C0] Uninit was stored to memory at: [ 929.097068][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 929.102794][ C0] __msan_chain_origin+0x50/0x90 [ 929.107736][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 929.113019][ C0] tcp_conn_request+0x3046/0x4c30 [ 929.118043][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.123162][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.128628][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.133394][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.137902][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.143638][ C0] ip6_input+0x2dd/0x370 [ 929.147879][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.152556][ C0] ipv6_rcv+0x3bb/0x460 [ 929.156729][ C0] __netif_receive_skb+0x265/0x670 [ 929.161835][ C0] process_backlog+0x50d/0xba0 [ 929.166597][ C0] napi_poll+0x43b/0xfd0 [ 929.170839][ C0] net_rx_action+0x35c/0xd40 [ 929.175428][ C0] __do_softirq+0x2ea/0x7f5 [ 929.179919][ C0] [ 929.182241][ C0] Uninit was stored to memory at: [ 929.187267][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 929.192987][ C0] __msan_chain_origin+0x50/0x90 [ 929.197921][ C0] tcp_conn_request+0x19d6/0x4c30 [ 929.202942][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.208055][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.213424][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.218191][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.222691][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.228409][ C0] ip6_input+0x2dd/0x370 [ 929.232746][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.237425][ C0] ipv6_rcv+0x3bb/0x460 [ 929.241590][ C0] __netif_receive_skb+0x265/0x670 [ 929.246697][ C0] process_backlog+0x50d/0xba0 [ 929.251462][ C0] napi_poll+0x43b/0xfd0 [ 929.255703][ C0] net_rx_action+0x35c/0xd40 [ 929.260291][ C0] __do_softirq+0x2ea/0x7f5 [ 929.264790][ C0] [ 929.267121][ C0] Uninit was stored to memory at: [ 929.272147][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 929.277870][ C0] __msan_chain_origin+0x50/0x90 [ 929.282805][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 929.288083][ C0] tcp_conn_request+0x3046/0x4c30 [ 929.293103][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.298253][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.303615][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.308373][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.312881][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.318601][ C0] ip6_input+0x2dd/0x370 [ 929.322843][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.327531][ C0] ipv6_rcv+0x3bb/0x460 [ 929.331688][ C0] __netif_receive_skb+0x265/0x670 [ 929.336815][ C0] process_backlog+0x50d/0xba0 [ 929.341579][ C0] napi_poll+0x43b/0xfd0 [ 929.345821][ C0] net_rx_action+0x35c/0xd40 [ 929.350430][ C0] __do_softirq+0x2ea/0x7f5 [ 929.354917][ C0] [ 929.357237][ C0] Uninit was stored to memory at: [ 929.362260][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 929.367976][ C0] __msan_chain_origin+0x50/0x90 [ 929.372911][ C0] tcp_conn_request+0x19d6/0x4c30 [ 929.377943][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.383055][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.388429][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.393190][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.397703][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.403419][ C0] ip6_input+0x2dd/0x370 [ 929.407666][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.412338][ C0] ipv6_rcv+0x3bb/0x460 [ 929.416497][ C0] __netif_receive_skb+0x265/0x670 [ 929.421604][ C0] process_backlog+0x50d/0xba0 [ 929.426391][ C0] napi_poll+0x43b/0xfd0 [ 929.430632][ C0] net_rx_action+0x35c/0xd40 [ 929.435217][ C0] __do_softirq+0x2ea/0x7f5 [ 929.439712][ C0] [ 929.442031][ C0] Uninit was created at: [ 929.446276][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 929.451925][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 929.456688][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 929.462146][ C0] alloc_pages_current+0x685/0xb50 [ 929.467266][ C0] alloc_slab_page+0x11c/0x1240 [ 929.472118][ C0] new_slab+0x2bf/0x10c0 [ 929.476360][ C0] ___slab_alloc+0xcd3/0x18a0 [ 929.481029][ C0] kmem_cache_alloc+0xb70/0xc50 [ 929.485875][ C0] inet_reqsk_alloc+0xaf/0x910 [ 929.490634][ C0] tcp_conn_request+0x8dc/0x4c30 [ 929.495570][ C0] tcp_v6_conn_request+0x27f/0x330 [ 929.500677][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 929.506053][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 929.510898][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 929.515399][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 929.521110][ C0] ip6_input+0x2dd/0x370 [ 929.525351][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 929.530023][ C0] ipv6_rcv+0x3bb/0x460 [ 929.534183][ C0] __netif_receive_skb+0x265/0x670 [ 929.539293][ C0] process_backlog+0x50d/0xba0 [ 929.544063][ C0] napi_poll+0x43b/0xfd0 [ 929.548297][ C0] net_rx_action+0x35c/0xd40 [ 929.552887][ C0] __do_softirq+0x2ea/0x7f5 13:26:28 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000202"], 0x0) 13:26:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:28 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:26:28 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309001a03a000", 0x33a) 13:26:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:26:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') [ 930.132055][ T3218] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 930.401419][ T3218] usb 1-1: Using ep0 maxpacket: 8 13:26:29 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309001a03a000", 0x33a) 13:26:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 930.542861][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.553357][ T3218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 13:26:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 13:26:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bond\x00'}) [ 930.922878][ T3218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 930.932154][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.940240][ T3218] usb 1-1: Product: syz [ 930.944744][ T3218] usb 1-1: Manufacturer: syz [ 930.949425][ T3218] usb 1-1: SerialNumber: syz 13:26:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x100}, 0x10) write(r2, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24) [ 931.204960][ T3218] usb 1-1: selecting invalid altsetting 1 13:26:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') [ 931.442061][ T3218] cdc_ncm 1-1:1.0: bind() failure [ 931.523614][ T3218] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 931.530525][ T3218] cdc_ncm 1-1:1.1: bind() failure [ 931.616691][ T3218] usb 1-1: USB disconnect, device number 28 13:26:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000202"], 0x0) 13:26:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) llistxattr(0x0, 0x0, 0x0) 13:26:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x100}, 0x10) write(r2, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24) 13:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bond\x00'}) 13:26:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 13:26:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bond\x00'}) 13:26:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x100}, 0x10) write(r2, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24) 13:26:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 932.874000][ T3218] usb 1-1: new high-speed USB device number 29 using dummy_hcd 13:26:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x100}, 0x10) write(r2, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24) 13:26:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bond\x00'}) [ 933.141633][ T3218] usb 1-1: Using ep0 maxpacket: 8 [ 933.275679][ T3218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.286018][ T3218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.522494][ T3218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 933.531851][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.539946][ T3218] usb 1-1: Product: syz [ 933.544494][ T3218] usb 1-1: Manufacturer: syz [ 933.549186][ T3218] usb 1-1: SerialNumber: syz [ 933.813999][ T3218] usb 1-1: selecting invalid altsetting 1 [ 934.031592][ T3218] cdc_ncm 1-1:1.0: bind() failure [ 934.084095][ T3218] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 934.091067][ T3218] cdc_ncm 1-1:1.1: bind() failure [ 934.173964][ T3218] usb 1-1: USB disconnect, device number 29 13:26:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) llistxattr(0x0, 0x0, 0x0) 13:26:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) llistxattr(0x0, 0x0, 0x0) 13:26:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) llistxattr(0x0, 0x0, 0x0) 13:26:35 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 13:26:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:35 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) [ 936.938384][T26377] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 13:26:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, [0x5, 0x0, 0x91ed, 0x40]}, 0x5c) modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000fcdbdf250d000000240001800600020000000000080009000000000007000600736800000600020000000000100001800c0007"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 937.038127][T26381] bond1: (slave gtp0): no link monitoring support [ 937.045985][T26381] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 937.060696][T26381] bond1: (slave gtp0): Error -95 calling set_mac_address 13:26:36 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 13:26:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='nfs\x00', 0x0, &(0x7f0000000680)='udp\x00') 13:26:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) [ 937.360516][T26377] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 13:26:36 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 13:26:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:36 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 13:26:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='nfs\x00', 0x0, &(0x7f0000000680)='udp\x00') 13:26:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) [ 937.998153][T26446] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 938.117328][T26449] bond2: (slave gtp0): no link monitoring support [ 938.125281][T26449] bond2: (slave gtp0): The slave device specified does not support setting the MAC address [ 938.139854][T26449] bond2: (slave gtp0): Error -95 calling set_mac_address 13:26:37 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) [ 938.309270][T26491] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 13:26:37 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) [ 938.513531][T26488] bond1: (slave gtp0): no link monitoring support [ 938.521429][T26488] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 938.535959][T26488] bond1: (slave gtp0): Error -95 calling set_mac_address 13:26:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='nfs\x00', 0x0, &(0x7f0000000680)='udp\x00') 13:26:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) 13:26:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) 13:26:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:38 executing program 1: prctl$PR_GET_TID_ADDRESS(0x38, &(0x7f0000000240)) 13:26:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:38 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='nfs\x00', 0x0, &(0x7f0000000680)='udp\x00') 13:26:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) [ 939.487493][T26561] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 939.563403][T26565] bond3: (slave gtp0): no link monitoring support [ 939.571456][T26565] bond3: (slave gtp0): The slave device specified does not support setting the MAC address [ 939.585890][T26565] bond3: (slave gtp0): Error -95 calling set_mac_address 13:26:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) 13:26:38 executing program 1: prctl$PR_GET_TID_ADDRESS(0x38, &(0x7f0000000240)) [ 939.934123][T26601] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 13:26:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) [ 940.065916][T26604] bond2: (slave gtp0): no link monitoring support [ 940.073793][T26604] bond2: (slave gtp0): The slave device specified does not support setting the MAC address [ 940.088299][T26604] bond2: (slave gtp0): Error -95 calling set_mac_address 13:26:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) getsockname(r2, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) 13:26:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) 13:26:39 executing program 1: prctl$PR_GET_TID_ADDRESS(0x38, &(0x7f0000000240)) [ 940.517627][T26658] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 13:26:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 940.913601][T26677] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 13:26:39 executing program 1: prctl$PR_GET_TID_ADDRESS(0x38, &(0x7f0000000240)) 13:26:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) 13:26:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) getsockname(r2, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) [ 941.148740][T26681] bond4: (slave gtp0): no link monitoring support [ 941.157431][T26681] bond4: (slave gtp0): The slave device specified does not support setting the MAC address [ 941.172238][T26681] bond4: (slave gtp0): Error -95 calling set_mac_address 13:26:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) [ 941.436193][T26709] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 941.572902][T26722] bond3: (slave gtp0): no link monitoring support [ 941.581064][T26722] bond3: (slave gtp0): The slave device specified does not support setting the MAC address [ 941.595286][T26722] bond3: (slave gtp0): Error -95 calling set_mac_address [ 941.877343][T26752] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 941.977389][T26769] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) getsockname(r2, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) 13:26:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:26:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) [ 942.321464][T26780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 942.346524][T26780] device veth17 entered promiscuous mode 13:26:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) [ 942.513695][T26786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:41 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) shutdown(r1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 942.616953][T26797] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 942.865353][T26808] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) getsockname(r2, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) 13:26:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) 13:26:42 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) shutdown(r1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 13:26:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) [ 943.230101][T26815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 943.318429][T26815] device veth19 entered promiscuous mode 13:26:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 943.423327][T26825] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 943.649483][T26833] A link change request failed with some changes committed already. Interface ppp0 may have been left with an inconsistent configuration, please check. 13:26:42 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) shutdown(r1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 13:26:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 944.170344][T26843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 944.195948][T26843] device veth37 entered promiscuous mode [ 944.260766][T26852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 944.285927][T26852] device veth57 entered promiscuous mode 13:26:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 944.306716][T26853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.330827][T26853] device veth21 entered promiscuous mode 13:26:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) shutdown(r1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 13:26:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:26:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 944.953538][T26874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 945.028591][T26874] device veth39 entered promiscuous mode [ 945.037570][T26875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 945.062501][T26875] device veth23 entered promiscuous mode 13:26:44 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) [ 945.077165][T26877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 945.103226][T26877] device veth59 entered promiscuous mode 13:26:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffe1280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:26:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:26:44 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) [ 945.746966][T26905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 945.839853][T26905] device veth41 entered promiscuous mode [ 945.862413][T26908] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 945.922661][T26908] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 13:26:45 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 13:26:45 executing program 4: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) [ 946.610391][ C1] not chained 230000 origins [ 946.615017][ C1] CPU: 1 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 946.623503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.633564][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 946.639187][ C1] Call Trace: [ 946.642468][ C1] [ 946.645325][ C1] dump_stack+0x21c/0x280 [ 946.649667][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 946.655388][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.660593][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.666402][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 946.672629][ C1] ? should_fail+0x72/0x9e0 [ 946.677131][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 946.683029][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.688230][ C1] ? __should_failslab+0x1f6/0x290 [ 946.693351][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.698544][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.704365][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 946.710433][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.715640][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.721451][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 946.727605][ C1] ? __msan_get_context_state+0x9/0x20 [ 946.733056][ C1] ? __module_get+0x19/0x210 [ 946.737646][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.742847][ C1] __msan_chain_origin+0x50/0x90 [ 946.747801][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 946.753009][ C1] tcp_time_wait+0xf7b/0x1150 [ 946.757689][ C1] tcp_fin+0x23a/0x9f0 [ 946.761847][ C1] tcp_data_queue+0x1e5c/0xb570 [ 946.766820][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.772633][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 946.778691][ C1] ? tcp_urg+0xb22/0x10c0 [ 946.783029][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 946.788501][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.793788][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.799619][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.804827][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 946.809604][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 946.814137][ C1] ? tcp_v6_rcv+0x1541/0x5a80 [ 946.818819][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 946.824024][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 946.829777][ C1] ip6_input+0x2dd/0x370 [ 946.834026][ C1] ? ip6_input+0x370/0x370 [ 946.838446][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 946.841352][ T29] audit: type=1800 audit(1600176405.726:56): pid=26920 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15780 res=0 [ 946.844333][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 946.844373][ C1] ipv6_rcv+0x3bb/0x460 [ 946.844398][ C1] ? local_bh_enable+0x40/0x40 [ 946.844421][ C1] __netif_receive_skb+0x265/0x670 [ 946.844444][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 946.844460][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 946.844487][ C1] process_backlog+0x50d/0xba0 [ 946.844507][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 946.844556][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 946.907167][ C1] napi_poll+0x43b/0xfd0 [ 946.911423][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.916644][ C1] net_rx_action+0x35c/0xd40 [ 946.921339][ C1] ? net_tx_action+0xdc0/0xdc0 [ 946.926100][ C1] __do_softirq+0x2ea/0x7f5 [ 946.930633][ C1] asm_call_on_stack+0xf/0x20 [ 946.935302][ C1] [ 946.938242][ C1] do_softirq_own_stack+0x7c/0xa0 [ 946.943266][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 946.948466][ C1] local_bh_enable+0x36/0x40 [ 946.953063][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 946.958290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 946.963489][ C1] __ip6_finish_output+0x9c0/0xa90 [ 946.968610][ C1] ip6_finish_output+0x14b/0x4b0 [ 946.973659][ C1] ip6_output+0x68d/0x7f0 [ 946.977999][ C1] ? ip6_output+0x7f0/0x7f0 [ 946.982516][ C1] ? ac6_seq_show+0x200/0x200 [ 946.987195][ C1] ip6_xmit+0x2475/0x2b40 [ 946.991549][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 946.996060][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 947.000766][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 947.006398][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 947.011633][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 947.016515][ C1] ? kmsan_get_metadata+0xb0/0x180 [ 947.021631][ C1] ? kmsan_get_metadata+0x116/0x180 [ 947.026832][ C1] ? kmsan_get_metadata+0x116/0x180 [ 947.032020][ C1] ? kmsan_get_metadata+0x116/0x180 [ 947.037229][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 947.042864][ C1] tcp_send_fin+0x192a/0x1bc0 [ 947.047547][ C1] ? tcp_set_state+0x9ec/0xb40 [ 947.052307][ C1] ? kmsan_get_metadata+0x116/0x180 [ 947.057519][ C1] tcp_shutdown+0x1f7/0x270 [ 947.062017][ C1] ? tcp_set_state+0xb40/0xb40 [ 947.066769][ C1] inet_shutdown+0x44f/0x6d0 [ 947.071351][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 947.076021][ C1] kernel_sock_shutdown+0x98/0xc0 [ 947.081039][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 947.086238][ C1] rds_tcp_accept_worker+0x60/0x180 [ 947.091425][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 947.096435][ C1] process_one_work+0x1688/0x2140 [ 947.101463][ C1] worker_thread+0x10bc/0x2730 [ 947.106244][ C1] ? kmsan_get_metadata+0x116/0x180 [ 947.111445][ C1] kthread+0x551/0x590 [ 947.115513][ C1] ? process_one_work+0x2140/0x2140 [ 947.120700][ C1] ? kthread_blkcg+0x110/0x110 [ 947.125450][ C1] ret_from_fork+0x1f/0x30 [ 947.129853][ C1] Uninit was stored to memory at: [ 947.134914][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.140619][ C1] __msan_chain_origin+0x50/0x90 [ 947.145543][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 947.150311][ C1] tcp_time_wait+0xd9/0x1150 [ 947.154886][ C1] tcp_fin+0x23a/0x9f0 [ 947.158941][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.163774][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.169219][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.173962][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.178448][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.184148][ C1] ip6_input+0x2dd/0x370 [ 947.188381][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.193046][ C1] ipv6_rcv+0x3bb/0x460 [ 947.197185][ C1] __netif_receive_skb+0x265/0x670 [ 947.202274][ C1] process_backlog+0x50d/0xba0 [ 947.207018][ C1] napi_poll+0x43b/0xfd0 [ 947.211243][ C1] net_rx_action+0x35c/0xd40 [ 947.215819][ C1] __do_softirq+0x2ea/0x7f5 [ 947.220303][ C1] [ 947.222621][ C1] Uninit was stored to memory at: [ 947.227748][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.233458][ C1] __msan_chain_origin+0x50/0x90 [ 947.238378][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 947.243559][ C1] tcp_time_wait+0xf7b/0x1150 [ 947.248325][ C1] tcp_fin+0x23a/0x9f0 [ 947.252379][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.257212][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.262668][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.267418][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.271906][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.277604][ C1] ip6_input+0x2dd/0x370 [ 947.281836][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.286490][ C1] ipv6_rcv+0x3bb/0x460 [ 947.290628][ C1] __netif_receive_skb+0x265/0x670 [ 947.295722][ C1] process_backlog+0x50d/0xba0 [ 947.300466][ C1] napi_poll+0x43b/0xfd0 [ 947.304688][ C1] net_rx_action+0x35c/0xd40 [ 947.309264][ C1] __do_softirq+0x2ea/0x7f5 [ 947.313741][ C1] [ 947.316043][ C1] Uninit was stored to memory at: [ 947.321049][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.326746][ C1] __msan_chain_origin+0x50/0x90 [ 947.331664][ C1] tcp_time_wait+0x1064/0x1150 [ 947.336405][ C1] tcp_fin+0x23a/0x9f0 [ 947.340468][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.345302][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.350746][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.355505][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.359988][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.365689][ C1] ip6_input+0x2dd/0x370 [ 947.369917][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.374574][ C1] ipv6_rcv+0x3bb/0x460 [ 947.378708][ C1] __netif_receive_skb+0x265/0x670 [ 947.383797][ C1] process_backlog+0x50d/0xba0 [ 947.388544][ C1] napi_poll+0x43b/0xfd0 [ 947.392771][ C1] net_rx_action+0x35c/0xd40 [ 947.397355][ C1] __do_softirq+0x2ea/0x7f5 [ 947.401829][ C1] [ 947.404165][ C1] Uninit was stored to memory at: [ 947.409174][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.414891][ C1] __msan_chain_origin+0x50/0x90 [ 947.419813][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 947.424565][ C1] tcp_time_wait+0xd9/0x1150 [ 947.429131][ C1] tcp_fin+0x23a/0x9f0 [ 947.433180][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.438011][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.443452][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.448198][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.452687][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.458386][ C1] ip6_input+0x2dd/0x370 [ 947.462625][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.467291][ C1] ipv6_rcv+0x3bb/0x460 [ 947.471453][ C1] __netif_receive_skb+0x265/0x670 [ 947.476545][ C1] process_backlog+0x50d/0xba0 [ 947.481289][ C1] napi_poll+0x43b/0xfd0 [ 947.485516][ C1] net_rx_action+0x35c/0xd40 [ 947.490085][ C1] __do_softirq+0x2ea/0x7f5 [ 947.494567][ C1] [ 947.496876][ C1] Uninit was stored to memory at: [ 947.501889][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.507601][ C1] __msan_chain_origin+0x50/0x90 [ 947.512524][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 947.517704][ C1] tcp_time_wait+0xf7b/0x1150 [ 947.522365][ C1] tcp_fin+0x23a/0x9f0 [ 947.526427][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.531285][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.536732][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.541503][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.545988][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.551687][ C1] ip6_input+0x2dd/0x370 [ 947.555911][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.560570][ C1] ipv6_rcv+0x3bb/0x460 [ 947.564722][ C1] __netif_receive_skb+0x265/0x670 [ 947.569815][ C1] process_backlog+0x50d/0xba0 [ 947.574562][ C1] napi_poll+0x43b/0xfd0 [ 947.578799][ C1] net_rx_action+0x35c/0xd40 [ 947.583377][ C1] __do_softirq+0x2ea/0x7f5 [ 947.587868][ C1] [ 947.590187][ C1] Uninit was stored to memory at: [ 947.595200][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.600906][ C1] __msan_chain_origin+0x50/0x90 [ 947.605835][ C1] tcp_time_wait+0x1064/0x1150 [ 947.610584][ C1] tcp_fin+0x23a/0x9f0 [ 947.614634][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.619467][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.624919][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.629675][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.634173][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.639871][ C1] ip6_input+0x2dd/0x370 [ 947.644096][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.648751][ C1] ipv6_rcv+0x3bb/0x460 [ 947.652890][ C1] __netif_receive_skb+0x265/0x670 [ 947.657980][ C1] process_backlog+0x50d/0xba0 [ 947.662725][ C1] napi_poll+0x43b/0xfd0 [ 947.666964][ C1] net_rx_action+0x35c/0xd40 [ 947.671548][ C1] __do_softirq+0x2ea/0x7f5 [ 947.676022][ C1] [ 947.678347][ C1] Uninit was stored to memory at: [ 947.683363][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 947.689062][ C1] __msan_chain_origin+0x50/0x90 [ 947.693979][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 947.698739][ C1] tcp_time_wait+0xd9/0x1150 [ 947.703308][ C1] tcp_fin+0x23a/0x9f0 [ 947.707359][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.712217][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.717680][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.722440][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.726930][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.732639][ C1] ip6_input+0x2dd/0x370 [ 947.736873][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.741536][ C1] ipv6_rcv+0x3bb/0x460 [ 947.745677][ C1] __netif_receive_skb+0x265/0x670 [ 947.750789][ C1] process_backlog+0x50d/0xba0 [ 947.755541][ C1] napi_poll+0x43b/0xfd0 [ 947.759771][ C1] net_rx_action+0x35c/0xd40 [ 947.764435][ C1] __do_softirq+0x2ea/0x7f5 [ 947.768919][ C1] [ 947.771324][ C1] Uninit was created at: [ 947.775558][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 947.781172][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 947.785918][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 947.791358][ C1] alloc_pages_current+0x685/0xb50 [ 947.796451][ C1] alloc_slab_page+0x11c/0x1240 [ 947.801283][ C1] new_slab+0x2bf/0x10c0 [ 947.805594][ C1] ___slab_alloc+0xcd3/0x18a0 [ 947.810263][ C1] kmem_cache_alloc+0xb70/0xc50 [ 947.815104][ C1] inet_twsk_alloc+0x154/0xbd0 [ 947.819962][ C1] tcp_time_wait+0xd9/0x1150 [ 947.824535][ C1] tcp_fin+0x23a/0x9f0 [ 947.828582][ C1] tcp_data_queue+0x1e5c/0xb570 [ 947.833412][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 947.838853][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 947.843600][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 947.848088][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 947.853787][ C1] ip6_input+0x2dd/0x370 [ 947.858016][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 947.862671][ C1] ipv6_rcv+0x3bb/0x460 [ 947.866809][ C1] __netif_receive_skb+0x265/0x670 [ 947.871902][ C1] process_backlog+0x50d/0xba0 [ 947.876649][ C1] napi_poll+0x43b/0xfd0 [ 947.880877][ C1] net_rx_action+0x35c/0xd40 [ 947.885466][ C1] __do_softirq+0x2ea/0x7f5 13:26:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 948.404477][T26918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 948.430562][T26918] device veth61 entered promiscuous mode 13:26:47 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 13:26:47 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 13:26:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:47 executing program 4: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) [ 949.079578][ T29] audit: type=1800 audit(1600176407.956:57): pid=26942 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15780 res=0 [ 949.277615][T26954] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 949.357481][T26958] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 13:26:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:48 executing program 4: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 13:26:48 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 13:26:48 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) [ 950.206395][T26960] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 950.219168][T26964] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 13:26:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 950.826523][ T29] audit: type=1800 audit(1600176409.706:58): pid=26975 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15780 res=0 13:26:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 951.388479][T26980] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 951.408330][T26983] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 13:26:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x1}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:26:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:51 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 952.189243][T26985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 952.204934][T26987] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:26:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 953.154204][T26997] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 953.174400][T27000] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 13:26:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 953.885385][ T29] audit: type=1800 audit(1600176412.766:59): pid=27011 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15786 res=0 [ 953.903672][ T29] audit: type=1800 audit(1600176412.766:60): pid=27014 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15785 res=0 13:26:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="6bb492bcc661"}, 0x14) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:26:53 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) [ 954.392357][T27005] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 954.422587][T27009] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 13:26:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x1}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:26:53 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) [ 955.294506][ T29] audit: type=1800 audit(1600176414.176:61): pid=27024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15785 res=0 [ 955.334140][T27018] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 955.352304][T27020] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:26:54 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 13:26:54 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 13:26:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) [ 955.786421][T27042] netlink: 4336 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:54 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) [ 955.964445][T27043] netlink: 1884 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b98000b000c0c0322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fdbc40f011424f30f090f013a360f06c4c18d72d683ed", 0x3f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:55 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 13:26:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 13:26:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x1}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 956.570206][T27043] netlink: 4336 bytes leftover after parsing attributes in process `syz-executor.1'. [ 956.711783][T27058] netlink: 1884 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:55 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) [ 957.313387][T27054] validate_nla: 2 callbacks suppressed [ 957.313431][T27054] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 957.340382][T27067] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:26:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') pread64(r0, 0x0, 0x0, 0xa) 13:26:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) [ 957.674575][T27076] netlink: 4336 bytes leftover after parsing attributes in process `syz-executor.5'. [ 957.690134][T27077] netlink: 4336 bytes leftover after parsing attributes in process `syz-executor.1'. [ 957.812624][T27080] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.5'. [ 957.822567][T27080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 957.840060][T27081] netlink: 1884 bytes leftover after parsing attributes in process `syz-executor.1'. [ 957.878699][T27082] netlink: 4336 bytes leftover after parsing attributes in process `syz-executor.0'. 13:26:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') pread64(r0, 0x0, 0x0, 0xa) 13:26:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') pread64(r0, 0x0, 0x0, 0xa) 13:26:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x1}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:26:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 13:26:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:26:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') pread64(r0, 0x0, 0x0, 0xa) 13:26:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:26:58 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) [ 959.660000][T16856] usb 3-1: new high-speed USB device number 30 using dummy_hcd 13:26:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='io\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 959.930299][T16856] usb 3-1: Using ep0 maxpacket: 16 13:26:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0411000003013b67"], 0x1104}], 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/234, 0xea) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) [ 960.071769][T16856] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 960.082869][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.094416][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.104936][T16856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 13:26:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 960.118082][T16856] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 960.127346][T16856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.408580][T16856] usb 3-1: config 0 descriptor?? 13:26:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='io\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:26:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:26:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 961.001292][T16856] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input29 [ 961.086535][T16856] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input30 [ 961.260312][T16856] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 961.368865][T16856] usb 3-1: USB disconnect, device number 30 [ 962.009936][T16856] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 962.279794][T16856] usb 3-1: Using ep0 maxpacket: 16 [ 962.411604][T16856] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 962.422872][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.434182][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.444219][T16856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 962.457344][T16856] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 962.466619][T16856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.562102][T16856] usb 3-1: config 0 descriptor?? 13:27:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:27:01 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='io\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:27:01 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:27:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:01 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 962.812326][T16856] usbhid 3-1:0.0: can't add hid device: -71 [ 962.818641][T16856] usbhid: probe of 3-1:0.0 failed with error -71 [ 962.935596][T16856] usb 3-1: USB disconnect, device number 31 13:27:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='io\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:27:02 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) [ 963.389827][T16856] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 963.630393][T16856] usb 3-1: Using ep0 maxpacket: 16 [ 963.761315][T16856] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 963.772407][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.783655][T16856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.793612][T16856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 963.806799][T16856] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 963.816083][T16856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:02 executing program 3: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:02 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 963.896852][T16856] usb 3-1: config 0 descriptor?? 13:27:02 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 964.499914][T16856] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0002/input/input31 [ 964.559977][T16856] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0002/input/input32 [ 964.678446][T16856] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 964.698443][T16856] usb 3-1: USB disconnect, device number 32 [ 965.001916][ C0] not chained 240000 origins [ 965.006563][ C0] CPU: 0 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 965.015051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.025119][ C0] Workqueue: krdsd rds_connect_worker [ 965.030482][ C0] Call Trace: [ 965.033760][ C0] [ 965.036640][ C0] dump_stack+0x21c/0x280 [ 965.040974][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 965.046696][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.051901][ C0] ? __should_failslab+0x1f6/0x290 [ 965.057009][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.062200][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.067994][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 965.074150][ C0] ? tcp_parse_options+0x206d/0x2100 [ 965.079433][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.084616][ C0] __msan_chain_origin+0x50/0x90 [ 965.089540][ C0] tcp_conn_request+0x19d6/0x4c30 [ 965.094566][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.099750][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.105543][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 965.111694][ C0] ? __queue_work+0x1e13/0x2050 [ 965.116551][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.121769][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.126871][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 965.132143][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.137499][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.142683][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.148473][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.153674][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.158880][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.163629][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 965.168479][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.172988][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 965.178169][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.183911][ C0] ip6_input+0x2dd/0x370 [ 965.188141][ C0] ? ip6_input+0x370/0x370 [ 965.192542][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 965.198418][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.203099][ C0] ipv6_rcv+0x3bb/0x460 [ 965.207244][ C0] ? local_bh_enable+0x40/0x40 [ 965.211995][ C0] __netif_receive_skb+0x265/0x670 [ 965.217089][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 965.222716][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 965.227573][ C0] process_backlog+0x50d/0xba0 [ 965.232327][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.238128][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 965.243399][ C0] napi_poll+0x43b/0xfd0 [ 965.247633][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.252904][ C0] net_rx_action+0x35c/0xd40 [ 965.257486][ C0] ? net_tx_action+0xdc0/0xdc0 [ 965.262234][ C0] __do_softirq+0x2ea/0x7f5 [ 965.266728][ C0] asm_call_on_stack+0xf/0x20 [ 965.271383][ C0] [ 965.274308][ C0] do_softirq_own_stack+0x7c/0xa0 [ 965.279333][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 965.284513][ C0] local_bh_enable+0x36/0x40 [ 965.289085][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 965.294282][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.299474][ C0] __ip6_finish_output+0x9c0/0xa90 [ 965.304584][ C0] ip6_finish_output+0x14b/0x4b0 [ 965.309511][ C0] ip6_output+0x68d/0x7f0 [ 965.313918][ C0] ? ip6_output+0x7f0/0x7f0 [ 965.318405][ C0] ? ac6_seq_show+0x200/0x200 [ 965.323069][ C0] ip6_xmit+0x2475/0x2b40 [ 965.327407][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 965.331901][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 965.336579][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 965.342195][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 965.347379][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 965.352937][ C0] tcp_connect+0x153f/0x3bb0 [ 965.357523][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 965.362799][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 965.368595][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 965.374484][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 965.379341][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 965.384525][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 965.389975][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.395181][ C0] inet_stream_connect+0x101/0x180 [ 965.400307][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 965.405937][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 965.411558][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.416742][ C0] ? rds_tcp_state_change+0x400/0x400 [ 965.422105][ C0] rds_connect_worker+0x36b/0x550 [ 965.427116][ C0] ? rds_addr_cmp+0x290/0x290 [ 965.431782][ C0] process_one_work+0x1688/0x2140 [ 965.436810][ C0] worker_thread+0x10bc/0x2730 [ 965.441561][ C0] ? kmsan_get_metadata+0x116/0x180 [ 965.446756][ C0] kthread+0x551/0x590 [ 965.450818][ C0] ? process_one_work+0x2140/0x2140 [ 965.456002][ C0] ? kthread_blkcg+0x110/0x110 [ 965.460751][ C0] ret_from_fork+0x1f/0x30 [ 965.465158][ C0] Uninit was stored to memory at: [ 965.470169][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.475871][ C0] __msan_chain_origin+0x50/0x90 [ 965.480796][ C0] tcp_conn_request+0x19d6/0x4c30 [ 965.485807][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.490902][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.496260][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.501008][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.505504][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.511204][ C0] ip6_input+0x2dd/0x370 [ 965.515432][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.520093][ C0] ipv6_rcv+0x3bb/0x460 [ 965.524319][ C0] __netif_receive_skb+0x265/0x670 [ 965.529412][ C0] process_backlog+0x50d/0xba0 [ 965.534157][ C0] napi_poll+0x43b/0xfd0 [ 965.538380][ C0] net_rx_action+0x35c/0xd40 [ 965.542965][ C0] __do_softirq+0x2ea/0x7f5 [ 965.547443][ C0] [ 965.549748][ C0] Uninit was stored to memory at: [ 965.554755][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.560459][ C0] __msan_chain_origin+0x50/0x90 [ 965.565379][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 965.570649][ C0] tcp_conn_request+0x3046/0x4c30 [ 965.575654][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.580748][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.586110][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.590861][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.596129][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.601841][ C0] ip6_input+0x2dd/0x370 [ 965.606064][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.610725][ C0] ipv6_rcv+0x3bb/0x460 [ 965.614898][ C0] __netif_receive_skb+0x265/0x670 [ 965.619998][ C0] process_backlog+0x50d/0xba0 [ 965.624743][ C0] napi_poll+0x43b/0xfd0 [ 965.628973][ C0] net_rx_action+0x35c/0xd40 [ 965.633545][ C0] __do_softirq+0x2ea/0x7f5 [ 965.638019][ C0] [ 965.640329][ C0] Uninit was stored to memory at: [ 965.645338][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.651040][ C0] __msan_chain_origin+0x50/0x90 [ 965.655968][ C0] tcp_conn_request+0x19d6/0x4c30 [ 965.660975][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.666090][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.671444][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.676189][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.680676][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.686374][ C0] ip6_input+0x2dd/0x370 [ 965.690600][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.695261][ C0] ipv6_rcv+0x3bb/0x460 [ 965.699400][ C0] __netif_receive_skb+0x265/0x670 [ 965.704492][ C0] process_backlog+0x50d/0xba0 [ 965.709240][ C0] napi_poll+0x43b/0xfd0 [ 965.713473][ C0] net_rx_action+0x35c/0xd40 [ 965.718044][ C0] __do_softirq+0x2ea/0x7f5 [ 965.722521][ C0] [ 965.724856][ C0] Uninit was stored to memory at: [ 965.729879][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.735580][ C0] __msan_chain_origin+0x50/0x90 [ 965.740504][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 965.745778][ C0] tcp_conn_request+0x3046/0x4c30 [ 965.750793][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.755904][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.761262][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.766008][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.770510][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.776316][ C0] ip6_input+0x2dd/0x370 [ 965.780543][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.785310][ C0] ipv6_rcv+0x3bb/0x460 [ 965.789450][ C0] __netif_receive_skb+0x265/0x670 [ 965.794541][ C0] process_backlog+0x50d/0xba0 [ 965.799289][ C0] napi_poll+0x43b/0xfd0 [ 965.803600][ C0] net_rx_action+0x35c/0xd40 [ 965.808258][ C0] __do_softirq+0x2ea/0x7f5 [ 965.812742][ C0] [ 965.815052][ C0] Uninit was stored to memory at: [ 965.820077][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.825787][ C0] __msan_chain_origin+0x50/0x90 [ 965.830712][ C0] tcp_conn_request+0x19d6/0x4c30 [ 965.835727][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.840832][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.846323][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.851077][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.855572][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.861270][ C0] ip6_input+0x2dd/0x370 [ 965.865500][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.870163][ C0] ipv6_rcv+0x3bb/0x460 [ 965.874305][ C0] __netif_receive_skb+0x265/0x670 [ 965.879400][ C0] process_backlog+0x50d/0xba0 [ 965.884148][ C0] napi_poll+0x43b/0xfd0 [ 965.888376][ C0] net_rx_action+0x35c/0xd40 [ 965.892951][ C0] __do_softirq+0x2ea/0x7f5 [ 965.897437][ C0] [ 965.899761][ C0] Uninit was stored to memory at: [ 965.904773][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 965.910490][ C0] __msan_chain_origin+0x50/0x90 [ 965.915534][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 965.920823][ C0] tcp_conn_request+0x3046/0x4c30 [ 965.926021][ C0] tcp_v6_conn_request+0x27f/0x330 [ 965.931119][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 965.936479][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 965.941231][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 965.945762][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 965.951500][ C0] ip6_input+0x2dd/0x370 [ 965.955749][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 965.960417][ C0] ipv6_rcv+0x3bb/0x460 [ 965.964555][ C0] __netif_receive_skb+0x265/0x670 [ 965.969663][ C0] process_backlog+0x50d/0xba0 [ 965.974409][ C0] napi_poll+0x43b/0xfd0 [ 965.978633][ C0] net_rx_action+0x35c/0xd40 [ 965.983205][ C0] __do_softirq+0x2ea/0x7f5 [ 965.987691][ C0] [ 965.990003][ C0] Uninit was stored to memory at: [ 965.995016][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 966.000716][ C0] __msan_chain_origin+0x50/0x90 [ 966.005682][ C0] tcp_conn_request+0x19d6/0x4c30 [ 966.010691][ C0] tcp_v6_conn_request+0x27f/0x330 [ 966.015797][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 966.021160][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 966.025914][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 966.030411][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 966.036114][ C0] ip6_input+0x2dd/0x370 [ 966.040342][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 966.045001][ C0] ipv6_rcv+0x3bb/0x460 [ 966.049140][ C0] __netif_receive_skb+0x265/0x670 [ 966.054237][ C0] process_backlog+0x50d/0xba0 [ 966.058981][ C0] napi_poll+0x43b/0xfd0 [ 966.063205][ C0] net_rx_action+0x35c/0xd40 [ 966.067783][ C0] __do_softirq+0x2ea/0x7f5 [ 966.072260][ C0] [ 966.074565][ C0] Uninit was created at: [ 966.078809][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 966.084422][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 966.089196][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 966.094639][ C0] alloc_pages_current+0x685/0xb50 [ 966.099729][ C0] alloc_slab_page+0x11c/0x1240 [ 966.104561][ C0] new_slab+0x2bf/0x10c0 [ 966.108796][ C0] ___slab_alloc+0xcd3/0x18a0 [ 966.113473][ C0] kmem_cache_alloc+0xb70/0xc50 [ 966.118306][ C0] inet_reqsk_alloc+0xaf/0x910 [ 966.123056][ C0] tcp_conn_request+0x8dc/0x4c30 [ 966.127977][ C0] tcp_v6_conn_request+0x27f/0x330 [ 966.133074][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 966.138430][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 966.143179][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 966.147666][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 966.153376][ C0] ip6_input+0x2dd/0x370 [ 966.157610][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 966.162270][ C0] ipv6_rcv+0x3bb/0x460 [ 966.166409][ C0] __netif_receive_skb+0x265/0x670 [ 966.171534][ C0] process_backlog+0x50d/0xba0 [ 966.176277][ C0] napi_poll+0x43b/0xfd0 [ 966.180502][ C0] net_rx_action+0x35c/0xd40 [ 966.185076][ C0] __do_softirq+0x2ea/0x7f5 13:27:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:27:05 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:05 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:27:05 executing program 3: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:05 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:05 executing program 3: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 13:27:07 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\xb4\xec:\b\xd2\xdc\xc1x@\xa2?\xe3fRqZ?\x12b\xb7\xe8k\x980\xcc\xa1\"\xe7\x8b\x8aH\x97\x16F\xc8\x94\f\xfb\x069\x1fH\xa3\xd6\xf7Ne\x0e\xfb/\x8e\x9e\xe7\xac$\a\xc3)\xce\xc5\xcf\xa3\xb5y\'&\xe8yrB\xa7/\x86\xbfZ\x92\xa5\x91\xb9\x92\xf9\xc3|W\x15\xc9f\xe9\vj\xaa\xa0m+\x16\xab\x9b\x97\x81Ub\x15)!\xd0\x163[T\x04c\xf2\x02y\xc8\x90\x99\xd2\xd6D\x8b\x90\x83e\x91\x90\xf4\x13\xee)\xb8?\x8e\xf8\x193\x03\xdb\xab\xd1j\xc2\xba\x82\xc8tR\xfa$;\xa7\x86ClT[*l\xfd\x95=Q\xd7[=XS(F\xbc\xd3\x86\xf2D\xbc\xe4\x19\x17\xf5\xff\x80\xb4 o\xd8\xac[\xa4\xc6\x0ea\xab4%\x10\xcbL9/\xe7K\x15\xef\xe6x!%\xfe\xaa\x82k\xabg\xb0\xb0\xd1\x1e\'Y`g\xcb\x96\x9f\xdc\x85:\xb5\xf3q\xaf8\x84\xb9', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) [ 968.769525][ T8691] usb 3-1: new high-speed USB device number 33 using dummy_hcd 13:27:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 969.049425][ T8691] usb 3-1: Using ep0 maxpacket: 16 [ 969.171346][ T8691] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 969.182369][ T8691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.193534][ T8691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.203555][ T8691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 969.216819][ T8691] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 969.226069][ T8691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.550024][ T17] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 969.605039][ T8691] usb 3-1: config 0 descriptor?? [ 969.803454][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 969.935690][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.946764][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.956775][ T17] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 969.965993][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.051440][ T17] usb 1-1: config 0 descriptor?? [ 970.151154][ T8691] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0003/input/input33 [ 970.177400][ T8691] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0003/input/input34 [ 970.290241][ T8691] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 970.394862][ T8691] usb 3-1: USB disconnect, device number 33 [ 970.548539][ T17] uclogic 0003:28BD:0055.0004: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.0-1/input0 [ 970.745391][ T17] usb 1-1: USB disconnect, device number 30 13:27:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:27:09 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 13:27:09 executing program 1: bpf$LINK_GET_NEXT_ID(0x16, 0x0, 0x0) 13:27:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x84, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}}) 13:27:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:10 executing program 1: bpf$LINK_GET_NEXT_ID(0x16, 0x0, 0x0) 13:27:10 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 13:27:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x84, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}}) [ 971.549906][ T8691] usb 1-1: new high-speed USB device number 31 using dummy_hcd 13:27:10 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) [ 971.599959][ T17] usb 3-1: new high-speed USB device number 34 using dummy_hcd 13:27:10 executing program 1: bpf$LINK_GET_NEXT_ID(0x16, 0x0, 0x0) [ 971.800689][ T8691] usb 1-1: Using ep0 maxpacket: 8 [ 971.857024][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 971.935977][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.947320][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.957316][ T8691] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 971.966632][ T8691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.020923][ T17] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 972.032167][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.043446][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.053414][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 972.066565][ T17] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 972.075817][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x84, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}}) [ 972.231796][ T8691] usb 1-1: config 0 descriptor?? [ 972.259587][ T8691] usb 1-1: can't set config #0, error -71 [ 972.289820][ T8691] usb 1-1: USB disconnect, device number 31 [ 972.395567][ T17] usb 3-1: config 0 descriptor?? [ 972.829463][ T8691] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 972.925418][ T17] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0005/input/input35 [ 972.976457][ T17] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0005/input/input36 [ 973.076325][ T17] kye 0003:0458:5013.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 973.129631][ T8691] usb 1-1: Using ep0 maxpacket: 8 [ 973.138303][ T17] usb 3-1: USB disconnect, device number 34 [ 973.281006][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.292244][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.302537][ T8691] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 973.311727][ T8691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.371805][ T8691] usb 1-1: config 0 descriptor?? 13:27:12 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 13:27:12 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 13:27:12 executing program 1: bpf$LINK_GET_NEXT_ID(0x16, 0x0, 0x0) 13:27:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x84, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}}) [ 973.857588][ T8691] uclogic 0003:28BD:0055.0006: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.0-1/input0 [ 974.079987][ T12] usb 1-1: USB disconnect, device number 32 13:27:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:13 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:13 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 13:27:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2], 0x48}}, 0x0) 13:27:13 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) [ 974.620009][T27469] __nla_validate_parse: 18 callbacks suppressed [ 974.620045][T27469] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 13:27:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) [ 974.725705][T27474] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 974.829536][ T12] usb 2-1: new high-speed USB device number 33 using dummy_hcd 13:27:13 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:13 executing program 4: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:13 executing program 3: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 975.069989][ T12] usb 2-1: Using ep0 maxpacket: 8 13:27:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0090"], 0x10}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 975.190401][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.201794][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.211852][ T12] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 975.221062][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.389547][ T8691] usb 1-1: new high-speed USB device number 33 using dummy_hcd 13:27:14 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 975.446421][ T12] usb 2-1: config 0 descriptor?? 13:27:14 executing program 4: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 975.661752][ T8691] usb 1-1: Using ep0 maxpacket: 8 [ 975.800737][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.811831][ T8691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.821826][ T8691] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 975.831075][ T8691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.936348][ T12] uclogic 0003:28BD:0055.0007: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.1-1/input0 [ 976.020224][ T8691] usb 1-1: config 0 descriptor?? [ 976.148436][ T12] usb 2-1: USB disconnect, device number 33 [ 976.522565][ T8691] uclogic 0003:28BD:0055.0008: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.0-1/input0 13:27:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:15 executing program 3: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0090"], 0x10}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:27:15 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:15 executing program 4: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 976.750875][ T8691] usb 1-1: USB disconnect, device number 33 13:27:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0090"], 0x10}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:27:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)={'syz1'}, 0x4) close(r1) socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:27:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5eb}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4110, 0xd4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0xc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 977.429761][ T8691] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 977.496989][ C0] not chained 250000 origins [ 977.501623][ C0] CPU: 0 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 977.510117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.520173][ C0] Workqueue: krdsd rds_connect_worker [ 977.525540][ C0] Call Trace: [ 977.528817][ C0] [ 977.531681][ C0] dump_stack+0x21c/0x280 [ 977.536015][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 977.541741][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.546944][ C0] ? __should_failslab+0x1f6/0x290 [ 977.552052][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.557248][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 977.563061][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 977.569213][ C0] ? tcp_parse_options+0x206d/0x2100 [ 977.574514][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.579721][ C0] __msan_chain_origin+0x50/0x90 [ 977.584660][ C0] tcp_conn_request+0x19d6/0x4c30 [ 977.589706][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 977.595782][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.600989][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.606197][ C0] tcp_v6_conn_request+0x27f/0x330 [ 977.611318][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 977.616611][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 977.621987][ C0] ? idtentry_exit_cond_rcu+0x12/0x50 [ 977.627365][ C0] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 977.633348][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 977.639524][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.644725][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 977.649505][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 977.654363][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 977.658890][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 977.664088][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 977.669837][ C0] ip6_input+0x2dd/0x370 [ 977.674085][ C0] ? ip6_input+0x370/0x370 [ 977.678503][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 977.684394][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 977.689076][ C0] ipv6_rcv+0x3bb/0x460 [ 977.693241][ C0] ? local_bh_enable+0x40/0x40 [ 977.698020][ C0] __netif_receive_skb+0x265/0x670 [ 977.703130][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 977.708673][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 977.713528][ C0] process_backlog+0x50d/0xba0 [ 977.718292][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 977.724101][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 977.729382][ C0] napi_poll+0x43b/0xfd0 [ 977.733628][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.738827][ C0] net_rx_action+0x35c/0xd40 [ 977.743431][ C0] ? net_tx_action+0xdc0/0xdc0 [ 977.748197][ C0] __do_softirq+0x2ea/0x7f5 [ 977.752704][ C0] asm_call_on_stack+0xf/0x20 [ 977.757373][ C0] [ 977.760316][ C0] do_softirq_own_stack+0x7c/0xa0 [ 977.765339][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 977.770544][ C0] local_bh_enable+0x36/0x40 [ 977.775155][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 977.780363][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.785561][ C0] __ip6_finish_output+0x9c0/0xa90 [ 977.790680][ C0] ip6_finish_output+0x14b/0x4b0 [ 977.795624][ C0] ip6_output+0x68d/0x7f0 [ 977.799958][ C0] ? ip6_output+0x7f0/0x7f0 [ 977.804460][ C0] ? ac6_seq_show+0x200/0x200 [ 977.809148][ C0] ip6_xmit+0x2475/0x2b40 [ 977.813492][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 977.817995][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 977.822687][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 977.828319][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 977.833522][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 977.839100][ C0] tcp_connect+0x153f/0x3bb0 [ 977.843690][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 977.848980][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 977.854795][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 977.860839][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 977.865721][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 977.870933][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 977.876419][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.881627][ C0] inet_stream_connect+0x101/0x180 [ 977.886746][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 977.892379][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 977.898021][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.903227][ C0] ? rds_tcp_state_change+0x400/0x400 [ 977.908602][ C0] rds_connect_worker+0x36b/0x550 [ 977.913625][ C0] ? rds_addr_cmp+0x290/0x290 [ 977.918305][ C0] process_one_work+0x1688/0x2140 [ 977.923357][ C0] worker_thread+0x10bc/0x2730 [ 977.928126][ C0] ? kmsan_get_metadata+0x116/0x180 [ 977.933433][ C0] kthread+0x551/0x590 [ 977.937511][ C0] ? process_one_work+0x2140/0x2140 [ 977.942751][ C0] ? kthread_blkcg+0x110/0x110 [ 977.947528][ C0] ret_from_fork+0x1f/0x30 [ 977.951952][ C0] Uninit was stored to memory at: [ 977.956990][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 977.962810][ C0] __msan_chain_origin+0x50/0x90 [ 977.967774][ C0] tcp_conn_request+0x19d6/0x4c30 [ 977.972902][ C0] tcp_v6_conn_request+0x27f/0x330 [ 977.978096][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 977.983457][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 977.988217][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 977.992727][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 977.998449][ C0] ip6_input+0x2dd/0x370 [ 978.002691][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.007362][ C0] ipv6_rcv+0x3bb/0x460 [ 978.011524][ C0] __netif_receive_skb+0x265/0x670 [ 978.016631][ C0] process_backlog+0x50d/0xba0 [ 978.021390][ C0] napi_poll+0x43b/0xfd0 [ 978.025637][ C0] net_rx_action+0x35c/0xd40 [ 978.030230][ C0] __do_softirq+0x2ea/0x7f5 [ 978.034808][ C0] [ 978.037132][ C0] Uninit was stored to memory at: [ 978.042154][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.047873][ C0] __msan_chain_origin+0x50/0x90 [ 978.052811][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 978.058089][ C0] tcp_conn_request+0x3046/0x4c30 [ 978.063212][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.068324][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.073692][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.078452][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.083066][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.088781][ C0] ip6_input+0x2dd/0x370 [ 978.093017][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.097685][ C0] ipv6_rcv+0x3bb/0x460 [ 978.101835][ C0] __netif_receive_skb+0x265/0x670 [ 978.106960][ C0] process_backlog+0x50d/0xba0 [ 978.111720][ C0] napi_poll+0x43b/0xfd0 [ 978.115962][ C0] net_rx_action+0x35c/0xd40 [ 978.120550][ C0] __do_softirq+0x2ea/0x7f5 [ 978.125033][ C0] [ 978.127349][ C0] Uninit was stored to memory at: [ 978.132380][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.138097][ C0] __msan_chain_origin+0x50/0x90 [ 978.143026][ C0] tcp_conn_request+0x19d6/0x4c30 [ 978.148043][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.153171][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.158538][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.163298][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.167811][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.173542][ C0] ip6_input+0x2dd/0x370 [ 978.177794][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.182485][ C0] ipv6_rcv+0x3bb/0x460 [ 978.186648][ C0] __netif_receive_skb+0x265/0x670 [ 978.191761][ C0] process_backlog+0x50d/0xba0 [ 978.196525][ C0] napi_poll+0x43b/0xfd0 [ 978.200779][ C0] net_rx_action+0x35c/0xd40 [ 978.205382][ C0] __do_softirq+0x2ea/0x7f5 [ 978.209865][ C0] [ 978.212181][ C0] Uninit was stored to memory at: [ 978.217214][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.222931][ C0] __msan_chain_origin+0x50/0x90 [ 978.227866][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 978.233167][ C0] tcp_conn_request+0x3046/0x4c30 [ 978.238188][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.243301][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.248686][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.253446][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.257952][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.263667][ C0] ip6_input+0x2dd/0x370 [ 978.267909][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.272581][ C0] ipv6_rcv+0x3bb/0x460 [ 978.276738][ C0] __netif_receive_skb+0x265/0x670 [ 978.281849][ C0] process_backlog+0x50d/0xba0 [ 978.286615][ C0] napi_poll+0x43b/0xfd0 [ 978.290854][ C0] net_rx_action+0x35c/0xd40 [ 978.295443][ C0] __do_softirq+0x2ea/0x7f5 [ 978.299934][ C0] [ 978.302253][ C0] Uninit was stored to memory at: [ 978.307278][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.312992][ C0] __msan_chain_origin+0x50/0x90 [ 978.317924][ C0] tcp_conn_request+0x19d6/0x4c30 [ 978.322947][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.328053][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.333427][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.338186][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.342687][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.348400][ C0] ip6_input+0x2dd/0x370 [ 978.352641][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.357324][ C0] ipv6_rcv+0x3bb/0x460 [ 978.361483][ C0] __netif_receive_skb+0x265/0x670 [ 978.366590][ C0] process_backlog+0x50d/0xba0 [ 978.371346][ C0] napi_poll+0x43b/0xfd0 [ 978.375582][ C0] net_rx_action+0x35c/0xd40 [ 978.380171][ C0] __do_softirq+0x2ea/0x7f5 [ 978.384658][ C0] [ 978.386972][ C0] Uninit was stored to memory at: [ 978.391990][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.397701][ C0] __msan_chain_origin+0x50/0x90 [ 978.402635][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 978.407998][ C0] tcp_conn_request+0x3046/0x4c30 [ 978.413015][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.418116][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.423479][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.428236][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.432733][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.438445][ C0] ip6_input+0x2dd/0x370 [ 978.442681][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.447348][ C0] ipv6_rcv+0x3bb/0x460 [ 978.451530][ C0] __netif_receive_skb+0x265/0x670 [ 978.456638][ C0] process_backlog+0x50d/0xba0 [ 978.461400][ C0] napi_poll+0x43b/0xfd0 [ 978.465638][ C0] net_rx_action+0x35c/0xd40 [ 978.470224][ C0] __do_softirq+0x2ea/0x7f5 [ 978.474708][ C0] [ 978.477023][ C0] Uninit was stored to memory at: [ 978.482046][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 978.487761][ C0] __msan_chain_origin+0x50/0x90 [ 978.492692][ C0] tcp_conn_request+0x19d6/0x4c30 [ 978.497710][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.502820][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.508192][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.512953][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.517460][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.523196][ C0] ip6_input+0x2dd/0x370 [ 978.527435][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.532109][ C0] ipv6_rcv+0x3bb/0x460 [ 978.536258][ C0] __netif_receive_skb+0x265/0x670 [ 978.541359][ C0] process_backlog+0x50d/0xba0 [ 978.546121][ C0] napi_poll+0x43b/0xfd0 [ 978.550360][ C0] net_rx_action+0x35c/0xd40 [ 978.554953][ C0] __do_softirq+0x2ea/0x7f5 [ 978.559440][ C0] [ 978.561756][ C0] Uninit was created at: [ 978.565998][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 978.571732][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 978.576498][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 978.581952][ C0] alloc_pages_current+0x685/0xb50 [ 978.587058][ C0] alloc_slab_page+0x11c/0x1240 [ 978.591903][ C0] new_slab+0x2bf/0x10c0 [ 978.596144][ C0] ___slab_alloc+0xcd3/0x18a0 [ 978.600836][ C0] kmem_cache_alloc+0xb70/0xc50 [ 978.605767][ C0] inet_reqsk_alloc+0xaf/0x910 [ 978.610524][ C0] tcp_conn_request+0x8dc/0x4c30 [ 978.615458][ C0] tcp_v6_conn_request+0x27f/0x330 [ 978.620566][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 978.625935][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 978.630696][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 978.635202][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 978.641002][ C0] ip6_input+0x2dd/0x370 [ 978.645237][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 978.649933][ C0] ipv6_rcv+0x3bb/0x460 [ 978.654114][ C0] __netif_receive_skb+0x265/0x670 [ 978.659220][ C0] process_backlog+0x50d/0xba0 [ 978.663976][ C0] napi_poll+0x43b/0xfd0 [ 978.668214][ C0] net_rx_action+0x35c/0xd40 [ 978.672808][ C0] __do_softirq+0x2ea/0x7f5 13:27:17 executing program 3: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:27:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5eb}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4110, 0xd4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0xc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 978.830124][ T8691] usb 2-1: Using ep0 maxpacket: 8 [ 978.859470][T19421] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 978.969877][ T8691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.981736][ T8691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.991822][ T8691] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 979.001141][ T8691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.139212][T19421] usb 1-1: Using ep0 maxpacket: 8 [ 979.270309][T19421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.281426][T19421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.291396][T19421] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 979.300619][T19421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0090"], 0x10}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 979.332470][ T8691] usb 2-1: config 0 descriptor?? [ 979.340433][T19421] usb 1-1: config 0 descriptor?? [ 979.834350][T19421] uclogic 0003:28BD:0055.0009: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.0-1/input0 [ 979.870547][ T8691] uclogic 0003:28BD:0055.000A: hidraw1: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.1-1/input0 [ 980.030127][ T8692] usb 2-1: USB disconnect, device number 34 [ 980.054550][T19421] usb 1-1: USB disconnect, device number 34 13:27:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008bd28550040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x6c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 13:27:19 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:19 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RXATTRCREATE(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) 13:27:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5eb}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4110, 0xd4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0xc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:27:19 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d}, {0x2c}, {0x6}]}) 13:27:20 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 13:27:20 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 981.323863][T27631] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' 13:27:20 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 13:27:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5eb}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4110, 0xd4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0xc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 981.381008][ T8691] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 981.629445][ T8691] usb 2-1: Using ep0 maxpacket: 8 [ 981.643372][ T29] audit: type=1326 audit(1600176440.528:62): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=27614 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 13:27:20 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 981.680789][T27638] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 981.773723][ T29] audit: type=1326 audit(1600176440.578:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=27614 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 981.800765][ T8691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.811920][ T8691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.822156][ T8691] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 981.831523][ T8691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:27:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d}, {0x2c}, {0x6}]}) [ 982.009967][ T8691] usb 2-1: config 0 descriptor?? 13:27:20 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 982.096672][T27647] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 982.278137][ T29] audit: type=1326 audit(1600176441.158:64): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=27651 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 982.536172][ T8691] uclogic 0003:28BD:0055.000B: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.1-1/input0 [ 982.749859][ T8691] usb 2-1: USB disconnect, device number 35 13:27:22 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:22 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000a00)={'filter\x00', 0x2004, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 983.638778][T27676] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' 13:27:22 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RXATTRCREATE(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) 13:27:22 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d}, {0x2c}, {0x6}]}) 13:27:22 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xee, &(0x7f00000003c0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad00002f6b9165bb680dbdd773e95620586200000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761cf6bf93468e177550000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e94d71b59b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78964c6fe77e39d125650da9ab14624d751e10f063962be791ca675617cc866ed6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:22 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 984.116705][ T29] audit: type=1326 audit(1600176442.998:65): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=27681 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 13:27:23 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000000000000000000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:27:23 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:23 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:23 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000000000000000000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:27:23 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:27:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, r3, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0x18}}, 0x0) 13:27:26 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RXATTRCREATE(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) 13:27:26 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000000000000000000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:27:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, r3, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0x18}}, 0x0) 13:27:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d}, {0x2c}, {0x6}]}) 13:27:26 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xee, &(0x7f00000003c0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad00002f6b9165bb680dbdd773e95620586200000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761cf6bf93468e177550000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e94d71b59b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78964c6fe77e39d125650da9ab14624d751e10f063962be791ca675617cc866ed6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 987.601117][ T29] audit: type=1326 audit(1600176446.488:66): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=27724 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 13:27:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, r3, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0x18}}, 0x0) 13:27:26 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:26 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000000000000000000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:27:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, r3, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0x18}}, 0x0) 13:27:27 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:27 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') [ 989.293576][ C0] not chained 260000 origins [ 989.298304][ C0] CPU: 0 PID: 1576 Comm: kworker/u4:13 Not tainted 5.8.0-rc5-syzkaller #0 [ 989.306796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.316949][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 989.322576][ C0] Call Trace: [ 989.325852][ C0] [ 989.328707][ C0] dump_stack+0x21c/0x280 [ 989.333040][ C0] ? tcp_data_queue+0x1e5c/0xb570 [ 989.338080][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 989.343811][ C0] ? net_rx_action+0x35c/0xd40 [ 989.348577][ C0] ? __do_softirq+0x2ea/0x7f5 [ 989.353247][ C0] ? asm_call_on_stack+0xf/0x20 [ 989.358115][ C0] ? do_softirq_own_stack+0x7c/0xa0 [ 989.363320][ C0] ? __local_bh_enable_ip+0x184/0x1d0 [ 989.368689][ C0] ? local_bh_enable+0x36/0x40 [ 989.373453][ C0] ? ip6_finish_output2+0x24b4/0x2a70 [ 989.378822][ C0] ? __ip6_finish_output+0x9c0/0xa90 [ 989.384112][ C0] ? ip6_finish_output+0x14b/0x4b0 [ 989.389226][ C0] ? ip6_output+0x68d/0x7f0 [ 989.393729][ C0] ? ip6_xmit+0x2475/0x2b40 [ 989.398234][ C0] ? inet6_csk_xmit+0x47f/0x5a0 [ 989.403085][ C0] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 989.408464][ C0] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 989.413494][ C0] ? __tcp_push_pending_frames+0x150/0x5c0 [ 989.419424][ C0] ? tcp_send_fin+0x192a/0x1bc0 [ 989.424291][ C0] ? tcp_shutdown+0x1f7/0x270 [ 989.428977][ C0] ? inet_shutdown+0x44f/0x6d0 [ 989.433740][ C0] ? kernel_sock_shutdown+0x98/0xc0 [ 989.438935][ C0] ? rds_tcp_accept_one+0x1060/0x12c0 [ 989.444302][ C0] ? rds_tcp_accept_worker+0x60/0x180 [ 989.449673][ C0] ? process_one_work+0x1688/0x2140 [ 989.454878][ C0] ? worker_thread+0x10bc/0x2730 [ 989.459826][ C0] ? kthread+0x551/0x590 [ 989.464065][ C0] ? ret_from_fork+0x1f/0x30 [ 989.468651][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.474454][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 989.480523][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.485723][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.491528][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 989.497681][ C0] ? __msan_get_context_state+0x9/0x20 [ 989.503152][ C0] ? __module_get+0x19/0x210 [ 989.507749][ C0] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 989.513908][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.519107][ C0] __msan_chain_origin+0x50/0x90 [ 989.524049][ C0] tcp_time_wait+0x102b/0x1150 [ 989.528838][ C0] tcp_fin+0x23a/0x9f0 [ 989.532911][ C0] tcp_data_queue+0x1e5c/0xb570 [ 989.537762][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.543569][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 989.549626][ C0] ? tcp_urg+0xb22/0x10c0 [ 989.553987][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 989.559444][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.564670][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.570492][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.575691][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 989.580471][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 989.585007][ C0] ? tcp_v6_rcv+0x1541/0x5a80 [ 989.589695][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 989.594930][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 989.600679][ C0] ip6_input+0x2dd/0x370 [ 989.604933][ C0] ? ip6_input+0x370/0x370 [ 989.609353][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 989.615267][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 989.619973][ C0] ipv6_rcv+0x3bb/0x460 [ 989.624143][ C0] ? local_bh_enable+0x40/0x40 [ 989.628912][ C0] __netif_receive_skb+0x265/0x670 [ 989.634023][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 989.639563][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 989.644418][ C0] process_backlog+0x50d/0xba0 [ 989.649182][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.654995][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 989.660298][ C0] napi_poll+0x43b/0xfd0 [ 989.664542][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.669751][ C0] net_rx_action+0x35c/0xd40 [ 989.674350][ C0] ? net_tx_action+0xdc0/0xdc0 [ 989.679135][ C0] __do_softirq+0x2ea/0x7f5 [ 989.683647][ C0] asm_call_on_stack+0xf/0x20 [ 989.688314][ C0] [ 989.691253][ C0] do_softirq_own_stack+0x7c/0xa0 [ 989.696279][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 989.701489][ C0] local_bh_enable+0x36/0x40 [ 989.706080][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 989.711300][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.716506][ C0] __ip6_finish_output+0x9c0/0xa90 [ 989.721630][ C0] ip6_finish_output+0x14b/0x4b0 [ 989.726571][ C0] ip6_output+0x68d/0x7f0 [ 989.730913][ C0] ? ip6_output+0x7f0/0x7f0 [ 989.735421][ C0] ? ac6_seq_show+0x200/0x200 [ 989.740095][ C0] ip6_xmit+0x2475/0x2b40 [ 989.744445][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 989.748950][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 989.753665][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 989.759302][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 989.764529][ C0] tcp_write_xmit+0x4f5b/0xe6a0 [ 989.769401][ C0] ? kmsan_get_metadata+0xb0/0x180 [ 989.774533][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.779730][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.784927][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.790130][ C0] __tcp_push_pending_frames+0x150/0x5c0 [ 989.795769][ C0] tcp_send_fin+0x192a/0x1bc0 [ 989.800458][ C0] ? tcp_set_state+0x9ec/0xb40 [ 989.805224][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.810426][ C0] tcp_shutdown+0x1f7/0x270 [ 989.814954][ C0] ? tcp_set_state+0xb40/0xb40 [ 989.819722][ C0] inet_shutdown+0x44f/0x6d0 [ 989.824329][ C0] ? inet_recvmsg+0x6b0/0x6b0 [ 989.829015][ C0] kernel_sock_shutdown+0x98/0xc0 [ 989.834046][ C0] rds_tcp_accept_one+0x1060/0x12c0 [ 989.839249][ C0] rds_tcp_accept_worker+0x60/0x180 [ 989.844446][ C0] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 989.849483][ C0] process_one_work+0x1688/0x2140 [ 989.854527][ C0] worker_thread+0x10bc/0x2730 [ 989.859291][ C0] ? kmsan_get_metadata+0x116/0x180 [ 989.864495][ C0] kthread+0x551/0x590 [ 989.868561][ C0] ? process_one_work+0x2140/0x2140 [ 989.873756][ C0] ? kthread_blkcg+0x110/0x110 [ 989.878529][ C0] ret_from_fork+0x1f/0x30 [ 989.882944][ C0] Uninit was stored to memory at: [ 989.887963][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 989.893690][ C0] __msan_chain_origin+0x50/0x90 [ 989.898619][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 989.903378][ C0] tcp_time_wait+0xd9/0x1150 [ 989.907958][ C0] tcp_fin+0x23a/0x9f0 [ 989.912036][ C0] tcp_data_queue+0x1e5c/0xb570 [ 989.916884][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 989.922337][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 989.927095][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 989.931599][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 989.937328][ C0] ip6_input+0x2dd/0x370 [ 989.941567][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 989.946238][ C0] ipv6_rcv+0x3bb/0x460 [ 989.950393][ C0] __netif_receive_skb+0x265/0x670 [ 989.955515][ C0] process_backlog+0x50d/0xba0 [ 989.960271][ C0] napi_poll+0x43b/0xfd0 [ 989.964510][ C0] net_rx_action+0x35c/0xd40 [ 989.969099][ C0] __do_softirq+0x2ea/0x7f5 [ 989.973579][ C0] [ 989.975893][ C0] Uninit was stored to memory at: [ 989.980916][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 989.986628][ C0] __msan_chain_origin+0x50/0x90 [ 989.991587][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 989.996789][ C0] tcp_time_wait+0xf7b/0x1150 [ 990.001462][ C0] tcp_fin+0x23a/0x9f0 [ 990.005538][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.010402][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.015857][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.020614][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.025119][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.030831][ C0] ip6_input+0x2dd/0x370 [ 990.035067][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.039745][ C0] ipv6_rcv+0x3bb/0x460 [ 990.043899][ C0] __netif_receive_skb+0x265/0x670 [ 990.049007][ C0] process_backlog+0x50d/0xba0 [ 990.053765][ C0] napi_poll+0x43b/0xfd0 [ 990.058007][ C0] net_rx_action+0x35c/0xd40 [ 990.062591][ C0] __do_softirq+0x2ea/0x7f5 [ 990.067082][ C0] [ 990.069401][ C0] Uninit was stored to memory at: [ 990.074424][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 990.080144][ C0] __msan_chain_origin+0x50/0x90 [ 990.085089][ C0] tcp_time_wait+0x1064/0x1150 [ 990.089880][ C0] tcp_fin+0x23a/0x9f0 [ 990.093947][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.098796][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.104244][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.109012][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.113509][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.119231][ C0] ip6_input+0x2dd/0x370 [ 990.123473][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.128153][ C0] ipv6_rcv+0x3bb/0x460 [ 990.132306][ C0] __netif_receive_skb+0x265/0x670 [ 990.137541][ C0] process_backlog+0x50d/0xba0 [ 990.142298][ C0] napi_poll+0x43b/0xfd0 [ 990.146534][ C0] net_rx_action+0x35c/0xd40 [ 990.151119][ C0] __do_softirq+0x2ea/0x7f5 [ 990.155601][ C0] [ 990.157916][ C0] Uninit was stored to memory at: [ 990.162934][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 990.168644][ C0] __msan_chain_origin+0x50/0x90 [ 990.173574][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 990.178336][ C0] tcp_time_wait+0xd9/0x1150 [ 990.182919][ C0] tcp_fin+0x23a/0x9f0 [ 990.186985][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.191834][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.197288][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.202047][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.206547][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.212257][ C0] ip6_input+0x2dd/0x370 [ 990.216497][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.221170][ C0] ipv6_rcv+0x3bb/0x460 [ 990.225326][ C0] __netif_receive_skb+0x265/0x670 [ 990.230434][ C0] process_backlog+0x50d/0xba0 [ 990.235214][ C0] napi_poll+0x43b/0xfd0 [ 990.239461][ C0] net_rx_action+0x35c/0xd40 [ 990.244048][ C0] __do_softirq+0x2ea/0x7f5 [ 990.248538][ C0] [ 990.250855][ C0] Uninit was stored to memory at: [ 990.255875][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 990.261586][ C0] __msan_chain_origin+0x50/0x90 [ 990.266519][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 990.271714][ C0] tcp_time_wait+0xf7b/0x1150 [ 990.276391][ C0] tcp_fin+0x23a/0x9f0 [ 990.280471][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.285315][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.290772][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.295533][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.300042][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.305759][ C0] ip6_input+0x2dd/0x370 [ 990.310003][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.314672][ C0] ipv6_rcv+0x3bb/0x460 [ 990.318827][ C0] __netif_receive_skb+0x265/0x670 [ 990.323937][ C0] process_backlog+0x50d/0xba0 [ 990.328702][ C0] napi_poll+0x43b/0xfd0 [ 990.332970][ C0] net_rx_action+0x35c/0xd40 [ 990.337557][ C0] __do_softirq+0x2ea/0x7f5 [ 990.342048][ C0] [ 990.344377][ C0] Uninit was stored to memory at: [ 990.349418][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 990.355141][ C0] __msan_chain_origin+0x50/0x90 [ 990.360087][ C0] tcp_time_wait+0x1064/0x1150 [ 990.364869][ C0] tcp_fin+0x23a/0x9f0 [ 990.368956][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.373803][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.379255][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.384016][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.388553][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.394265][ C0] ip6_input+0x2dd/0x370 [ 990.398496][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.403185][ C0] ipv6_rcv+0x3bb/0x460 [ 990.407355][ C0] __netif_receive_skb+0x265/0x670 [ 990.412478][ C0] process_backlog+0x50d/0xba0 [ 990.417240][ C0] napi_poll+0x43b/0xfd0 [ 990.421480][ C0] net_rx_action+0x35c/0xd40 [ 990.426076][ C0] __do_softirq+0x2ea/0x7f5 [ 990.430564][ C0] [ 990.432879][ C0] Uninit was stored to memory at: [ 990.437906][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 990.443622][ C0] __msan_chain_origin+0x50/0x90 [ 990.448586][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 990.453350][ C0] tcp_time_wait+0xd9/0x1150 [ 990.457935][ C0] tcp_fin+0x23a/0x9f0 [ 990.462141][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.466989][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.472445][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.477290][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.481790][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.487509][ C0] ip6_input+0x2dd/0x370 [ 990.491752][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.496423][ C0] ipv6_rcv+0x3bb/0x460 [ 990.500580][ C0] __netif_receive_skb+0x265/0x670 [ 990.505694][ C0] process_backlog+0x50d/0xba0 [ 990.510455][ C0] napi_poll+0x43b/0xfd0 [ 990.514711][ C0] net_rx_action+0x35c/0xd40 [ 990.519300][ C0] __do_softirq+0x2ea/0x7f5 [ 990.523786][ C0] [ 990.526104][ C0] Uninit was created at: [ 990.530361][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 990.536005][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 990.540789][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 990.546245][ C0] alloc_pages_current+0x685/0xb50 [ 990.551360][ C0] alloc_slab_page+0x11c/0x1240 [ 990.556211][ C0] new_slab+0x2bf/0x10c0 [ 990.560457][ C0] ___slab_alloc+0xcd3/0x18a0 [ 990.565135][ C0] kmem_cache_alloc+0xb70/0xc50 [ 990.570070][ C0] inet_twsk_alloc+0x154/0xbd0 [ 990.574829][ C0] tcp_time_wait+0xd9/0x1150 [ 990.579414][ C0] tcp_fin+0x23a/0x9f0 [ 990.583497][ C0] tcp_data_queue+0x1e5c/0xb570 [ 990.588342][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 990.593795][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 990.598570][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 990.603179][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 990.608898][ C0] ip6_input+0x2dd/0x370 [ 990.613134][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 990.617808][ C0] ipv6_rcv+0x3bb/0x460 [ 990.621974][ C0] __netif_receive_skb+0x265/0x670 [ 990.627084][ C0] process_backlog+0x50d/0xba0 [ 990.631850][ C0] napi_poll+0x43b/0xfd0 [ 990.636090][ C0] net_rx_action+0x35c/0xd40 [ 990.640682][ C0] __do_softirq+0x2ea/0x7f5 13:27:29 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RXATTRCREATE(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) 13:27:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x194, &(0x7f0000000480)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:29 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:29 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xee, &(0x7f00000003c0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad00002f6b9165bb680dbdd773e95620586200000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761cf6bf93468e177550000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e94d71b59b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78964c6fe77e39d125650da9ab14624d751e10f063962be791ca675617cc866ed6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:30 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000140)='sit0\x00') 13:27:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 13:27:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 13:27:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x194, &(0x7f0000000480)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:33 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 13:27:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xee, &(0x7f00000003c0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ad00002f6b9165bb680dbdd773e95620586200000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761cf6bf93468e177550000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e94d71b59b83e4bc3b529f3ca0900000096e2c2a4fdca75813f78964c6fe77e39d125650da9ab14624d751e10f063962be791ca675617cc866ed6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:33 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 13:27:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x194, &(0x7f0000000480)="f7f23ab9740c9e57f4f22a160500000032a5b60a00008024c30e478947d1900c00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f7155d302a7be122bb107008b0164eb12c07a0200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e65e4b942d6ed155b67a555f4b2e2b0cd0e93e41c330f70401e3d96f546e65fab4fae51bb32a6f3ca61632d15b0c1cec89839cd7fe16d03af16efd23907d097227db763548378b342df9dd9e5a725e1292d967083dd4096eafcdc1f5fa68ac2f7146f4a25237de6ec3061cd22da2dcd9bd7f6bd5502d8c72b06661a63d27ca33d2d107870ca35424c9796a2a7517d3745f31be8b4906faa0d1dfef771b24f884b4a327be7110eb0004416db03a34d7ab51e666d952000000000000007fbe22764e5ea5085ac1bd02d3c17eeee9d1c7ac82d0dc1c5273f2aa6d42840352184ca32044dc9d8dd30601e832bcb0374af2c31cbb365febb6fff427fd59"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:37 executing program 4: prctl$PR_SET_NAME(0x25, &(0x7f0000000340)='-\x00') 13:27:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:37 executing program 4: prctl$PR_SET_NAME(0x25, &(0x7f0000000340)='-\x00') 13:27:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:27:37 executing program 5: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:38 executing program 4: prctl$PR_SET_NAME(0x25, &(0x7f0000000340)='-\x00') 13:27:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 13:27:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x194, &(0x7f0000000480)="f7f23ab9740c9e57f4f22a160500000032a5b60a00008024c30e478947d1900c00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f7155d302a7be122bb107008b0164eb12c07a0200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e65e4b942d6ed155b67a555f4b2e2b0cd0e93e41c330f70401e3d96f546e65fab4fae51bb32a6f3ca61632d15b0c1cec89839cd7fe16d03af16efd23907d097227db763548378b342df9dd9e5a725e1292d967083dd4096eafcdc1f5fa68ac2f7146f4a25237de6ec3061cd22da2dcd9bd7f6bd5502d8c72b06661a63d27ca33d2d107870ca35424c9796a2a7517d3745f31be8b4906faa0d1dfef771b24f884b4a327be7110eb0004416db03a34d7ab51e666d952000000000000007fbe22764e5ea5085ac1bd02d3c17eeee9d1c7ac82d0dc1c5273f2aa6d42840352184ca32044dc9d8dd30601e832bcb0374af2c31cbb365febb6fff427fd59"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:40 executing program 5: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:40 executing program 1: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:40 executing program 4: prctl$PR_SET_NAME(0x25, &(0x7f0000000340)='-\x00') 13:27:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:41 executing program 5: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:41 executing program 1: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b572877"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 13:27:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) [ 1002.806722][T27941] VFS: Warning: syz-executor.4 using old stat() call. Recompile your binary. [ 1005.401234][ C1] not chained 270000 origins [ 1005.406152][ C1] CPU: 1 PID: 422 Comm: kworker/u4:5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1005.414478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.424556][ C1] Workqueue: krdsd rds_connect_worker [ 1005.429929][ C1] Call Trace: [ 1005.433216][ C1] [ 1005.436190][ C1] dump_stack+0x21c/0x280 [ 1005.440534][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1005.446406][ C1] ? __tcp_send_ack+0x6e9/0x8c0 [ 1005.451280][ C1] ? tcp_send_ack+0x68/0x90 [ 1005.455795][ C1] ? tcp_rcv_synsent_state_process+0x42a3/0x42d0 [ 1005.462151][ C1] ? tcp_rcv_state_process+0x445/0x45b0 [ 1005.467708][ C1] ? tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1005.472677][ C1] ? __release_sock+0x26c/0x690 [ 1005.477622][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.482852][ C1] ? __should_failslab+0x1f6/0x290 [ 1005.487992][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.493198][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.499030][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 1005.505414][ C1] ? tcp_parse_options+0x206d/0x2100 [ 1005.510729][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.515955][ C1] __msan_chain_origin+0x50/0x90 [ 1005.520924][ C1] tcp_conn_request+0x15d4/0x4c30 [ 1005.525976][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.531815][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.537146][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.542987][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1005.549303][ C1] ? __queue_work+0x1e13/0x2050 [ 1005.554185][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.559401][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1005.564525][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1005.569842][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1005.575234][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.580444][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.586288][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.591514][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.596731][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1005.601522][ C1] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1005.606391][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1005.610937][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1005.616158][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1005.621935][ C1] ip6_input+0x2dd/0x370 [ 1005.626212][ C1] ? ip6_input+0x370/0x370 [ 1005.630839][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1005.636829][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1005.641522][ C1] ipv6_rcv+0x3bb/0x460 [ 1005.645703][ C1] ? local_bh_enable+0x40/0x40 [ 1005.650483][ C1] __netif_receive_skb+0x265/0x670 [ 1005.655606][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1005.661157][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1005.666033][ C1] process_backlog+0x50d/0xba0 [ 1005.670813][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.676658][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1005.681958][ C1] napi_poll+0x43b/0xfd0 [ 1005.686226][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.691695][ C1] net_rx_action+0x35c/0xd40 [ 1005.696315][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1005.701100][ C1] __do_softirq+0x2ea/0x7f5 [ 1005.705715][ C1] asm_call_on_stack+0xf/0x20 [ 1005.710395][ C1] [ 1005.713356][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1005.718408][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1005.723631][ C1] local_bh_enable+0x36/0x40 [ 1005.728395][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1005.733653][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.738865][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1005.744125][ C1] ip6_finish_output+0x14b/0x4b0 [ 1005.749090][ C1] ip6_output+0x68d/0x7f0 [ 1005.753448][ C1] ? ip6_output+0x7f0/0x7f0 [ 1005.758060][ C1] ? ac6_seq_show+0x200/0x200 [ 1005.762755][ C1] ip6_xmit+0x2475/0x2b40 [ 1005.767126][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1005.771659][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1005.776382][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1005.782041][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1005.787260][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1005.792860][ C1] tcp_connect+0x153f/0x3bb0 [ 1005.797558][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 1005.802875][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1005.808710][ C1] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1005.814726][ C1] tcp_v6_connect+0x2be8/0x2d40 [ 1005.819940][ C1] ? tcp_v6_pre_connect+0x130/0x130 [ 1005.825176][ C1] __inet_stream_connect+0x14fe/0x16f0 [ 1005.830677][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.835902][ C1] inet_stream_connect+0x101/0x180 [ 1005.841178][ C1] ? __inet_stream_connect+0x16f0/0x16f0 [ 1005.846973][ C1] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1005.852631][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.857861][ C1] ? rds_tcp_state_change+0x400/0x400 [ 1005.863257][ C1] rds_connect_worker+0x36b/0x550 [ 1005.868305][ C1] ? rds_addr_cmp+0x290/0x290 [ 1005.873008][ C1] process_one_work+0x1688/0x2140 [ 1005.878069][ C1] worker_thread+0x10bc/0x2730 [ 1005.882874][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1005.888106][ C1] kthread+0x551/0x590 [ 1005.892193][ C1] ? process_one_work+0x2140/0x2140 [ 1005.897410][ C1] ? kthread_blkcg+0x110/0x110 [ 1005.902206][ C1] ret_from_fork+0x1f/0x30 [ 1005.906630][ C1] Uninit was stored to memory at: [ 1005.911676][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1005.917412][ C1] __msan_chain_origin+0x50/0x90 [ 1005.922356][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1005.927564][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1005.932690][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1005.938070][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1005.942838][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1005.947359][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1005.953174][ C1] ip6_input+0x2dd/0x370 [ 1005.957418][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1005.962106][ C1] ipv6_rcv+0x3bb/0x460 [ 1005.966362][ C1] __netif_receive_skb+0x265/0x670 [ 1005.971483][ C1] process_backlog+0x50d/0xba0 [ 1005.976303][ C1] napi_poll+0x43b/0xfd0 [ 1005.980553][ C1] net_rx_action+0x35c/0xd40 [ 1005.985160][ C1] __do_softirq+0x2ea/0x7f5 [ 1005.989663][ C1] [ 1005.991996][ C1] Uninit was stored to memory at: [ 1005.997038][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.002769][ C1] __msan_chain_origin+0x50/0x90 [ 1006.007730][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1006.013026][ C1] tcp_conn_request+0x3046/0x4c30 [ 1006.018055][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.023176][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.028557][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.033324][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.037836][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.043576][ C1] ip6_input+0x2dd/0x370 [ 1006.047835][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.052655][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.056845][ C1] __netif_receive_skb+0x265/0x670 [ 1006.062058][ C1] process_backlog+0x50d/0xba0 [ 1006.067011][ C1] napi_poll+0x43b/0xfd0 [ 1006.071376][ C1] net_rx_action+0x35c/0xd40 [ 1006.075990][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.080492][ C1] [ 1006.082820][ C1] Uninit was stored to memory at: [ 1006.087880][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.093610][ C1] __msan_chain_origin+0x50/0x90 [ 1006.098565][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1006.103603][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.108837][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.114240][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.119014][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.123527][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.129340][ C1] ip6_input+0x2dd/0x370 [ 1006.133593][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.138391][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.142571][ C1] __netif_receive_skb+0x265/0x670 [ 1006.147710][ C1] process_backlog+0x50d/0xba0 [ 1006.152480][ C1] napi_poll+0x43b/0xfd0 [ 1006.156728][ C1] net_rx_action+0x35c/0xd40 [ 1006.161495][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.165992][ C1] [ 1006.168337][ C1] Uninit was stored to memory at: [ 1006.173388][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.179125][ C1] __msan_chain_origin+0x50/0x90 [ 1006.184164][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1006.189456][ C1] tcp_conn_request+0x3046/0x4c30 [ 1006.194493][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.199609][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.205080][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.209856][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.214370][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.220096][ C1] ip6_input+0x2dd/0x370 [ 1006.224343][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.229218][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.233489][ C1] __netif_receive_skb+0x265/0x670 [ 1006.238606][ C1] process_backlog+0x50d/0xba0 [ 1006.243383][ C1] napi_poll+0x43b/0xfd0 [ 1006.247663][ C1] net_rx_action+0x35c/0xd40 [ 1006.252256][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.256749][ C1] [ 1006.259075][ C1] Uninit was stored to memory at: [ 1006.264113][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.269854][ C1] __msan_chain_origin+0x50/0x90 [ 1006.274830][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1006.279877][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.285011][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.290390][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.295167][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.299696][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.305427][ C1] ip6_input+0x2dd/0x370 [ 1006.309677][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.314357][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.318523][ C1] __netif_receive_skb+0x265/0x670 [ 1006.323642][ C1] process_backlog+0x50d/0xba0 [ 1006.328414][ C1] napi_poll+0x43b/0xfd0 [ 1006.332661][ C1] net_rx_action+0x35c/0xd40 [ 1006.337252][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.341744][ C1] [ 1006.344205][ C1] Uninit was stored to memory at: [ 1006.349259][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.355084][ C1] __msan_chain_origin+0x50/0x90 [ 1006.360038][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1006.365336][ C1] tcp_conn_request+0x3046/0x4c30 [ 1006.370373][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.375505][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.381017][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.385800][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.390332][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.396064][ C1] ip6_input+0x2dd/0x370 [ 1006.400321][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.405098][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.409274][ C1] __netif_receive_skb+0x265/0x670 [ 1006.414437][ C1] process_backlog+0x50d/0xba0 [ 1006.419212][ C1] napi_poll+0x43b/0xfd0 [ 1006.423468][ C1] net_rx_action+0x35c/0xd40 [ 1006.428074][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.432570][ C1] [ 1006.435032][ C1] Uninit was stored to memory at: [ 1006.440067][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1006.445903][ C1] __msan_chain_origin+0x50/0x90 [ 1006.450854][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1006.455893][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.461015][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.466414][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.471186][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.475701][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.481426][ C1] ip6_input+0x2dd/0x370 [ 1006.485675][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.490359][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.494520][ C1] __netif_receive_skb+0x265/0x670 [ 1006.499643][ C1] process_backlog+0x50d/0xba0 [ 1006.504447][ C1] napi_poll+0x43b/0xfd0 [ 1006.508704][ C1] net_rx_action+0x35c/0xd40 [ 1006.513315][ C1] __do_softirq+0x2ea/0x7f5 [ 1006.517812][ C1] [ 1006.520143][ C1] Uninit was created at: [ 1006.524403][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1006.530064][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1006.534851][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1006.540336][ C1] alloc_pages_current+0x685/0xb50 [ 1006.545588][ C1] alloc_slab_page+0x11c/0x1240 [ 1006.550449][ C1] new_slab+0x2bf/0x10c0 [ 1006.554709][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1006.559392][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1006.564254][ C1] inet_reqsk_alloc+0xaf/0x910 [ 1006.569034][ C1] tcp_conn_request+0x8dc/0x4c30 [ 1006.573979][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1006.579097][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1006.584569][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1006.589587][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1006.594101][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1006.599914][ C1] ip6_input+0x2dd/0x370 [ 1006.604164][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1006.608856][ C1] ipv6_rcv+0x3bb/0x460 [ 1006.613028][ C1] __netif_receive_skb+0x265/0x670 [ 1006.618153][ C1] process_backlog+0x50d/0xba0 [ 1006.622937][ C1] napi_poll+0x43b/0xfd0 [ 1006.627198][ C1] net_rx_action+0x35c/0xd40 [ 1006.631803][ C1] __do_softirq+0x2ea/0x7f5 13:27:46 executing program 5: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:46 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)=@caif=@util, 0x80, 0x0}}], 0x1, 0x0, 0x0) 13:27:46 executing program 1: unshare(0x400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 13:27:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b572877"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 13:27:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) [ 1007.901122][T27964] VFS: Warning: syz-executor.4 using old stat() call. Recompile your binary. 13:27:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b572877"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 13:27:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) [ 1009.026475][T27985] VFS: Warning: syz-executor.4 using old stat() call. Recompile your binary. 13:27:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b572877"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 13:27:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:49 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:27:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:49 executing program 4: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 13:27:49 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3800, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}, "020088beffff0064"}}}}}, 0x0) 13:27:50 executing program 4: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 13:27:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x10}, 0x8) 13:27:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3800, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}, "020088beffff0064"}}}}}, 0x0) 13:27:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @restrict, @fwd, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb4}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:27:50 executing program 4: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 13:27:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3800, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}, "020088beffff0064"}}}}}, 0x0) 13:27:51 executing program 4: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) [ 1026.458750][ C0] not chained 280000 origins [ 1026.463372][ C0] CPU: 0 PID: 20351 Comm: kworker/u4:1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1026.471860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.481930][ C0] Workqueue: krdsd rds_connect_worker [ 1026.487299][ C0] Call Trace: [ 1026.490579][ C0] [ 1026.493436][ C0] dump_stack+0x21c/0x280 [ 1026.497780][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1026.503516][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.508712][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1026.514521][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1026.520671][ C0] ? tcp_select_initial_window+0x949/0xa00 [ 1026.526484][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.531682][ C0] __msan_chain_origin+0x50/0x90 [ 1026.536642][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1026.541945][ C0] tcp_conn_request+0x3046/0x4c30 [ 1026.546984][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.552196][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.557394][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1026.562504][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1026.567783][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1026.573149][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.578342][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1026.584156][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.589351][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.594546][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1026.599306][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1026.604160][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1026.608692][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1026.613897][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1026.619639][ C0] ip6_input+0x2dd/0x370 [ 1026.623889][ C0] ? ip6_input+0x370/0x370 [ 1026.628320][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1026.634205][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1026.638894][ C0] ipv6_rcv+0x3bb/0x460 [ 1026.643077][ C0] ? local_bh_enable+0x40/0x40 [ 1026.647843][ C0] __netif_receive_skb+0x265/0x670 [ 1026.652962][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1026.658498][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1026.663371][ C0] process_backlog+0x50d/0xba0 [ 1026.668134][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1026.673942][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1026.679225][ C0] napi_poll+0x43b/0xfd0 [ 1026.683476][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.688677][ C0] net_rx_action+0x35c/0xd40 [ 1026.693276][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1026.698036][ C0] __do_softirq+0x2ea/0x7f5 [ 1026.702545][ C0] asm_call_on_stack+0xf/0x20 [ 1026.707212][ C0] [ 1026.710164][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1026.715190][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1026.720397][ C0] local_bh_enable+0x36/0x40 [ 1026.724984][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 1026.730206][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.735414][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1026.740533][ C0] ip6_finish_output+0x14b/0x4b0 [ 1026.745473][ C0] ip6_output+0x68d/0x7f0 [ 1026.749814][ C0] ? ip6_output+0x7f0/0x7f0 [ 1026.754308][ C0] ? ac6_seq_show+0x200/0x200 [ 1026.758975][ C0] ip6_xmit+0x2475/0x2b40 [ 1026.763313][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 1026.767815][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 1026.772507][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1026.778139][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1026.783331][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1026.788906][ C0] tcp_connect+0x153f/0x3bb0 [ 1026.793490][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1026.798795][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1026.804613][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1026.810513][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 1026.815388][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 1026.820580][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 1026.826062][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.831262][ C0] inet_stream_connect+0x101/0x180 [ 1026.836374][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 1026.842004][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1026.847647][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.858800][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1026.864175][ C0] rds_connect_worker+0x36b/0x550 [ 1026.869197][ C0] ? rds_addr_cmp+0x290/0x290 [ 1026.873872][ C0] process_one_work+0x1688/0x2140 [ 1026.878919][ C0] worker_thread+0x10bc/0x2730 [ 1026.883680][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1026.888885][ C0] kthread+0x551/0x590 [ 1026.892948][ C0] ? process_one_work+0x2140/0x2140 [ 1026.898172][ C0] ? kthread_blkcg+0x110/0x110 [ 1026.902932][ C0] ret_from_fork+0x1f/0x30 [ 1026.907360][ C0] Uninit was stored to memory at: [ 1026.912389][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1026.918100][ C0] __msan_chain_origin+0x50/0x90 [ 1026.923032][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1026.928071][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1026.933193][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1026.938557][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1026.943311][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1026.947827][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1026.953536][ C0] ip6_input+0x2dd/0x370 [ 1026.957768][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1026.962454][ C0] ipv6_rcv+0x3bb/0x460 [ 1026.966602][ C0] __netif_receive_skb+0x265/0x670 [ 1026.971702][ C0] process_backlog+0x50d/0xba0 [ 1026.976452][ C0] napi_poll+0x43b/0xfd0 [ 1026.980684][ C0] net_rx_action+0x35c/0xd40 [ 1026.985274][ C0] __do_softirq+0x2ea/0x7f5 [ 1026.989881][ C0] [ 1026.992195][ C0] Uninit was stored to memory at: [ 1026.997218][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.002942][ C0] __msan_chain_origin+0x50/0x90 [ 1027.007884][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1027.013214][ C0] tcp_conn_request+0x3046/0x4c30 [ 1027.018243][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.023343][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.028703][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.033457][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.037967][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.043678][ C0] ip6_input+0x2dd/0x370 [ 1027.047912][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.052578][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.056725][ C0] __netif_receive_skb+0x265/0x670 [ 1027.061829][ C0] process_backlog+0x50d/0xba0 [ 1027.066582][ C0] napi_poll+0x43b/0xfd0 [ 1027.070818][ C0] net_rx_action+0x35c/0xd40 [ 1027.075399][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.079881][ C0] [ 1027.082193][ C0] Uninit was stored to memory at: [ 1027.087209][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.092915][ C0] __msan_chain_origin+0x50/0x90 [ 1027.097840][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1027.102852][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.107952][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.113312][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.118061][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.122551][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.128260][ C0] ip6_input+0x2dd/0x370 [ 1027.132521][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.137189][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.141335][ C0] __netif_receive_skb+0x265/0x670 [ 1027.146444][ C0] process_backlog+0x50d/0xba0 [ 1027.151202][ C0] napi_poll+0x43b/0xfd0 [ 1027.155452][ C0] net_rx_action+0x35c/0xd40 [ 1027.160032][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.164515][ C0] [ 1027.166841][ C0] Uninit was stored to memory at: [ 1027.171859][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.177566][ C0] __msan_chain_origin+0x50/0x90 [ 1027.182492][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1027.187764][ C0] tcp_conn_request+0x3046/0x4c30 [ 1027.192796][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.197904][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.203268][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.208024][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.212532][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.218253][ C0] ip6_input+0x2dd/0x370 [ 1027.222492][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.227158][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.231309][ C0] __netif_receive_skb+0x265/0x670 [ 1027.236416][ C0] process_backlog+0x50d/0xba0 [ 1027.241171][ C0] napi_poll+0x43b/0xfd0 [ 1027.245413][ C0] net_rx_action+0x35c/0xd40 [ 1027.249996][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.254477][ C0] [ 1027.256792][ C0] Uninit was stored to memory at: [ 1027.261811][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.267521][ C0] __msan_chain_origin+0x50/0x90 [ 1027.272450][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1027.277463][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.282561][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.287937][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.292686][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.297179][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.302891][ C0] ip6_input+0x2dd/0x370 [ 1027.307122][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.311791][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.315945][ C0] __netif_receive_skb+0x265/0x670 [ 1027.321051][ C0] process_backlog+0x50d/0xba0 [ 1027.325809][ C0] napi_poll+0x43b/0xfd0 [ 1027.330065][ C0] net_rx_action+0x35c/0xd40 [ 1027.334643][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.339125][ C0] [ 1027.341438][ C0] Uninit was stored to memory at: [ 1027.346461][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.352258][ C0] __msan_chain_origin+0x50/0x90 [ 1027.357197][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1027.362470][ C0] tcp_conn_request+0x3046/0x4c30 [ 1027.367487][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.372585][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.377943][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.382788][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.387279][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.392984][ C0] ip6_input+0x2dd/0x370 [ 1027.397231][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.401892][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.406041][ C0] __netif_receive_skb+0x265/0x670 [ 1027.411142][ C0] process_backlog+0x50d/0xba0 [ 1027.415895][ C0] napi_poll+0x43b/0xfd0 [ 1027.420137][ C0] net_rx_action+0x35c/0xd40 [ 1027.424716][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.429196][ C0] [ 1027.431506][ C0] Uninit was stored to memory at: [ 1027.436521][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1027.442228][ C0] __msan_chain_origin+0x50/0x90 [ 1027.447159][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1027.452174][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.457273][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.462631][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.467383][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.471895][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.477605][ C0] ip6_input+0x2dd/0x370 [ 1027.481860][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.486526][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.490684][ C0] __netif_receive_skb+0x265/0x670 [ 1027.495787][ C0] process_backlog+0x50d/0xba0 [ 1027.500540][ C0] napi_poll+0x43b/0xfd0 [ 1027.504772][ C0] net_rx_action+0x35c/0xd40 [ 1027.509346][ C0] __do_softirq+0x2ea/0x7f5 [ 1027.513827][ C0] [ 1027.516138][ C0] Uninit was created at: [ 1027.520369][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1027.525992][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1027.530753][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1027.536198][ C0] alloc_pages_current+0x685/0xb50 [ 1027.541297][ C0] alloc_slab_page+0x11c/0x1240 [ 1027.546144][ C0] new_slab+0x2bf/0x10c0 [ 1027.550396][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1027.555061][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1027.559910][ C0] inet_reqsk_alloc+0xaf/0x910 [ 1027.564672][ C0] tcp_conn_request+0x8dc/0x4c30 [ 1027.569613][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1027.574715][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1027.580078][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1027.584851][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1027.589394][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1027.595119][ C0] ip6_input+0x2dd/0x370 [ 1027.599355][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1027.604022][ C0] ipv6_rcv+0x3bb/0x460 [ 1027.608171][ C0] __netif_receive_skb+0x265/0x670 [ 1027.613268][ C0] process_backlog+0x50d/0xba0 [ 1027.618022][ C0] napi_poll+0x43b/0xfd0 [ 1027.622258][ C0] net_rx_action+0x35c/0xd40 [ 1027.626839][ C0] __do_softirq+0x2ea/0x7f5 [ 1041.763582][ C0] not chained 290000 origins [ 1041.768303][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1041.776372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.786515][ C0] Call Trace: [ 1041.789818][ C0] dump_stack+0x21c/0x280 [ 1041.794154][ C0] ? tcp_data_queue+0x1e5c/0xb570 [ 1041.799205][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1041.804982][ C0] ? net_rx_action+0x35c/0xd40 [ 1041.809748][ C0] ? __do_softirq+0x2ea/0x7f5 [ 1041.814450][ C0] ? run_ksoftirqd+0x25/0x40 [ 1041.819042][ C0] ? smpboot_thread_fn+0x5f5/0xa90 [ 1041.824157][ C0] ? kthread+0x551/0x590 [ 1041.828413][ C0] ? ret_from_fork+0x1f/0x30 [ 1041.833005][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.838208][ C0] ? __should_failslab+0x1f6/0x290 [ 1041.843351][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.848638][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1041.854563][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1041.860626][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.865826][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1041.871732][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1041.877890][ C0] ? __msan_get_context_state+0x9/0x20 [ 1041.883356][ C0] ? __module_get+0x19/0x210 [ 1041.887950][ C0] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1041.894195][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.899483][ C0] __msan_chain_origin+0x50/0x90 [ 1041.904434][ C0] tcp_time_wait+0x1064/0x1150 [ 1041.909212][ C0] tcp_fin+0x23a/0x9f0 [ 1041.913294][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1041.918160][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1041.924001][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1041.930073][ C0] ? tcp_urg+0xb22/0x10c0 [ 1041.934414][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1041.939865][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.945073][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1041.950890][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1041.956094][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1041.960869][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1041.965398][ C0] ? tcp_v6_rcv+0x1541/0x5a80 [ 1041.970083][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1041.975289][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1041.981035][ C0] ip6_input+0x2dd/0x370 [ 1041.985298][ C0] ? ip6_input+0x370/0x370 [ 1041.989719][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1041.995614][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.000394][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.004566][ C0] ? local_bh_enable+0x40/0x40 [ 1042.009548][ C0] __netif_receive_skb+0x265/0x670 [ 1042.014659][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1042.020288][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1042.025152][ C0] process_backlog+0x50d/0xba0 [ 1042.029923][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1042.035744][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1042.041032][ C0] napi_poll+0x43b/0xfd0 [ 1042.045284][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1042.050490][ C0] net_rx_action+0x35c/0xd40 [ 1042.055104][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1042.059882][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.064416][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 1042.069624][ C0] run_ksoftirqd+0x25/0x40 [ 1042.074049][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 1042.079006][ C0] kthread+0x551/0x590 [ 1042.083083][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 1042.088111][ C0] ? kthread_blkcg+0x110/0x110 [ 1042.092878][ C0] ret_from_fork+0x1f/0x30 [ 1042.097301][ C0] Uninit was stored to memory at: [ 1042.102329][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.108048][ C0] __msan_chain_origin+0x50/0x90 [ 1042.112986][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1042.117752][ C0] tcp_time_wait+0xd9/0x1150 [ 1042.122341][ C0] tcp_fin+0x23a/0x9f0 [ 1042.126430][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.131276][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.136733][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.141494][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.146012][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.151731][ C0] ip6_input+0x2dd/0x370 [ 1042.156071][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.160750][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.164924][ C0] __netif_receive_skb+0x265/0x670 [ 1042.170042][ C0] process_backlog+0x50d/0xba0 [ 1042.174806][ C0] napi_poll+0x43b/0xfd0 [ 1042.179048][ C0] net_rx_action+0x35c/0xd40 [ 1042.183639][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.188128][ C0] [ 1042.190446][ C0] Uninit was stored to memory at: [ 1042.195473][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.201209][ C0] __msan_chain_origin+0x50/0x90 [ 1042.206150][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 1042.211347][ C0] tcp_time_wait+0xf7b/0x1150 [ 1042.216028][ C0] tcp_fin+0x23a/0x9f0 [ 1042.220091][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.224990][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.230445][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.235210][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.239709][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.245419][ C0] ip6_input+0x2dd/0x370 [ 1042.249659][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.254337][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.258506][ C0] __netif_receive_skb+0x265/0x670 [ 1042.263708][ C0] process_backlog+0x50d/0xba0 [ 1042.268477][ C0] napi_poll+0x43b/0xfd0 [ 1042.272713][ C0] net_rx_action+0x35c/0xd40 [ 1042.277300][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.281796][ C0] [ 1042.284114][ C0] Uninit was stored to memory at: [ 1042.289137][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.294863][ C0] __msan_chain_origin+0x50/0x90 [ 1042.299803][ C0] tcp_time_wait+0x1064/0x1150 [ 1042.304566][ C0] tcp_fin+0x23a/0x9f0 [ 1042.308645][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.313496][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.318969][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.323755][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.328263][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.333986][ C0] ip6_input+0x2dd/0x370 [ 1042.338242][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.342922][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.347095][ C0] __netif_receive_skb+0x265/0x670 [ 1042.352212][ C0] process_backlog+0x50d/0xba0 [ 1042.357073][ C0] napi_poll+0x43b/0xfd0 [ 1042.361311][ C0] net_rx_action+0x35c/0xd40 [ 1042.365903][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.370402][ C0] [ 1042.372730][ C0] Uninit was stored to memory at: [ 1042.377756][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.383480][ C0] __msan_chain_origin+0x50/0x90 [ 1042.388420][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1042.393991][ C0] tcp_time_wait+0xd9/0x1150 [ 1042.398580][ C0] tcp_fin+0x23a/0x9f0 [ 1042.402738][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.407588][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.413045][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.417803][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.422303][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.428016][ C0] ip6_input+0x2dd/0x370 [ 1042.432255][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.436933][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.441090][ C0] __netif_receive_skb+0x265/0x670 [ 1042.446212][ C0] process_backlog+0x50d/0xba0 [ 1042.450987][ C0] napi_poll+0x43b/0xfd0 [ 1042.455234][ C0] net_rx_action+0x35c/0xd40 [ 1042.459834][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.464324][ C0] [ 1042.466648][ C0] Uninit was stored to memory at: [ 1042.471668][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.477387][ C0] __msan_chain_origin+0x50/0x90 [ 1042.482343][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 1042.487542][ C0] tcp_time_wait+0xf7b/0x1150 [ 1042.492232][ C0] tcp_fin+0x23a/0x9f0 [ 1042.496306][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.501161][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.506625][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.511390][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.515897][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.521618][ C0] ip6_input+0x2dd/0x370 [ 1042.525893][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.530580][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.534739][ C0] __netif_receive_skb+0x265/0x670 [ 1042.539854][ C0] process_backlog+0x50d/0xba0 [ 1042.544625][ C0] napi_poll+0x43b/0xfd0 [ 1042.548872][ C0] net_rx_action+0x35c/0xd40 [ 1042.553461][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.557951][ C0] [ 1042.560278][ C0] Uninit was stored to memory at: [ 1042.565323][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.571052][ C0] __msan_chain_origin+0x50/0x90 [ 1042.576005][ C0] tcp_time_wait+0x1064/0x1150 [ 1042.580766][ C0] tcp_fin+0x23a/0x9f0 [ 1042.584837][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.589703][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.595167][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.599933][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.604441][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.610163][ C0] ip6_input+0x2dd/0x370 [ 1042.614408][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.619080][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.623236][ C0] __netif_receive_skb+0x265/0x670 [ 1042.628349][ C0] process_backlog+0x50d/0xba0 [ 1042.633153][ C0] napi_poll+0x43b/0xfd0 [ 1042.637403][ C0] net_rx_action+0x35c/0xd40 [ 1042.641996][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.646578][ C0] [ 1042.648906][ C0] Uninit was stored to memory at: [ 1042.653939][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1042.659672][ C0] __msan_chain_origin+0x50/0x90 [ 1042.664612][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1042.669390][ C0] tcp_time_wait+0xd9/0x1150 [ 1042.673994][ C0] tcp_fin+0x23a/0x9f0 [ 1042.678070][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.683016][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.688642][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1042.693415][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.697929][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.703657][ C0] ip6_input+0x2dd/0x370 [ 1042.707907][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.712579][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.716751][ C0] __netif_receive_skb+0x265/0x670 [ 1042.721864][ C0] process_backlog+0x50d/0xba0 [ 1042.726633][ C0] napi_poll+0x43b/0xfd0 [ 1042.730879][ C0] net_rx_action+0x35c/0xd40 [ 1042.735485][ C0] __do_softirq+0x2ea/0x7f5 [ 1042.739980][ C0] [ 1042.742313][ C0] Uninit was created at: [ 1042.746564][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1042.752197][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1042.756969][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1042.762517][ C0] alloc_pages_current+0x685/0xb50 [ 1042.767651][ C0] alloc_slab_page+0x11c/0x1240 [ 1042.772504][ C0] new_slab+0x2bf/0x10c0 [ 1042.776750][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1042.781427][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1042.786278][ C0] inet_twsk_alloc+0x154/0xbd0 [ 1042.791042][ C0] tcp_time_wait+0xd9/0x1150 [ 1042.795629][ C0] tcp_fin+0x23a/0x9f0 [ 1042.799701][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1042.804555][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1042.810033][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 13:28:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:28:21 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:21 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) 13:28:21 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3800, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}, "020088beffff0064"}}}}}, 0x0) [ 1042.814811][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1042.819317][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1042.825037][ C0] ip6_input+0x2dd/0x370 [ 1042.829300][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1042.833978][ C0] ipv6_rcv+0x3bb/0x460 [ 1042.838138][ C0] __netif_receive_skb+0x265/0x670 [ 1042.843250][ C0] process_backlog+0x50d/0xba0 [ 1042.848026][ C0] napi_poll+0x43b/0xfd0 [ 1042.852266][ C0] net_rx_action+0x35c/0xd40 [ 1042.856851][ C0] __do_softirq+0x2ea/0x7f5 13:28:21 executing program 4: unshare(0x40000000) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) 13:28:21 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) [ 1043.069670][T28059] IPVS: ftp: loaded support on port[0] = 21 13:28:22 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) [ 1043.781947][T28059] IPVS: ftp: loaded support on port[0] = 21 13:28:22 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) 13:28:22 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1043.889836][ C0] sd 0:0:1:0: [sg0] tag#6223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1043.900792][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB: Test Unit Ready [ 1043.907707][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.917672][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.927637][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.937600][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.947681][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.957678][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.967591][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.977525][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.987450][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.997490][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.007438][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.017411][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.027335][ C0] sd 0:0:1:0: [sg0] tag#6223 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1044.035362][ C0] sd 0:0:1:0: [sg0] tag#6224 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.046106][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB: Test Unit Ready [ 1044.052896][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.062990][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.072947][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.082861][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.092767][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.102758][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.112658][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.122501][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.132413][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.142362][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.152309][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.162262][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.172170][ C0] sd 0:0:1:0: [sg0] tag#6224 CDB[c0]: 00 00 00 00 00 00 00 00 13:28:23 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) 13:28:23 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) [ 1044.432520][ T12] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1044.491496][ T1576] tipc: TX() has been purged, node left! [ 1044.673012][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 1044.680836][ C1] sd 0:0:1:0: [sg0] tag#8040 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.691495][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB: Test Unit Ready [ 1044.698241][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.708087][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.717941][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.727812][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.737709][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.747547][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.757400][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.767210][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.777124][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.787062][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.796893][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.806743][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.816589][ C1] sd 0:0:1:0: [sg0] tag#8040 CDB[c0]: 00 00 00 00 00 00 00 00 13:28:23 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) [ 1044.953996][ T12] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1044.963329][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.971401][ T12] usb 1-1: Product: syz [ 1044.975860][ T12] usb 1-1: Manufacturer: syz [ 1044.980533][ T12] usb 1-1: SerialNumber: syz [ 1045.196448][ T12] usb 1-1: config 0 descriptor?? [ 1045.242727][ T12] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 1045.442777][ T12] usb 1-1: USB disconnect, device number 35 [ 1046.212825][ T12] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1046.453486][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 1046.895345][ T12] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1046.904672][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.913056][ T12] usb 1-1: Product: syz [ 1046.917292][ T12] usb 1-1: Manufacturer: syz [ 1046.994179][ T12] usb 1-1: config 0 descriptor?? [ 1047.013913][ T12] usb 1-1: can't set config #0, error -71 [ 1047.043285][ T12] usb 1-1: USB disconnect, device number 36 [ 1047.501686][ T1576] tipc: TX() has been purged, node left! [ 1054.452392][ C0] not chained 300000 origins [ 1054.457111][ C0] CPU: 0 PID: 1576 Comm: kworker/u4:13 Not tainted 5.8.0-rc5-syzkaller #0 [ 1054.465600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.475679][ C0] Workqueue: krdsd rds_connect_worker [ 1054.481041][ C0] Call Trace: [ 1054.484314][ C0] [ 1054.487167][ C0] dump_stack+0x21c/0x280 [ 1054.491498][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1054.497211][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.503033][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.508318][ C0] ? __should_failslab+0x1f6/0x290 [ 1054.513428][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.518626][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.524428][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 1054.530574][ C0] ? tcp_parse_options+0x206d/0x2100 [ 1054.535874][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.541064][ C0] __msan_chain_origin+0x50/0x90 [ 1054.546082][ C0] tcp_conn_request+0x19a0/0x4c30 [ 1054.551134][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.556939][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1054.563003][ C0] ? ktime_get+0x384/0x470 [ 1054.567417][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.572628][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1054.577740][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1054.583019][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1054.588386][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.593579][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.599381][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.604602][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.609814][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1054.614576][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1054.619426][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1054.623964][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1054.629161][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1054.634903][ C0] ip6_input+0x2dd/0x370 [ 1054.639153][ C0] ? ip6_input+0x370/0x370 [ 1054.643562][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1054.649448][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1054.654126][ C0] ipv6_rcv+0x3bb/0x460 [ 1054.658279][ C0] ? local_bh_enable+0x40/0x40 [ 1054.663052][ C0] __netif_receive_skb+0x265/0x670 [ 1054.668160][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1054.673697][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1054.678549][ C0] process_backlog+0x50d/0xba0 [ 1054.683314][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.689119][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1054.694399][ C0] napi_poll+0x43b/0xfd0 [ 1054.698643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.703844][ C0] net_rx_action+0x35c/0xd40 [ 1054.708441][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1054.713202][ C0] __do_softirq+0x2ea/0x7f5 [ 1054.717709][ C0] asm_call_on_stack+0xf/0x20 [ 1054.722374][ C0] [ 1054.725317][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1054.730344][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1054.735634][ C0] local_bh_enable+0x36/0x40 [ 1054.740311][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 1054.745542][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.750743][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1054.755862][ C0] ip6_finish_output+0x14b/0x4b0 [ 1054.760809][ C0] ip6_output+0x68d/0x7f0 [ 1054.765158][ C0] ? ip6_output+0x7f0/0x7f0 [ 1054.769658][ C0] ? ac6_seq_show+0x200/0x200 [ 1054.774350][ C0] ip6_xmit+0x2475/0x2b40 [ 1054.778703][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 1054.783216][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 1054.788010][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1054.793659][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1054.798860][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1054.804443][ C0] tcp_connect+0x153f/0x3bb0 [ 1054.809053][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1054.814369][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1054.820177][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1054.826080][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 1054.830954][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 1054.836148][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 1054.841619][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.846920][ C0] inet_stream_connect+0x101/0x180 [ 1054.852029][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 1054.857654][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1054.863286][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.868486][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1054.873956][ C0] rds_connect_worker+0x36b/0x550 [ 1054.878972][ C0] ? rds_addr_cmp+0x290/0x290 [ 1054.883643][ C0] process_one_work+0x1688/0x2140 [ 1054.888677][ C0] worker_thread+0x10bc/0x2730 [ 1054.893432][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1054.898637][ C0] kthread+0x551/0x590 [ 1054.902705][ C0] ? process_one_work+0x2140/0x2140 [ 1054.907904][ C0] ? kthread_blkcg+0x110/0x110 [ 1054.912674][ C0] ret_from_fork+0x1f/0x30 [ 1054.917092][ C0] Uninit was stored to memory at: [ 1054.922111][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1054.927834][ C0] __msan_chain_origin+0x50/0x90 [ 1054.932796][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1054.937822][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1054.942927][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1054.948297][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1054.953082][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1054.957588][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1054.963302][ C0] ip6_input+0x2dd/0x370 [ 1054.967539][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1054.972221][ C0] ipv6_rcv+0x3bb/0x460 [ 1054.976445][ C0] __netif_receive_skb+0x265/0x670 [ 1054.981566][ C0] process_backlog+0x50d/0xba0 [ 1054.986328][ C0] napi_poll+0x43b/0xfd0 [ 1054.990563][ C0] net_rx_action+0x35c/0xd40 [ 1054.995154][ C0] __do_softirq+0x2ea/0x7f5 [ 1054.999650][ C0] [ 1055.001969][ C0] Uninit was stored to memory at: [ 1055.007000][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.012722][ C0] __msan_chain_origin+0x50/0x90 [ 1055.017658][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1055.022937][ C0] tcp_conn_request+0x3046/0x4c30 [ 1055.027956][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.033060][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.038432][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.043190][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.047696][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.053411][ C0] ip6_input+0x2dd/0x370 [ 1055.057649][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.062316][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.066466][ C0] __netif_receive_skb+0x265/0x670 [ 1055.071562][ C0] process_backlog+0x50d/0xba0 [ 1055.076312][ C0] napi_poll+0x43b/0xfd0 [ 1055.080586][ C0] net_rx_action+0x35c/0xd40 [ 1055.085186][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.089666][ C0] [ 1055.091993][ C0] Uninit was stored to memory at: [ 1055.097010][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.102729][ C0] __msan_chain_origin+0x50/0x90 [ 1055.107656][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1055.112674][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.117773][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.123142][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.127929][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.132428][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.138164][ C0] ip6_input+0x2dd/0x370 [ 1055.142399][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.147082][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.151233][ C0] __netif_receive_skb+0x265/0x670 [ 1055.156355][ C0] process_backlog+0x50d/0xba0 [ 1055.161117][ C0] napi_poll+0x43b/0xfd0 [ 1055.165354][ C0] net_rx_action+0x35c/0xd40 [ 1055.170030][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.174516][ C0] [ 1055.176832][ C0] Uninit was stored to memory at: [ 1055.181854][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.187563][ C0] __msan_chain_origin+0x50/0x90 [ 1055.192497][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1055.197776][ C0] tcp_conn_request+0x3046/0x4c30 [ 1055.202791][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.207890][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.213250][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.218000][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.222495][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.228234][ C0] ip6_input+0x2dd/0x370 [ 1055.232467][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.237133][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.241297][ C0] __netif_receive_skb+0x265/0x670 [ 1055.246401][ C0] process_backlog+0x50d/0xba0 [ 1055.251164][ C0] napi_poll+0x43b/0xfd0 [ 1055.255398][ C0] net_rx_action+0x35c/0xd40 [ 1055.259979][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.264461][ C0] [ 1055.266786][ C0] Uninit was stored to memory at: [ 1055.271813][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.277519][ C0] __msan_chain_origin+0x50/0x90 [ 1055.282457][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1055.287466][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.292565][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.297926][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.302771][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.307267][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.312976][ C0] ip6_input+0x2dd/0x370 [ 1055.317241][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.321911][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.326060][ C0] __netif_receive_skb+0x265/0x670 [ 1055.331187][ C0] process_backlog+0x50d/0xba0 [ 1055.335961][ C0] napi_poll+0x43b/0xfd0 [ 1055.340195][ C0] net_rx_action+0x35c/0xd40 [ 1055.344782][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.349265][ C0] [ 1055.351597][ C0] Uninit was stored to memory at: [ 1055.356622][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.362350][ C0] __msan_chain_origin+0x50/0x90 [ 1055.367287][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1055.372567][ C0] tcp_conn_request+0x3046/0x4c30 [ 1055.377584][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.382688][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.388053][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.392807][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.397297][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.402998][ C0] ip6_input+0x2dd/0x370 [ 1055.407224][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.411887][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.416036][ C0] __netif_receive_skb+0x265/0x670 [ 1055.421135][ C0] process_backlog+0x50d/0xba0 [ 1055.425888][ C0] napi_poll+0x43b/0xfd0 [ 1055.430116][ C0] net_rx_action+0x35c/0xd40 [ 1055.434688][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.439167][ C0] [ 1055.441477][ C0] Uninit was stored to memory at: [ 1055.446488][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1055.452189][ C0] __msan_chain_origin+0x50/0x90 [ 1055.457139][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1055.462159][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.467252][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.472610][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.477390][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.481892][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1055.487604][ C0] ip6_input+0x2dd/0x370 [ 1055.491827][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.496489][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.500634][ C0] __netif_receive_skb+0x265/0x670 [ 1055.505732][ C0] process_backlog+0x50d/0xba0 [ 1055.510479][ C0] napi_poll+0x43b/0xfd0 [ 1055.514707][ C0] net_rx_action+0x35c/0xd40 [ 1055.519280][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.523766][ C0] [ 1055.526076][ C0] Uninit was created at: [ 1055.530311][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1055.535933][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1055.540686][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1055.546132][ C0] alloc_pages_current+0x685/0xb50 [ 1055.551224][ C0] alloc_slab_page+0x11c/0x1240 [ 1055.556068][ C0] new_slab+0x2bf/0x10c0 [ 1055.560304][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1055.564971][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1055.569802][ C0] inet_reqsk_alloc+0xaf/0x910 [ 1055.574545][ C0] tcp_conn_request+0x8dc/0x4c30 [ 1055.579463][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1055.584560][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1055.589917][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1055.594794][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1055.599287][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 13:28:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:28:34 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) 13:28:34 executing program 4: unshare(0x40000000) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) 13:28:34 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:34 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) [ 1055.605003][ C0] ip6_input+0x2dd/0x370 [ 1055.609229][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1055.613892][ C0] ipv6_rcv+0x3bb/0x460 [ 1055.618033][ C0] __netif_receive_skb+0x265/0x670 [ 1055.623128][ C0] process_backlog+0x50d/0xba0 [ 1055.627885][ C0] napi_poll+0x43b/0xfd0 [ 1055.632199][ C0] net_rx_action+0x35c/0xd40 [ 1055.636771][ C0] __do_softirq+0x2ea/0x7f5 [ 1055.851464][ C0] sd 0:0:1:0: [sg0] tag#6225 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1055.852926][T28159] IPVS: ftp: loaded support on port[0] = 21 [ 1055.862131][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB: Test Unit Ready [ 1055.874562][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.884391][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.894218][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.904083][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.913891][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.923695][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.933560][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.943411][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.951936][ C1] sd 0:0:1:0: [sg0] tag#8041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1055.953320][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.963826][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB: Test Unit Ready [ 1055.973533][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.980035][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.989824][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.999531][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.009188][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.018874][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.028536][ C0] sd 0:0:1:0: [sg0] tag#6225 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1056.038244][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.055495][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.065351][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.075171][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.085009][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.094830][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.104650][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.114448][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.124248][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.134037][ C1] sd 0:0:1:0: [sg0] tag#8041 CDB[c0]: 00 00 00 00 00 00 00 00 13:28:35 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1056.355542][ T1576] tipc: TX() has been purged, node left! 13:28:35 executing program 4: unshare(0x40000000) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) 13:28:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) 13:28:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1056.631519][T16856] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1056.767562][T28201] IPVS: ftp: loaded support on port[0] = 21 [ 1056.902724][T16856] usb 1-1: Using ep0 maxpacket: 16 [ 1056.908430][ T17] usb 3-1: new high-speed USB device number 35 using dummy_hcd 13:28:36 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1057.153144][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 1057.213680][T16856] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1057.222939][T16856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.231274][T16856] usb 1-1: Product: syz [ 1057.235510][T16856] usb 1-1: Manufacturer: syz [ 1057.240178][T16856] usb 1-1: SerialNumber: syz [ 1057.390754][ C0] sd 0:0:1:0: [sg0] tag#6226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1057.401564][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB: Test Unit Ready [ 1057.408194][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.418080][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.427920][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.437738][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.447579][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.457463][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.467347][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.477229][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.480189][T16856] usb 1-1: config 0 descriptor?? [ 1057.487094][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.487208][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.511711][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.521627][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.531506][ C0] sd 0:0:1:0: [sg0] tag#6226 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1057.539294][ C0] sd 0:0:1:0: [sg0] tag#6227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1057.549943][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB: Test Unit Ready [ 1057.556619][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.558279][ T17] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1057.566401][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.566498][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.575680][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.585334][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.595014][ T17] usb 3-1: Product: syz [ 1057.603125][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.612779][ T17] usb 3-1: Manufacturer: syz [ 1057.616983][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:28:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1057.626653][ T17] usb 3-1: SerialNumber: syz [ 1057.631315][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.655309][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.665237][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.675095][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.684936][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.694832][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.704674][ C0] sd 0:0:1:0: [sg0] tag#6227 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1057.712587][ C0] sd 0:0:1:0: [sg0] tag#6228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1057.723200][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB: Test Unit Ready [ 1057.729834][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.739663][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.749514][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.759363][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.769192][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.779002][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.788837][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.798104][T16856] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 1057.798641][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.817489][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.827340][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.837178][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.847028][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1057.856859][ C0] sd 0:0:1:0: [sg0] tag#6228 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1058.006794][T16856] usb 1-1: USB disconnect, device number 37 [ 1058.050754][ T17] usb 3-1: config 0 descriptor?? [ 1058.131658][ T17] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 1058.242126][ C0] sd 0:0:1:0: [sg0] tag#6229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1058.252877][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB: Test Unit Ready [ 1058.259566][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.269485][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.279386][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.289282][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.299155][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.309033][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.318896][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.328768][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.338659][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.348526][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.358440][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.368366][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.377591][T16856] usb 3-1: USB disconnect, device number 35 [ 1058.378215][ C0] sd 0:0:1:0: [sg0] tag#6229 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1060.822693][ T1576] tipc: TX() has been purged, node left! [ 1066.397261][ C1] not chained 310000 origins [ 1066.401954][ C1] CPU: 1 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1066.410437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.420524][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 1066.426129][ C1] Call Trace: [ 1066.429384][ C1] [ 1066.432214][ C1] dump_stack+0x21c/0x280 [ 1066.436521][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1066.442213][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.447384][ C1] ? __should_failslab+0x1f6/0x290 [ 1066.452467][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.457638][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1066.463432][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1066.469492][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.474687][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1066.480492][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1066.486641][ C1] ? __msan_get_context_state+0x9/0x20 [ 1066.492107][ C1] ? __module_get+0x19/0x210 [ 1066.496695][ C1] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1066.502942][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.508134][ C1] __msan_chain_origin+0x50/0x90 [ 1066.513089][ C1] tcp_time_wait+0x10cb/0x1150 [ 1066.517858][ C1] tcp_fin+0x23a/0x9f0 [ 1066.521949][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1066.526810][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1066.532621][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1066.538683][ C1] ? tcp_urg+0xb22/0x10c0 [ 1066.543025][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1066.548480][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.553677][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1066.559494][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.564707][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1066.569481][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1066.574006][ C1] ? tcp_v6_rcv+0x1541/0x5a80 [ 1066.578689][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1066.583891][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1066.589632][ C1] ip6_input+0x2dd/0x370 [ 1066.593892][ C1] ? ip6_input+0x370/0x370 [ 1066.598309][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1066.604197][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1066.608901][ C1] ipv6_rcv+0x3bb/0x460 [ 1066.613081][ C1] ? local_bh_enable+0x40/0x40 [ 1066.617846][ C1] __netif_receive_skb+0x265/0x670 [ 1066.622962][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1066.628502][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1066.633358][ C1] process_backlog+0x50d/0xba0 [ 1066.638121][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1066.643932][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1066.649212][ C1] napi_poll+0x43b/0xfd0 [ 1066.653451][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.658650][ C1] net_rx_action+0x35c/0xd40 [ 1066.663255][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1066.668025][ C1] __do_softirq+0x2ea/0x7f5 [ 1066.672683][ C1] asm_call_on_stack+0xf/0x20 [ 1066.677339][ C1] [ 1066.680276][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1066.685387][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1066.690585][ C1] local_bh_enable+0x36/0x40 [ 1066.695173][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1066.700416][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.705628][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1066.710769][ C1] ip6_finish_output+0x14b/0x4b0 [ 1066.715710][ C1] ip6_output+0x68d/0x7f0 [ 1066.720040][ C1] ? ip6_output+0x7f0/0x7f0 [ 1066.724534][ C1] ? ac6_seq_show+0x200/0x200 [ 1066.729201][ C1] ip6_xmit+0x2475/0x2b40 [ 1066.733632][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1066.738219][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1066.742910][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1066.748538][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1066.753764][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 1066.758637][ C1] ? kmsan_get_metadata+0xb0/0x180 [ 1066.763773][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.768976][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.774174][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.779386][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 1066.785215][ C1] tcp_send_fin+0x192a/0x1bc0 [ 1066.789901][ C1] ? tcp_set_state+0x9ec/0xb40 [ 1066.794664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.799869][ C1] tcp_shutdown+0x1f7/0x270 [ 1066.804479][ C1] ? tcp_set_state+0xb40/0xb40 [ 1066.809332][ C1] inet_shutdown+0x44f/0x6d0 [ 1066.813928][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 1066.818604][ C1] kernel_sock_shutdown+0x98/0xc0 [ 1066.823644][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 1066.828855][ C1] rds_tcp_accept_worker+0x60/0x180 [ 1066.834055][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 1066.839080][ C1] process_one_work+0x1688/0x2140 [ 1066.844122][ C1] worker_thread+0x10bc/0x2730 [ 1066.848886][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1066.854092][ C1] kthread+0x551/0x590 [ 1066.858158][ C1] ? process_one_work+0x2140/0x2140 [ 1066.863352][ C1] ? kthread_blkcg+0x110/0x110 [ 1066.868108][ C1] ret_from_fork+0x1f/0x30 [ 1066.872517][ C1] Uninit was stored to memory at: [ 1066.877539][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1066.883262][ C1] __msan_chain_origin+0x50/0x90 [ 1066.888186][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 1066.892951][ C1] tcp_time_wait+0xd9/0x1150 [ 1066.897554][ C1] tcp_fin+0x23a/0x9f0 [ 1066.901623][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1066.906466][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1066.911917][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1066.916675][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1066.921175][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1066.926993][ C1] ip6_input+0x2dd/0x370 [ 1066.931248][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1066.935952][ C1] ipv6_rcv+0x3bb/0x460 [ 1066.940108][ C1] __netif_receive_skb+0x265/0x670 [ 1066.945228][ C1] process_backlog+0x50d/0xba0 [ 1066.950005][ C1] napi_poll+0x43b/0xfd0 [ 1066.954257][ C1] net_rx_action+0x35c/0xd40 [ 1066.958846][ C1] __do_softirq+0x2ea/0x7f5 [ 1066.963346][ C1] [ 1066.965667][ C1] Uninit was stored to memory at: [ 1066.970693][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1066.976422][ C1] __msan_chain_origin+0x50/0x90 [ 1066.981375][ C1] tcp_time_wait+0x10cb/0x1150 [ 1066.986152][ C1] tcp_fin+0x23a/0x9f0 [ 1066.990227][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1066.995074][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.000540][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.005314][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.009819][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.015546][ C1] ip6_input+0x2dd/0x370 [ 1067.019785][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.024458][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.028625][ C1] __netif_receive_skb+0x265/0x670 [ 1067.033730][ C1] process_backlog+0x50d/0xba0 [ 1067.038481][ C1] napi_poll+0x43b/0xfd0 [ 1067.042719][ C1] net_rx_action+0x35c/0xd40 [ 1067.047314][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.051796][ C1] [ 1067.054108][ C1] Uninit was stored to memory at: [ 1067.059121][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1067.064837][ C1] __msan_chain_origin+0x50/0x90 [ 1067.069772][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 1067.074530][ C1] tcp_time_wait+0xd9/0x1150 [ 1067.079108][ C1] tcp_fin+0x23a/0x9f0 [ 1067.083167][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.088009][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.093455][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.098217][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.102726][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.108438][ C1] ip6_input+0x2dd/0x370 [ 1067.112671][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.117339][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.121487][ C1] __netif_receive_skb+0x265/0x670 [ 1067.126589][ C1] process_backlog+0x50d/0xba0 [ 1067.131359][ C1] napi_poll+0x43b/0xfd0 [ 1067.135597][ C1] net_rx_action+0x35c/0xd40 [ 1067.140194][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.144699][ C1] [ 1067.147028][ C1] Uninit was stored to memory at: [ 1067.152051][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1067.157765][ C1] __msan_chain_origin+0x50/0x90 [ 1067.162698][ C1] tcp_time_wait+0x10cb/0x1150 [ 1067.167457][ C1] tcp_fin+0x23a/0x9f0 [ 1067.171525][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.176377][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.181853][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.186613][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.191107][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.196817][ C1] ip6_input+0x2dd/0x370 [ 1067.201055][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.205728][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.209879][ C1] __netif_receive_skb+0x265/0x670 [ 1067.214997][ C1] process_backlog+0x50d/0xba0 [ 1067.219762][ C1] napi_poll+0x43b/0xfd0 [ 1067.223999][ C1] net_rx_action+0x35c/0xd40 [ 1067.228580][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.233062][ C1] [ 1067.235377][ C1] Uninit was stored to memory at: [ 1067.240403][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1067.246116][ C1] __msan_chain_origin+0x50/0x90 [ 1067.251048][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 1067.255805][ C1] tcp_time_wait+0xd9/0x1150 [ 1067.260383][ C1] tcp_fin+0x23a/0x9f0 [ 1067.264441][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.269285][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.274736][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.279492][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.283986][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.289692][ C1] ip6_input+0x2dd/0x370 [ 1067.293926][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.298599][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.302751][ C1] __netif_receive_skb+0x265/0x670 [ 1067.307855][ C1] process_backlog+0x50d/0xba0 [ 1067.312645][ C1] napi_poll+0x43b/0xfd0 [ 1067.316879][ C1] net_rx_action+0x35c/0xd40 [ 1067.321462][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.325949][ C1] [ 1067.328268][ C1] Uninit was stored to memory at: [ 1067.333287][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1067.338999][ C1] __msan_chain_origin+0x50/0x90 [ 1067.343936][ C1] tcp_time_wait+0x10cb/0x1150 [ 1067.348693][ C1] tcp_fin+0x23a/0x9f0 [ 1067.352753][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.357596][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.363045][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.367799][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.372302][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.378010][ C1] ip6_input+0x2dd/0x370 [ 1067.382251][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.386925][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.391072][ C1] __netif_receive_skb+0x265/0x670 [ 1067.396179][ C1] process_backlog+0x50d/0xba0 [ 1067.400936][ C1] napi_poll+0x43b/0xfd0 [ 1067.405171][ C1] net_rx_action+0x35c/0xd40 [ 1067.409755][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.414245][ C1] [ 1067.416569][ C1] Uninit was stored to memory at: [ 1067.421583][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1067.427289][ C1] __msan_chain_origin+0x50/0x90 [ 1067.432217][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 1067.436969][ C1] tcp_time_wait+0xd9/0x1150 [ 1067.441552][ C1] tcp_fin+0x23a/0x9f0 [ 1067.445619][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.450465][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.455922][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.460683][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.465198][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.470909][ C1] ip6_input+0x2dd/0x370 [ 1067.475172][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.479844][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.483992][ C1] __netif_receive_skb+0x265/0x670 [ 1067.489091][ C1] process_backlog+0x50d/0xba0 [ 1067.493887][ C1] napi_poll+0x43b/0xfd0 [ 1067.498126][ C1] net_rx_action+0x35c/0xd40 [ 1067.502716][ C1] __do_softirq+0x2ea/0x7f5 [ 1067.507198][ C1] [ 1067.509513][ C1] Uninit was created at: [ 1067.513770][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1067.519396][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1067.524150][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1067.529601][ C1] alloc_pages_current+0x685/0xb50 [ 1067.534703][ C1] alloc_slab_page+0x11c/0x1240 [ 1067.539546][ C1] new_slab+0x2bf/0x10c0 [ 1067.543782][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1067.548452][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1067.553298][ C1] inet_twsk_alloc+0x154/0xbd0 [ 1067.558063][ C1] tcp_time_wait+0xd9/0x1150 [ 1067.562645][ C1] tcp_fin+0x23a/0x9f0 [ 1067.566708][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1067.571560][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1067.577011][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1067.581771][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1067.586271][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1067.591983][ C1] ip6_input+0x2dd/0x370 [ 1067.596220][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1067.600899][ C1] ipv6_rcv+0x3bb/0x460 [ 1067.605050][ C1] __netif_receive_skb+0x265/0x670 [ 1067.610154][ C1] process_backlog+0x50d/0xba0 [ 1067.614909][ C1] napi_poll+0x43b/0xfd0 [ 1067.619189][ C1] net_rx_action+0x35c/0xd40 [ 1067.623774][ C1] __do_softirq+0x2ea/0x7f5 13:28:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:28:46 executing program 4: unshare(0x40000000) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) 13:28:46 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:46 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) 13:28:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) [ 1068.393532][ C0] sd 0:0:1:0: [sg0] tag#6230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1068.404274][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB: Test Unit Ready [ 1068.411068][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.420933][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.430771][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.440704][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.450601][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.460468][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.470312][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.480201][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.490051][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.499899][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.509761][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.519673][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.529428][ C0] sd 0:0:1:0: [sg0] tag#6230 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1068.616497][T28293] IPVS: ftp: loaded support on port[0] = 21 13:28:48 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1069.170600][ T1576] tipc: TX() has been purged, node left! 13:28:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 1069.401712][ C1] sd 0:0:1:0: [sg0] tag#8042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1069.412388][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB: Test Unit Ready [ 1069.419018][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.428916][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.438749][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.448579][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.458423][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.468255][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.478067][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.487921][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.497755][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.507565][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.517356][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.527189][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.537032][ C1] sd 0:0:1:0: [sg0] tag#8042 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1069.609126][ T12] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1069.617090][ T8692] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1069.706841][ C1] sd 0:0:1:0: [sg0] tag#8043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1069.717577][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB: Test Unit Ready [ 1069.724402][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.734284][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.744212][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.754141][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.764044][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.773923][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.783813][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.793711][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.803631][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.813581][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.823468][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.833390][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.843258][ C1] sd 0:0:1:0: [sg0] tag#8043 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1069.958680][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1070.011278][ T8692] usb 1-1: Using ep0 maxpacket: 16 13:28:49 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:28:49 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) [ 1070.367488][ T12] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1070.376797][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.385051][ T12] usb 3-1: Product: syz [ 1070.389444][ T12] usb 3-1: Manufacturer: syz [ 1070.394148][ T12] usb 3-1: SerialNumber: syz 13:28:49 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) [ 1070.428570][ T8692] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1070.437788][ T8692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.446029][ T8692] usb 1-1: Product: syz [ 1070.450456][ T8692] usb 1-1: Manufacturer: syz [ 1070.455130][ T8692] usb 1-1: SerialNumber: syz [ 1070.550841][ T12] usb 3-1: config 0 descriptor?? [ 1070.612500][ T12] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 1070.622462][ C1] sd 0:0:1:0: [sg0] tag#8044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1070.625413][ T8692] usb 1-1: config 0 descriptor?? [ 1070.633075][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB: Test Unit Ready [ 1070.633184][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.654487][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.664338][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.674307][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.684171][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.694032][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.703889][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.713747][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.714060][ T8692] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 1070.723543][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.742439][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.752322][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.762165][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.772012][ C1] sd 0:0:1:0: [sg0] tag#8044 CDB[c0]: 00 00 00 00 00 00 00 00 13:28:49 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) [ 1071.039428][ T5] usb 3-1: USB disconnect, device number 36 [ 1071.125851][ T8692] usb 1-1: USB disconnect, device number 38 [ 1078.264199][ C0] not chained 320000 origins [ 1078.268934][ C0] CPU: 0 PID: 1467 Comm: kworker/u4:11 Not tainted 5.8.0-rc5-syzkaller #0 [ 1078.277424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.287523][ C0] Workqueue: krdsd rds_connect_worker [ 1078.292883][ C0] Call Trace: [ 1078.296158][ C0] [ 1078.299009][ C0] dump_stack+0x21c/0x280 [ 1078.303340][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1078.309055][ C0] ? __tcp_send_ack+0x6e9/0x8c0 [ 1078.313928][ C0] ? tcp_send_ack+0x68/0x90 [ 1078.318451][ C0] ? tcp_rcv_synsent_state_process+0x42a3/0x42d0 [ 1078.324796][ C0] ? tcp_rcv_state_process+0x445/0x45b0 [ 1078.330336][ C0] ? tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1078.335269][ C0] ? __release_sock+0x26c/0x690 [ 1078.340127][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.345332][ C0] ? __should_failslab+0x1f6/0x290 [ 1078.350441][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.355638][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1078.361445][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 1078.367594][ C0] ? tcp_parse_options+0x206d/0x2100 [ 1078.372901][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.378099][ C0] __msan_chain_origin+0x50/0x90 [ 1078.383052][ C0] tcp_conn_request+0x19a0/0x4c30 [ 1078.388099][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.393300][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1078.399107][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1078.405260][ C0] ? __queue_work+0x1e13/0x2050 [ 1078.410111][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.415310][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1078.420421][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1078.425702][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1078.431071][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.436273][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1078.442082][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.447286][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.452494][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1078.457254][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1078.462122][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1078.466653][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1078.471852][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1078.477596][ C0] ip6_input+0x2dd/0x370 [ 1078.481857][ C0] ? ip6_input+0x370/0x370 [ 1078.486272][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1078.492159][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1078.496858][ C0] ipv6_rcv+0x3bb/0x460 [ 1078.501014][ C0] ? local_bh_enable+0x40/0x40 [ 1078.505784][ C0] __netif_receive_skb+0x265/0x670 [ 1078.510895][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1078.516430][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1078.521285][ C0] process_backlog+0x50d/0xba0 [ 1078.526053][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1078.531862][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1078.537158][ C0] napi_poll+0x43b/0xfd0 [ 1078.541410][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.546604][ C0] net_rx_action+0x35c/0xd40 [ 1078.551198][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1078.555959][ C0] __do_softirq+0x2ea/0x7f5 [ 1078.560471][ C0] asm_call_on_stack+0xf/0x20 [ 1078.565133][ C0] [ 1078.568070][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1078.573092][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1078.578292][ C0] local_bh_enable+0x36/0x40 [ 1078.582876][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 1078.588177][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.593385][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1078.598504][ C0] ip6_finish_output+0x14b/0x4b0 [ 1078.603446][ C0] ip6_output+0x68d/0x7f0 [ 1078.607781][ C0] ? ip6_output+0x7f0/0x7f0 [ 1078.612279][ C0] ? ac6_seq_show+0x200/0x200 [ 1078.616949][ C0] ip6_xmit+0x2475/0x2b40 [ 1078.621296][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 1078.625811][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 1078.630504][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1078.636146][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1078.641516][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1078.647109][ C0] tcp_connect+0x153f/0x3bb0 [ 1078.651711][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1078.657025][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1078.662838][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1078.668755][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 1078.673623][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 1078.678815][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 1078.684290][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.689499][ C0] inet_stream_connect+0x101/0x180 [ 1078.694611][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 1078.700255][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1078.705902][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.711107][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1078.716473][ C0] rds_connect_worker+0x36b/0x550 [ 1078.721499][ C0] ? rds_addr_cmp+0x290/0x290 [ 1078.726178][ C0] process_one_work+0x1688/0x2140 [ 1078.731209][ C0] worker_thread+0x10bc/0x2730 [ 1078.735974][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1078.741185][ C0] kthread+0x551/0x590 [ 1078.745249][ C0] ? process_one_work+0x2140/0x2140 [ 1078.750449][ C0] ? kthread_blkcg+0x110/0x110 [ 1078.755214][ C0] ret_from_fork+0x1f/0x30 [ 1078.759714][ C0] Uninit was stored to memory at: [ 1078.764751][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1078.770461][ C0] __msan_chain_origin+0x50/0x90 [ 1078.775479][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1078.780498][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1078.785601][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1078.790965][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1078.795727][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1078.800227][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1078.805942][ C0] ip6_input+0x2dd/0x370 [ 1078.810186][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1078.814856][ C0] ipv6_rcv+0x3bb/0x460 [ 1078.819011][ C0] __netif_receive_skb+0x265/0x670 [ 1078.824262][ C0] process_backlog+0x50d/0xba0 [ 1078.829104][ C0] napi_poll+0x43b/0xfd0 [ 1078.833357][ C0] net_rx_action+0x35c/0xd40 [ 1078.837939][ C0] __do_softirq+0x2ea/0x7f5 [ 1078.842423][ C0] [ 1078.844739][ C0] Uninit was stored to memory at: [ 1078.849758][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1078.855476][ C0] __msan_chain_origin+0x50/0x90 [ 1078.860413][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1078.865688][ C0] tcp_conn_request+0x3046/0x4c30 [ 1078.870707][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1078.875816][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1078.881184][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1078.885941][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1078.890451][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1078.896160][ C0] ip6_input+0x2dd/0x370 [ 1078.900393][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1078.905060][ C0] ipv6_rcv+0x3bb/0x460 [ 1078.909205][ C0] __netif_receive_skb+0x265/0x670 [ 1078.914301][ C0] process_backlog+0x50d/0xba0 [ 1078.919056][ C0] napi_poll+0x43b/0xfd0 [ 1078.923289][ C0] net_rx_action+0x35c/0xd40 [ 1078.927869][ C0] __do_softirq+0x2ea/0x7f5 [ 1078.932351][ C0] [ 1078.934667][ C0] Uninit was stored to memory at: [ 1078.939823][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1078.945628][ C0] __msan_chain_origin+0x50/0x90 [ 1078.950560][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1078.955591][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1078.960699][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1078.966078][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1078.970858][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1078.975345][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1078.981048][ C0] ip6_input+0x2dd/0x370 [ 1078.985275][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1078.989932][ C0] ipv6_rcv+0x3bb/0x460 [ 1078.994070][ C0] __netif_receive_skb+0x265/0x670 [ 1078.999167][ C0] process_backlog+0x50d/0xba0 [ 1079.003917][ C0] napi_poll+0x43b/0xfd0 [ 1079.008145][ C0] net_rx_action+0x35c/0xd40 [ 1079.012723][ C0] __do_softirq+0x2ea/0x7f5 [ 1079.017204][ C0] [ 1079.019522][ C0] Uninit was stored to memory at: [ 1079.024543][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1079.030247][ C0] __msan_chain_origin+0x50/0x90 [ 1079.035169][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1079.040440][ C0] tcp_conn_request+0x3046/0x4c30 [ 1079.045447][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1079.050538][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1079.055902][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1079.060649][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1079.065149][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1079.070850][ C0] ip6_input+0x2dd/0x370 [ 1079.075090][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1079.079753][ C0] ipv6_rcv+0x3bb/0x460 [ 1079.083893][ C0] __netif_receive_skb+0x265/0x670 [ 1079.088987][ C0] process_backlog+0x50d/0xba0 [ 1079.093732][ C0] napi_poll+0x43b/0xfd0 [ 1079.097956][ C0] net_rx_action+0x35c/0xd40 [ 1079.102529][ C0] __do_softirq+0x2ea/0x7f5 [ 1079.107004][ C0] [ 1079.109313][ C0] Uninit was stored to memory at: [ 1079.114319][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1079.120021][ C0] __msan_chain_origin+0x50/0x90 [ 1079.124944][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1079.129952][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1079.135042][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1079.140408][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1079.145155][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1079.149639][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1079.155340][ C0] ip6_input+0x2dd/0x370 [ 1079.159567][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1079.164226][ C0] ipv6_rcv+0x3bb/0x460 [ 1079.168379][ C0] __netif_receive_skb+0x265/0x670 [ 1079.173492][ C0] process_backlog+0x50d/0xba0 [ 1079.178237][ C0] napi_poll+0x43b/0xfd0 [ 1079.182463][ C0] net_rx_action+0x35c/0xd40 [ 1079.187035][ C0] __do_softirq+0x2ea/0x7f5 [ 1079.191521][ C0] [ 1079.193826][ C0] Uninit was stored to memory at: [ 1079.198853][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1079.204660][ C0] __msan_chain_origin+0x50/0x90 [ 1079.209792][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1079.215058][ C0] tcp_conn_request+0x3046/0x4c30 [ 1079.220065][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1079.225156][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1079.230509][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1079.235255][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1079.239769][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1079.245482][ C0] ip6_input+0x2dd/0x370 [ 1079.249708][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1079.254364][ C0] ipv6_rcv+0x3bb/0x460 [ 1079.258510][ C0] __netif_receive_skb+0x265/0x670 [ 1079.263600][ C0] process_backlog+0x50d/0xba0 [ 1079.268446][ C0] napi_poll+0x43b/0xfd0 [ 1079.272674][ C0] net_rx_action+0x35c/0xd40 [ 1079.277358][ C0] __do_softirq+0x2ea/0x7f5 [ 1079.281843][ C0] [ 1079.284147][ C0] Uninit was stored to memory at: [ 1079.289157][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1079.294856][ C0] __msan_chain_origin+0x50/0x90 [ 1079.299798][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1079.304808][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1079.309905][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1079.315384][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1079.320131][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1079.324622][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1079.330335][ C0] ip6_input+0x2dd/0x370 [ 1079.334563][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1079.339225][ C0] ipv6_rcv+0x3bb/0x460 [ 1079.343468][ C0] __netif_receive_skb+0x265/0x670 [ 1079.348562][ C0] process_backlog+0x50d/0xba0 [ 1079.353318][ C0] napi_poll+0x43b/0xfd0 [ 1079.357539][ C0] net_rx_action+0x35c/0xd40 [ 1079.362115][ C0] __do_softirq+0x2ea/0x7f5 [ 1079.366592][ C0] [ 1079.368902][ C0] Uninit was created at: [ 1079.373131][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1079.378747][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1079.383510][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1079.388955][ C0] alloc_pages_current+0x685/0xb50 [ 1079.394049][ C0] alloc_slab_page+0x11c/0x1240 [ 1079.398888][ C0] new_slab+0x2bf/0x10c0 [ 1079.403114][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1079.407776][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1079.412627][ C0] inet_reqsk_alloc+0xaf/0x910 [ 1079.417384][ C0] tcp_conn_request+0x8dc/0x4c30 [ 1079.422304][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1079.427399][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1079.432765][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1079.437529][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1079.442014][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1079.447715][ C0] ip6_input+0x2dd/0x370 [ 1079.451939][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1079.456598][ C0] ipv6_rcv+0x3bb/0x460 [ 1079.460737][ C0] __netif_receive_skb+0x265/0x670 13:28:58 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) [ 1079.465832][ C0] process_backlog+0x50d/0xba0 [ 1079.470580][ C0] napi_poll+0x43b/0xfd0 [ 1079.474802][ C0] net_rx_action+0x35c/0xd40 [ 1079.479377][ C0] __do_softirq+0x2ea/0x7f5 13:28:58 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) 13:28:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:28:58 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:28:58 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) 13:28:58 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xed, 0x6f, 0xd8, 0x10, 0x5ac, 0x25a, 0x86b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3c, 0x2}}]}}]}}, 0x0) 13:28:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1079.968618][ T8692] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1079.998452][ T5] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1080.209209][ T8692] usb 3-1: Using ep0 maxpacket: 16 13:28:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) [ 1080.238754][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 1080.491756][ T8692] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1080.501281][ T8692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.509596][ T8692] usb 3-1: Product: syz [ 1080.513881][ T8692] usb 3-1: Manufacturer: syz [ 1080.518751][ T8692] usb 3-1: SerialNumber: syz [ 1080.539757][ T5] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=86.b2 [ 1080.549263][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.557378][ T5] usb 1-1: Product: syz [ 1080.561797][ T5] usb 1-1: Manufacturer: syz [ 1080.566533][ T5] usb 1-1: SerialNumber: syz [ 1080.754339][ T8692] usb 3-1: config 0 descriptor?? [ 1080.774424][ T5] usb 1-1: config 0 descriptor?? 13:28:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1080.846946][ T8692] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 1080.883417][ T5] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 13:28:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) [ 1081.055047][ T8692] usb 3-1: USB disconnect, device number 37 [ 1081.074138][ T5] usb 1-1: USB disconnect, device number 39 13:29:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:29:00 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) 13:29:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:29:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1090.776996][ C1] not chained 330000 origins [ 1090.781704][ C1] CPU: 1 PID: 1529 Comm: kworker/u4:12 Not tainted 5.8.0-rc5-syzkaller #0 [ 1090.790203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.800261][ C1] Workqueue: krdsd rds_connect_worker [ 1090.805622][ C1] Call Trace: [ 1090.808899][ C1] [ 1090.811756][ C1] dump_stack+0x21c/0x280 [ 1090.816084][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1090.821823][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.827024][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1090.832826][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1090.838999][ C1] ? tcp_select_initial_window+0x949/0xa00 [ 1090.844809][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.850109][ C1] __msan_chain_origin+0x50/0x90 [ 1090.855049][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1090.860351][ C1] tcp_conn_request+0x3046/0x4c30 [ 1090.865391][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.870603][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.875801][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1090.880907][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1090.886183][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1090.891548][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.896740][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1090.902541][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.907758][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1090.912968][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1090.917741][ C1] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1090.922619][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1090.927171][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1090.932373][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1090.938146][ C1] ip6_input+0x2dd/0x370 [ 1090.942396][ C1] ? ip6_input+0x370/0x370 [ 1090.946847][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1090.952740][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1090.957425][ C1] ipv6_rcv+0x3bb/0x460 [ 1090.961587][ C1] ? local_bh_enable+0x40/0x40 [ 1090.966351][ C1] __netif_receive_skb+0x265/0x670 [ 1090.971458][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1090.977013][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1090.981887][ C1] process_backlog+0x50d/0xba0 [ 1090.986681][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1090.992496][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1090.997783][ C1] napi_poll+0x43b/0xfd0 [ 1091.002035][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1091.007239][ C1] net_rx_action+0x35c/0xd40 [ 1091.011858][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1091.016627][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.021142][ C1] asm_call_on_stack+0xf/0x20 [ 1091.025805][ C1] [ 1091.028745][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1091.033781][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1091.038992][ C1] local_bh_enable+0x36/0x40 [ 1091.043584][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1091.048799][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1091.054011][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1091.059137][ C1] ip6_finish_output+0x14b/0x4b0 [ 1091.064084][ C1] ip6_output+0x68d/0x7f0 [ 1091.068436][ C1] ? ip6_output+0x7f0/0x7f0 [ 1091.072940][ C1] ? ac6_seq_show+0x200/0x200 [ 1091.077629][ C1] ip6_xmit+0x2475/0x2b40 [ 1091.081975][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1091.086478][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1091.091167][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1091.096794][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1091.101994][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1091.107581][ C1] tcp_connect+0x153f/0x3bb0 [ 1091.112366][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 1091.117657][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1091.123468][ C1] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1091.129368][ C1] tcp_v6_connect+0x2be8/0x2d40 [ 1091.134238][ C1] ? tcp_v6_pre_connect+0x130/0x130 [ 1091.139440][ C1] __inet_stream_connect+0x14fe/0x16f0 [ 1091.144934][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1091.150139][ C1] inet_stream_connect+0x101/0x180 [ 1091.155254][ C1] ? __inet_stream_connect+0x16f0/0x16f0 [ 1091.160897][ C1] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1091.166628][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1091.171830][ C1] ? rds_tcp_state_change+0x400/0x400 [ 1091.177201][ C1] rds_connect_worker+0x36b/0x550 [ 1091.182223][ C1] ? rds_addr_cmp+0x290/0x290 [ 1091.186898][ C1] process_one_work+0x1688/0x2140 [ 1091.191935][ C1] worker_thread+0x10bc/0x2730 [ 1091.196695][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1091.201905][ C1] kthread+0x551/0x590 [ 1091.205976][ C1] ? process_one_work+0x2140/0x2140 [ 1091.211175][ C1] ? kthread_blkcg+0x110/0x110 [ 1091.215940][ C1] ret_from_fork+0x1f/0x30 [ 1091.220354][ C1] Uninit was stored to memory at: [ 1091.225376][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.231103][ C1] __msan_chain_origin+0x50/0x90 [ 1091.236054][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1091.241087][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.246188][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.251559][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.256314][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.260814][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.266555][ C1] ip6_input+0x2dd/0x370 [ 1091.270790][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.275459][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.279638][ C1] __netif_receive_skb+0x265/0x670 [ 1091.284740][ C1] process_backlog+0x50d/0xba0 [ 1091.289497][ C1] napi_poll+0x43b/0xfd0 [ 1091.293731][ C1] net_rx_action+0x35c/0xd40 [ 1091.298316][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.302804][ C1] [ 1091.305126][ C1] Uninit was stored to memory at: [ 1091.310146][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.315868][ C1] __msan_chain_origin+0x50/0x90 [ 1091.320825][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1091.326123][ C1] tcp_conn_request+0x3046/0x4c30 [ 1091.331144][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.336257][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.341626][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.346384][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.350885][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.356612][ C1] ip6_input+0x2dd/0x370 [ 1091.360959][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.365631][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.369800][ C1] __netif_receive_skb+0x265/0x670 [ 1091.374916][ C1] process_backlog+0x50d/0xba0 [ 1091.379694][ C1] napi_poll+0x43b/0xfd0 [ 1091.383933][ C1] net_rx_action+0x35c/0xd40 [ 1091.388514][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.392995][ C1] [ 1091.395309][ C1] Uninit was stored to memory at: [ 1091.400328][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.406035][ C1] __msan_chain_origin+0x50/0x90 [ 1091.410966][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1091.415980][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.421082][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.426441][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.431214][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.435719][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.441446][ C1] ip6_input+0x2dd/0x370 [ 1091.445683][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.450440][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.454591][ C1] __netif_receive_skb+0x265/0x670 [ 1091.459698][ C1] process_backlog+0x50d/0xba0 [ 1091.464458][ C1] napi_poll+0x43b/0xfd0 [ 1091.468703][ C1] net_rx_action+0x35c/0xd40 [ 1091.473283][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.477768][ C1] [ 1091.480087][ C1] Uninit was stored to memory at: [ 1091.485108][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.490819][ C1] __msan_chain_origin+0x50/0x90 [ 1091.495749][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1091.501028][ C1] tcp_conn_request+0x3046/0x4c30 [ 1091.506044][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.511149][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.516535][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.521295][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.525792][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.531505][ C1] ip6_input+0x2dd/0x370 [ 1091.535736][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.540409][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.544582][ C1] __netif_receive_skb+0x265/0x670 [ 1091.549709][ C1] process_backlog+0x50d/0xba0 [ 1091.554465][ C1] napi_poll+0x43b/0xfd0 [ 1091.558704][ C1] net_rx_action+0x35c/0xd40 [ 1091.563287][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.567771][ C1] [ 1091.570088][ C1] Uninit was stored to memory at: [ 1091.575118][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.580844][ C1] __msan_chain_origin+0x50/0x90 [ 1091.585787][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1091.590803][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.595905][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.601270][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.606047][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.610544][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.616254][ C1] ip6_input+0x2dd/0x370 [ 1091.620501][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.625172][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.629326][ C1] __netif_receive_skb+0x265/0x670 [ 1091.634429][ C1] process_backlog+0x50d/0xba0 [ 1091.639185][ C1] napi_poll+0x43b/0xfd0 [ 1091.643422][ C1] net_rx_action+0x35c/0xd40 [ 1091.648006][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.652488][ C1] [ 1091.654799][ C1] Uninit was stored to memory at: [ 1091.659823][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.665540][ C1] __msan_chain_origin+0x50/0x90 [ 1091.670476][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1091.675752][ C1] tcp_conn_request+0x3046/0x4c30 [ 1091.680771][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.685877][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.691244][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.696000][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.700505][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.706224][ C1] ip6_input+0x2dd/0x370 [ 1091.710461][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.715134][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.719290][ C1] __netif_receive_skb+0x265/0x670 [ 1091.724396][ C1] process_backlog+0x50d/0xba0 [ 1091.729162][ C1] napi_poll+0x43b/0xfd0 [ 1091.733397][ C1] net_rx_action+0x35c/0xd40 [ 1091.737983][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.742470][ C1] [ 1091.744787][ C1] Uninit was stored to memory at: [ 1091.749801][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1091.755645][ C1] __msan_chain_origin+0x50/0x90 [ 1091.760598][ C1] tcp_conn_request+0x19d6/0x4c30 [ 1091.765745][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.770853][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.776311][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.781069][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.785589][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.791315][ C1] ip6_input+0x2dd/0x370 [ 1091.795558][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.800344][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.804506][ C1] __netif_receive_skb+0x265/0x670 [ 1091.809622][ C1] process_backlog+0x50d/0xba0 [ 1091.814389][ C1] napi_poll+0x43b/0xfd0 [ 1091.818638][ C1] net_rx_action+0x35c/0xd40 [ 1091.823232][ C1] __do_softirq+0x2ea/0x7f5 [ 1091.827722][ C1] [ 1091.830043][ C1] Uninit was created at: [ 1091.834286][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1091.839924][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1091.844688][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1091.850348][ C1] alloc_pages_current+0x685/0xb50 [ 1091.855546][ C1] alloc_slab_page+0x11c/0x1240 [ 1091.860396][ C1] new_slab+0x2bf/0x10c0 [ 1091.864647][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1091.869334][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1091.874182][ C1] inet_reqsk_alloc+0xaf/0x910 [ 1091.878961][ C1] tcp_conn_request+0x8dc/0x4c30 [ 1091.883900][ C1] tcp_v6_conn_request+0x27f/0x330 [ 1091.889145][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 1091.894542][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1091.899306][ C1] tcp_v6_rcv+0x4967/0x5a80 [ 1091.903801][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1091.909509][ C1] ip6_input+0x2dd/0x370 [ 1091.913747][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1091.918417][ C1] ipv6_rcv+0x3bb/0x460 [ 1091.922590][ C1] __netif_receive_skb+0x265/0x670 [ 1091.927699][ C1] process_backlog+0x50d/0xba0 [ 1091.932454][ C1] napi_poll+0x43b/0xfd0 [ 1091.936686][ C1] net_rx_action+0x35c/0xd40 [ 1091.941266][ C1] __do_softirq+0x2ea/0x7f5 13:29:13 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:29:13 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:29:13 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) 13:29:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:29:13 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000002c0)="250000000000000018") [ 1095.274438][T28486] autofs4:pid:28486:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 1095.288252][T28486] autofs4:pid:28486:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 13:29:14 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) [ 1095.552529][T28492] autofs4:pid:28492:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 1095.566141][T28492] autofs4:pid:28492:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 13:29:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:29:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:14 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xffffffffffff9e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44d220b2090910c91aa95414197f735ebbd62ac9512149c0eb8f816af193f346199839729633b3a40e84cac1cbd17168e2c9"], 0x0, 0x32}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0xffffd000) 13:29:15 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000002c0)="250000000000000018") 13:29:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) [ 1096.535761][T28505] autofs4:pid:28505:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 1096.554340][T28505] autofs4:pid:28505:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 1101.905346][ C1] not chained 340000 origins [ 1101.909981][ C1] CPU: 1 PID: 20351 Comm: kworker/u4:1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1101.918474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.928551][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 1101.934177][ C1] Call Trace: [ 1101.937456][ C1] [ 1101.940314][ C1] dump_stack+0x21c/0x280 [ 1101.944647][ C1] ? tcp_data_queue+0x1e5c/0xb570 [ 1101.949696][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1101.955419][ C1] ? net_rx_action+0x35c/0xd40 [ 1101.960187][ C1] ? __do_softirq+0x2ea/0x7f5 [ 1101.964865][ C1] ? asm_call_on_stack+0xf/0x20 [ 1101.969719][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 1101.974928][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 1101.980306][ C1] ? local_bh_enable+0x36/0x40 [ 1101.985076][ C1] ? ip6_finish_output2+0x24b4/0x2a70 [ 1101.990449][ C1] ? __ip6_finish_output+0x9c0/0xa90 [ 1101.995738][ C1] ? ip6_finish_output+0x14b/0x4b0 [ 1102.000851][ C1] ? ip6_output+0x68d/0x7f0 [ 1102.005353][ C1] ? ip6_xmit+0x2475/0x2b40 [ 1102.009863][ C1] ? inet6_csk_xmit+0x47f/0x5a0 [ 1102.014717][ C1] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 1102.020092][ C1] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 1102.025120][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 1102.030936][ C1] ? tcp_send_fin+0x192a/0x1bc0 [ 1102.035791][ C1] ? tcp_shutdown+0x1f7/0x270 [ 1102.040483][ C1] ? inet_shutdown+0x44f/0x6d0 [ 1102.045247][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 1102.050448][ C1] ? rds_tcp_accept_one+0x1060/0x12c0 [ 1102.055822][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 1102.061198][ C1] ? process_one_work+0x1688/0x2140 [ 1102.066398][ C1] ? worker_thread+0x10bc/0x2730 [ 1102.071332][ C1] ? kthread+0x551/0x590 [ 1102.075571][ C1] ? ret_from_fork+0x1f/0x30 [ 1102.080169][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.085979][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1102.092054][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.097262][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.103069][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1102.109222][ C1] ? __msan_get_context_state+0x9/0x20 [ 1102.114681][ C1] ? __module_get+0x19/0x210 [ 1102.119277][ C1] ? inet_twsk_alloc+0x7fd/0xbd0 [ 1102.124218][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.129417][ C1] __msan_chain_origin+0x50/0x90 [ 1102.134357][ C1] tcp_time_wait+0xbba/0x1150 [ 1102.139059][ C1] tcp_fin+0x23a/0x9f0 [ 1102.143136][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.147998][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.153810][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1102.159873][ C1] ? tcp_urg+0xb22/0x10c0 [ 1102.164217][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.169678][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.174883][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.180701][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.185914][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.190700][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.195227][ C1] ? tcp_v6_rcv+0x1541/0x5a80 [ 1102.199918][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1102.205119][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.210882][ C1] ip6_input+0x2dd/0x370 [ 1102.215136][ C1] ? ip6_input+0x370/0x370 [ 1102.219559][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1102.225451][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.230139][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.234398][ C1] ? local_bh_enable+0x40/0x40 [ 1102.239166][ C1] __netif_receive_skb+0x265/0x670 [ 1102.244279][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1102.249826][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1102.254682][ C1] process_backlog+0x50d/0xba0 [ 1102.259451][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.265263][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1102.270548][ C1] napi_poll+0x43b/0xfd0 [ 1102.274795][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.280002][ C1] net_rx_action+0x35c/0xd40 [ 1102.284606][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1102.289390][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.293910][ C1] asm_call_on_stack+0xf/0x20 [ 1102.298575][ C1] [ 1102.301520][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1102.306551][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1102.311761][ C1] local_bh_enable+0x36/0x40 [ 1102.316364][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1102.321587][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.326788][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1102.331917][ C1] ip6_finish_output+0x14b/0x4b0 [ 1102.336864][ C1] ip6_output+0x68d/0x7f0 [ 1102.341203][ C1] ? ip6_output+0x7f0/0x7f0 [ 1102.345716][ C1] ? ac6_seq_show+0x200/0x200 [ 1102.350395][ C1] ip6_xmit+0x2475/0x2b40 [ 1102.354747][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1102.359260][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1102.363955][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1102.369593][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1102.374826][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 1102.379703][ C1] ? kmsan_get_metadata+0xb0/0x180 [ 1102.384842][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.390041][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.395240][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.400620][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 1102.406266][ C1] tcp_send_fin+0x192a/0x1bc0 [ 1102.410955][ C1] ? tcp_set_state+0x9ec/0xb40 [ 1102.415728][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.420932][ C1] tcp_shutdown+0x1f7/0x270 [ 1102.425439][ C1] ? tcp_set_state+0xb40/0xb40 [ 1102.430211][ C1] inet_shutdown+0x44f/0x6d0 [ 1102.434821][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 1102.439524][ C1] kernel_sock_shutdown+0x98/0xc0 [ 1102.444564][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 1102.449792][ C1] rds_tcp_accept_worker+0x60/0x180 [ 1102.455016][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 1102.460050][ C1] process_one_work+0x1688/0x2140 [ 1102.465096][ C1] worker_thread+0x10bc/0x2730 [ 1102.469870][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1102.475089][ C1] kthread+0x551/0x590 [ 1102.479173][ C1] ? process_one_work+0x2140/0x2140 [ 1102.484382][ C1] ? kthread_blkcg+0x110/0x110 [ 1102.489264][ C1] ret_from_fork+0x1f/0x30 [ 1102.493676][ C1] Uninit was stored to memory at: [ 1102.498814][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.504533][ C1] __msan_chain_origin+0x50/0x90 [ 1102.509497][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1102.514259][ C1] tcp_time_wait+0xd9/0x1150 [ 1102.518847][ C1] tcp_fin+0x23a/0x9f0 [ 1102.522916][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.527767][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.533235][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.538001][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.542504][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.548218][ C1] ip6_input+0x2dd/0x370 [ 1102.552455][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.557125][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.561284][ C1] __netif_receive_skb+0x265/0x670 [ 1102.566394][ C1] process_backlog+0x50d/0xba0 [ 1102.571160][ C1] napi_poll+0x43b/0xfd0 [ 1102.575404][ C1] net_rx_action+0x35c/0xd40 [ 1102.579995][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.584485][ C1] [ 1102.586803][ C1] Uninit was stored to memory at: [ 1102.591829][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.597557][ C1] __msan_chain_origin+0x50/0x90 [ 1102.602495][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1102.607692][ C1] tcp_time_wait+0xf7b/0x1150 [ 1102.612366][ C1] tcp_fin+0x23a/0x9f0 [ 1102.616433][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.621283][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.626741][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.631501][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.636016][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.641734][ C1] ip6_input+0x2dd/0x370 [ 1102.645975][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.650650][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.654809][ C1] __netif_receive_skb+0x265/0x670 [ 1102.659918][ C1] process_backlog+0x50d/0xba0 [ 1102.664679][ C1] napi_poll+0x43b/0xfd0 [ 1102.668923][ C1] net_rx_action+0x35c/0xd40 [ 1102.673511][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.677999][ C1] [ 1102.680319][ C1] Uninit was stored to memory at: [ 1102.685342][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.691063][ C1] __msan_chain_origin+0x50/0x90 [ 1102.696003][ C1] tcp_time_wait+0x1064/0x1150 [ 1102.700763][ C1] tcp_fin+0x23a/0x9f0 [ 1102.704830][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.709682][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.715140][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.719903][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.724405][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.730123][ C1] ip6_input+0x2dd/0x370 [ 1102.734365][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.739040][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.743205][ C1] __netif_receive_skb+0x265/0x670 [ 1102.748314][ C1] process_backlog+0x50d/0xba0 [ 1102.753079][ C1] napi_poll+0x43b/0xfd0 [ 1102.757321][ C1] net_rx_action+0x35c/0xd40 [ 1102.761907][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.766398][ C1] [ 1102.768716][ C1] Uninit was stored to memory at: [ 1102.773742][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.779461][ C1] __msan_chain_origin+0x50/0x90 [ 1102.784394][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1102.789159][ C1] tcp_time_wait+0xd9/0x1150 [ 1102.793744][ C1] tcp_fin+0x23a/0x9f0 [ 1102.797809][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.802673][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.808137][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.812902][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.817422][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.823144][ C1] ip6_input+0x2dd/0x370 [ 1102.827390][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.832089][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.836256][ C1] __netif_receive_skb+0x265/0x670 [ 1102.841384][ C1] process_backlog+0x50d/0xba0 [ 1102.846150][ C1] napi_poll+0x43b/0xfd0 [ 1102.850394][ C1] net_rx_action+0x35c/0xd40 [ 1102.854984][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.859475][ C1] [ 1102.861799][ C1] Uninit was stored to memory at: [ 1102.866838][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.872567][ C1] __msan_chain_origin+0x50/0x90 [ 1102.877507][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1102.882709][ C1] tcp_time_wait+0xf7b/0x1150 [ 1102.887384][ C1] tcp_fin+0x23a/0x9f0 [ 1102.891448][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.896309][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.901767][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.906528][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.911036][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1102.916757][ C1] ip6_input+0x2dd/0x370 [ 1102.921003][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1102.925682][ C1] ipv6_rcv+0x3bb/0x460 [ 1102.929837][ C1] __netif_receive_skb+0x265/0x670 [ 1102.934946][ C1] process_backlog+0x50d/0xba0 [ 1102.939718][ C1] napi_poll+0x43b/0xfd0 [ 1102.943960][ C1] net_rx_action+0x35c/0xd40 [ 1102.948555][ C1] __do_softirq+0x2ea/0x7f5 [ 1102.953042][ C1] [ 1102.955358][ C1] Uninit was stored to memory at: [ 1102.960382][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1102.966099][ C1] __msan_chain_origin+0x50/0x90 [ 1102.971036][ C1] tcp_time_wait+0x1064/0x1150 [ 1102.975806][ C1] tcp_fin+0x23a/0x9f0 [ 1102.979886][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1102.984738][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1102.990195][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1102.994961][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1102.999468][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1103.005185][ C1] ip6_input+0x2dd/0x370 [ 1103.009427][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1103.014102][ C1] ipv6_rcv+0x3bb/0x460 [ 1103.018259][ C1] __netif_receive_skb+0x265/0x670 [ 1103.023461][ C1] process_backlog+0x50d/0xba0 [ 1103.028225][ C1] napi_poll+0x43b/0xfd0 [ 1103.032464][ C1] net_rx_action+0x35c/0xd40 [ 1103.037053][ C1] __do_softirq+0x2ea/0x7f5 [ 1103.041555][ C1] [ 1103.043874][ C1] Uninit was stored to memory at: [ 1103.048900][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1103.054614][ C1] __msan_chain_origin+0x50/0x90 [ 1103.059551][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1103.064311][ C1] tcp_time_wait+0xd9/0x1150 [ 1103.068898][ C1] tcp_fin+0x23a/0x9f0 [ 1103.072960][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1103.077807][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1103.083267][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1103.088031][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1103.092540][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1103.098259][ C1] ip6_input+0x2dd/0x370 [ 1103.102498][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1103.107174][ C1] ipv6_rcv+0x3bb/0x460 [ 1103.111330][ C1] __netif_receive_skb+0x265/0x670 [ 1103.116440][ C1] process_backlog+0x50d/0xba0 [ 1103.121199][ C1] napi_poll+0x43b/0xfd0 [ 1103.125442][ C1] net_rx_action+0x35c/0xd40 [ 1103.130027][ C1] __do_softirq+0x2ea/0x7f5 [ 1103.134515][ C1] [ 1103.136837][ C1] Uninit was created at: [ 1103.141081][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1103.146713][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1103.151481][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1103.156939][ C1] alloc_pages_current+0x685/0xb50 [ 1103.162050][ C1] alloc_slab_page+0x11c/0x1240 [ 1103.166900][ C1] new_slab+0x2bf/0x10c0 [ 1103.171138][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1103.175812][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1103.180661][ C1] inet_twsk_alloc+0x154/0xbd0 [ 1103.185424][ C1] tcp_time_wait+0xd9/0x1150 [ 1103.190010][ C1] tcp_fin+0x23a/0x9f0 [ 1103.194076][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1103.198923][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1103.204381][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1103.209143][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1103.213648][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1103.219368][ C1] ip6_input+0x2dd/0x370 [ 1103.223605][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1103.228279][ C1] ipv6_rcv+0x3bb/0x460 [ 1103.232435][ C1] __netif_receive_skb+0x265/0x670 [ 1103.237546][ C1] process_backlog+0x50d/0xba0 [ 1103.242307][ C1] napi_poll+0x43b/0xfd0 [ 1103.246551][ C1] net_rx_action+0x35c/0xd40 [ 1103.251140][ C1] __do_softirq+0x2ea/0x7f5 13:29:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4071, 0xfe7}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x40, 0x1ff, 0x0) 13:29:28 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000002c0)="250000000000000018") 13:29:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 13:29:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) [ 1109.847048][T28527] autofs4:pid:28527:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 1109.860790][T28527] autofs4:pid:28527:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 13:29:28 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000002c0)="250000000000000018") 13:29:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x10) 13:29:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) [ 1110.447077][T28535] autofs4:pid:28535:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 1110.460719][T28535] autofs4:pid:28535:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 13:29:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) [ 1113.773531][ C1] not chained 350000 origins [ 1113.778286][ C1] CPU: 1 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1113.786771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.796836][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 1113.802465][ C1] Call Trace: [ 1113.805757][ C1] [ 1113.808614][ C1] dump_stack+0x21c/0x280 [ 1113.812962][ C1] ? tcp_data_queue+0x1e5c/0xb570 [ 1113.817992][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1113.823712][ C1] ? net_rx_action+0x35c/0xd40 [ 1113.828470][ C1] ? __do_softirq+0x2ea/0x7f5 [ 1113.833138][ C1] ? asm_call_on_stack+0xf/0x20 [ 1113.837997][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 1113.843198][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 1113.848574][ C1] ? local_bh_enable+0x36/0x40 [ 1113.853327][ C1] ? ip6_finish_output2+0x24b4/0x2a70 [ 1113.858700][ C1] ? __ip6_finish_output+0x9c0/0xa90 [ 1113.863993][ C1] ? ip6_finish_output+0x14b/0x4b0 [ 1113.869098][ C1] ? ip6_output+0x68d/0x7f0 [ 1113.873591][ C1] ? ip6_xmit+0x2475/0x2b40 [ 1113.878090][ C1] ? inet6_csk_xmit+0x47f/0x5a0 [ 1113.882931][ C1] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 1113.888301][ C1] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 1113.893325][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 1113.899128][ C1] ? tcp_send_fin+0x192a/0x1bc0 [ 1113.903974][ C1] ? tcp_shutdown+0x1f7/0x270 [ 1113.908644][ C1] ? inet_shutdown+0x44f/0x6d0 [ 1113.913401][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 1113.918595][ C1] ? rds_tcp_accept_one+0x1060/0x12c0 [ 1113.923957][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 1113.929328][ C1] ? process_one_work+0x1688/0x2140 [ 1113.934520][ C1] ? worker_thread+0x10bc/0x2730 [ 1113.939456][ C1] ? kthread+0x551/0x590 [ 1113.943699][ C1] ? ret_from_fork+0x1f/0x30 [ 1113.948292][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1113.954116][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1113.960202][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1113.965420][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1113.971230][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1113.977395][ C1] ? __msan_get_context_state+0x9/0x20 [ 1113.982852][ C1] ? __module_get+0x19/0x210 [ 1113.987443][ C1] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1113.993596][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1113.998801][ C1] __msan_chain_origin+0x50/0x90 [ 1114.003759][ C1] tcp_time_wait+0x102b/0x1150 [ 1114.008541][ C1] tcp_fin+0x23a/0x9f0 [ 1114.012621][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.017490][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1114.023494][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1114.029567][ C1] ? tcp_urg+0xb22/0x10c0 [ 1114.033927][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.039386][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.044623][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1114.050439][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.055642][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.060430][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.064955][ C1] ? tcp_v6_rcv+0x1541/0x5a80 [ 1114.069651][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1114.074849][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.080609][ C1] ip6_input+0x2dd/0x370 [ 1114.084853][ C1] ? ip6_input+0x370/0x370 [ 1114.089271][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1114.095173][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.099862][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.104025][ C1] ? local_bh_enable+0x40/0x40 [ 1114.108804][ C1] __netif_receive_skb+0x265/0x670 [ 1114.113913][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1114.119467][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1114.124321][ C1] process_backlog+0x50d/0xba0 [ 1114.129082][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1114.134976][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1114.140303][ C1] napi_poll+0x43b/0xfd0 [ 1114.144547][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.149837][ C1] net_rx_action+0x35c/0xd40 [ 1114.154428][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1114.159193][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.163705][ C1] asm_call_on_stack+0xf/0x20 [ 1114.168368][ C1] [ 1114.171309][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1114.176341][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1114.181548][ C1] local_bh_enable+0x36/0x40 [ 1114.186160][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1114.191373][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.196577][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1114.201700][ C1] ip6_finish_output+0x14b/0x4b0 [ 1114.206646][ C1] ip6_output+0x68d/0x7f0 [ 1114.210985][ C1] ? ip6_output+0x7f0/0x7f0 [ 1114.215489][ C1] ? ac6_seq_show+0x200/0x200 [ 1114.220167][ C1] ip6_xmit+0x2475/0x2b40 [ 1114.224517][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1114.229027][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1114.233718][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1114.239350][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1114.244588][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 1114.249468][ C1] ? kmsan_get_metadata+0xb0/0x180 [ 1114.254603][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.259800][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.265022][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.270224][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 1114.275863][ C1] tcp_send_fin+0x192a/0x1bc0 [ 1114.280554][ C1] ? tcp_set_state+0x9ec/0xb40 [ 1114.285325][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.290528][ C1] tcp_shutdown+0x1f7/0x270 [ 1114.295047][ C1] ? tcp_set_state+0xb40/0xb40 [ 1114.299834][ C1] inet_shutdown+0x44f/0x6d0 [ 1114.304433][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 1114.309110][ C1] kernel_sock_shutdown+0x98/0xc0 [ 1114.314141][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 1114.319351][ C1] rds_tcp_accept_worker+0x60/0x180 [ 1114.324555][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 1114.329581][ C1] process_one_work+0x1688/0x2140 [ 1114.334619][ C1] worker_thread+0x10bc/0x2730 [ 1114.339385][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1114.344605][ C1] kthread+0x551/0x590 [ 1114.348674][ C1] ? process_one_work+0x2140/0x2140 [ 1114.353869][ C1] ? kthread_blkcg+0x110/0x110 [ 1114.358631][ C1] ret_from_fork+0x1f/0x30 [ 1114.363040][ C1] Uninit was stored to memory at: [ 1114.368060][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.373771][ C1] __msan_chain_origin+0x50/0x90 [ 1114.378704][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1114.383467][ C1] tcp_time_wait+0xd9/0x1150 [ 1114.388051][ C1] tcp_fin+0x23a/0x9f0 [ 1114.392119][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.396985][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.402444][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.407210][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.411728][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.417444][ C1] ip6_input+0x2dd/0x370 [ 1114.421687][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.426362][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.430517][ C1] __netif_receive_skb+0x265/0x670 [ 1114.435637][ C1] process_backlog+0x50d/0xba0 [ 1114.440398][ C1] napi_poll+0x43b/0xfd0 [ 1114.444642][ C1] net_rx_action+0x35c/0xd40 [ 1114.449249][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.453735][ C1] [ 1114.456060][ C1] Uninit was stored to memory at: [ 1114.461097][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.466815][ C1] __msan_chain_origin+0x50/0x90 [ 1114.471751][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1114.476948][ C1] tcp_time_wait+0xf7b/0x1150 [ 1114.481616][ C1] tcp_fin+0x23a/0x9f0 [ 1114.485677][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.490518][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.495976][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.500745][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.505248][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.510962][ C1] ip6_input+0x2dd/0x370 [ 1114.515201][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.519870][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.524022][ C1] __netif_receive_skb+0x265/0x670 [ 1114.529129][ C1] process_backlog+0x50d/0xba0 [ 1114.533885][ C1] napi_poll+0x43b/0xfd0 [ 1114.538123][ C1] net_rx_action+0x35c/0xd40 [ 1114.542704][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.547187][ C1] [ 1114.549501][ C1] Uninit was stored to memory at: [ 1114.554532][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.560249][ C1] __msan_chain_origin+0x50/0x90 [ 1114.565186][ C1] tcp_time_wait+0x1064/0x1150 [ 1114.569946][ C1] tcp_fin+0x23a/0x9f0 [ 1114.574012][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.578860][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.584313][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.589074][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.593575][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.599287][ C1] ip6_input+0x2dd/0x370 [ 1114.603530][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.608200][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.612345][ C1] __netif_receive_skb+0x265/0x670 [ 1114.617447][ C1] process_backlog+0x50d/0xba0 [ 1114.622202][ C1] napi_poll+0x43b/0xfd0 [ 1114.626436][ C1] net_rx_action+0x35c/0xd40 [ 1114.631018][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.635511][ C1] [ 1114.637831][ C1] Uninit was stored to memory at: [ 1114.642852][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.648565][ C1] __msan_chain_origin+0x50/0x90 [ 1114.653501][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1114.658278][ C1] tcp_time_wait+0xd9/0x1150 [ 1114.662857][ C1] tcp_fin+0x23a/0x9f0 [ 1114.666915][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.671770][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.677223][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.681984][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.686476][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.692190][ C1] ip6_input+0x2dd/0x370 [ 1114.696428][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.701096][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.705247][ C1] __netif_receive_skb+0x265/0x670 [ 1114.710347][ C1] process_backlog+0x50d/0xba0 [ 1114.715114][ C1] napi_poll+0x43b/0xfd0 [ 1114.719348][ C1] net_rx_action+0x35c/0xd40 [ 1114.723929][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.728413][ C1] [ 1114.730740][ C1] Uninit was stored to memory at: [ 1114.735783][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.741498][ C1] __msan_chain_origin+0x50/0x90 [ 1114.746429][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1114.751622][ C1] tcp_time_wait+0xf7b/0x1150 [ 1114.756305][ C1] tcp_fin+0x23a/0x9f0 [ 1114.760360][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.765213][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.770664][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.775423][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.779922][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.785631][ C1] ip6_input+0x2dd/0x370 [ 1114.789863][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.794532][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.798685][ C1] __netif_receive_skb+0x265/0x670 [ 1114.803804][ C1] process_backlog+0x50d/0xba0 [ 1114.808569][ C1] napi_poll+0x43b/0xfd0 [ 1114.812818][ C1] net_rx_action+0x35c/0xd40 [ 1114.817407][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.821889][ C1] [ 1114.824227][ C1] Uninit was stored to memory at: [ 1114.829246][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.834977][ C1] __msan_chain_origin+0x50/0x90 [ 1114.839922][ C1] tcp_time_wait+0x1064/0x1150 [ 1114.844678][ C1] tcp_fin+0x23a/0x9f0 [ 1114.848740][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.853580][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.859027][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.863777][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.868271][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.873987][ C1] ip6_input+0x2dd/0x370 [ 1114.878230][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.882901][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.887163][ C1] __netif_receive_skb+0x265/0x670 [ 1114.892276][ C1] process_backlog+0x50d/0xba0 [ 1114.897039][ C1] napi_poll+0x43b/0xfd0 [ 1114.901279][ C1] net_rx_action+0x35c/0xd40 [ 1114.905862][ C1] __do_softirq+0x2ea/0x7f5 [ 1114.910343][ C1] [ 1114.912668][ C1] Uninit was stored to memory at: [ 1114.917711][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1114.923427][ C1] __msan_chain_origin+0x50/0x90 [ 1114.928360][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1114.933126][ C1] tcp_time_wait+0xd9/0x1150 [ 1114.937719][ C1] tcp_fin+0x23a/0x9f0 [ 1114.941787][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1114.946652][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1114.952114][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1114.956897][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1114.961397][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1114.967107][ C1] ip6_input+0x2dd/0x370 [ 1114.971441][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1114.976123][ C1] ipv6_rcv+0x3bb/0x460 [ 1114.980426][ C1] __netif_receive_skb+0x265/0x670 [ 1114.985540][ C1] process_backlog+0x50d/0xba0 [ 1114.990317][ C1] napi_poll+0x43b/0xfd0 [ 1114.994554][ C1] net_rx_action+0x35c/0xd40 [ 1114.999141][ C1] __do_softirq+0x2ea/0x7f5 [ 1115.003649][ C1] [ 1115.005970][ C1] Uninit was created at: [ 1115.010204][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1115.015831][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1115.020591][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1115.026042][ C1] alloc_pages_current+0x685/0xb50 [ 1115.031146][ C1] alloc_slab_page+0x11c/0x1240 [ 1115.035995][ C1] new_slab+0x2bf/0x10c0 [ 1115.040235][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1115.044909][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1115.049753][ C1] inet_twsk_alloc+0x154/0xbd0 [ 1115.054507][ C1] tcp_time_wait+0xd9/0x1150 [ 1115.059083][ C1] tcp_fin+0x23a/0x9f0 [ 1115.063145][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1115.067988][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1115.073442][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1115.078201][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1115.082700][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1115.088413][ C1] ip6_input+0x2dd/0x370 [ 1115.092687][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1115.097361][ C1] ipv6_rcv+0x3bb/0x460 [ 1115.101510][ C1] __netif_receive_skb+0x265/0x670 [ 1115.106628][ C1] process_backlog+0x50d/0xba0 [ 1115.111380][ C1] napi_poll+0x43b/0xfd0 [ 1115.115631][ C1] net_rx_action+0x35c/0xd40 [ 1115.120214][ C1] __do_softirq+0x2ea/0x7f5 13:29:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 13:29:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 13:29:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 13:29:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 13:29:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 13:29:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 13:29:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/206, 0xce) 13:29:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:36 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x2100, 0xffffff7f}, 0x14}}, 0x0) 13:29:36 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 13:29:37 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x29]}, @empty}}) 13:29:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:37 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x2100, 0xffffff7f}, 0x14}}, 0x0) 13:29:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 13:29:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x87, 0x20000000000001ff}}}], 0x18}, 0x0) 13:29:37 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x29]}, @empty}}) 13:29:38 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:38 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x2100, 0xffffff7f}, 0x14}}, 0x0) 13:29:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x2, &(0x7f0000000500)=[{}, {0x9}]}) 13:29:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x1, 0x8, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:29:38 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x29]}, @empty}}) 13:29:38 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x2100, 0xffffff7f}, 0x14}}, 0x0) 13:29:38 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x2, &(0x7f0000000500)=[{}, {0x9}]}) 13:29:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x1, 0x8, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:29:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 13:29:39 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x29]}, @empty}}) 13:29:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x2, &(0x7f0000000500)=[{}, {0x9}]}) 13:29:39 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:29:39 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:29:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x1, 0x8, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:29:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 13:29:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:29:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x2, &(0x7f0000000500)=[{}, {0x9}]}) [ 1121.255479][T28673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1121.439109][T28673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:29:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x1, 0x8, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:29:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x4}]}, 0x24}}, 0x0) 13:29:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 1121.865339][T28695] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:29:40 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1121.984565][T28697] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:41 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:29:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1122.254014][T28702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:29:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x4}]}, 0x24}}, 0x0) 13:29:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 1122.488436][T28721] input: syz1 as /devices/virtual/input/input44 13:29:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:29:41 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:29:41 executing program 1: setrlimit(0x7, &(0x7f0000a9cff8)) userfaultfd(0x0) [ 1122.794589][T28733] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:41 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1122.962172][T28735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:29:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x4}]}, 0x24}}, 0x0) [ 1123.219938][T28752] input: syz1 as /devices/virtual/input/input45 13:29:42 executing program 1: setrlimit(0x7, &(0x7f0000a9cff8)) userfaultfd(0x0) 13:29:42 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:29:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1123.475192][T28764] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13:29:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1123.732035][T28769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:29:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x4}]}, 0x24}}, 0x0) 13:29:42 executing program 1: setrlimit(0x7, &(0x7f0000a9cff8)) userfaultfd(0x0) [ 1123.981066][T28791] input: syz1 as /devices/virtual/input/input46 13:29:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1124.163808][T28798] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1124.436014][T28804] input: syz1 as /devices/virtual/input/input47 [ 1124.570535][T28811] input: syz1 as /devices/virtual/input/input48 13:29:43 executing program 1: setrlimit(0x7, &(0x7f0000a9cff8)) userfaultfd(0x0) 13:29:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x34}}, 0x0) 13:29:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:29:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x34}}, 0x0) 13:29:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) [ 1125.316909][T28830] input: syz1 as /devices/virtual/input/input49 13:29:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:29:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:29:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x34}}, 0x0) [ 1125.802756][T28844] input: syz1 as /devices/virtual/input/input50 [ 1125.928487][T28851] input: syz1 as /devices/virtual/input/input51 13:29:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:29:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 13:29:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1126.684969][T28863] input: syz1 as /devices/virtual/input/input52 13:29:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:29:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 13:29:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x34}}, 0x0) [ 1127.093232][T28875] input: syz1 as /devices/virtual/input/input53 [ 1127.279143][T28886] input: syz1 as /devices/virtual/input/input54 13:29:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 13:29:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:47 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:47 executing program 1: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208204) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=""/4096, 0x1000) 13:29:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) [ 1128.717166][T28912] new mount options do not match the existing superblock, will be ignored 13:29:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 13:29:47 executing program 1: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208204) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=""/4096, 0x1000) [ 1128.977927][T28912] new mount options do not match the existing superblock, will be ignored 13:29:48 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:48 executing program 1: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208204) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=""/4096, 0x1000) [ 1129.821299][T28934] new mount options do not match the existing superblock, will be ignored 13:29:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 13:29:49 executing program 1: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208204) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=""/4096, 0x1000) 13:29:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:49 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:49 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:50 executing program 1: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 13:29:50 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) [ 1131.591224][ C0] not chained 360000 origins [ 1131.595992][ C0] CPU: 0 PID: 1467 Comm: kworker/u4:11 Not tainted 5.8.0-rc5-syzkaller #0 [ 1131.604478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.614540][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 1131.620182][ C0] Call Trace: [ 1131.623458][ C0] [ 1131.626311][ C0] dump_stack+0x21c/0x280 [ 1131.630643][ C0] ? tcp_data_queue+0x1e5c/0xb570 [ 1131.635701][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1131.641421][ C0] ? net_rx_action+0x35c/0xd40 [ 1131.646180][ C0] ? __do_softirq+0x2ea/0x7f5 [ 1131.650851][ C0] ? asm_call_on_stack+0xf/0x20 [ 1131.655699][ C0] ? do_softirq_own_stack+0x7c/0xa0 [ 1131.660895][ C0] ? __local_bh_enable_ip+0x184/0x1d0 [ 1131.666274][ C0] ? local_bh_enable+0x36/0x40 [ 1131.671034][ C0] ? ip6_finish_output2+0x24b4/0x2a70 [ 1131.676406][ C0] ? __ip6_finish_output+0x9c0/0xa90 [ 1131.681689][ C0] ? ip6_finish_output+0x14b/0x4b0 [ 1131.686798][ C0] ? ip6_output+0x68d/0x7f0 [ 1131.691314][ C0] ? ip6_xmit+0x2475/0x2b40 [ 1131.695814][ C0] ? inet6_csk_xmit+0x47f/0x5a0 [ 1131.700668][ C0] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 1131.706043][ C0] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 1131.711070][ C0] ? __tcp_push_pending_frames+0x150/0x5c0 [ 1131.716878][ C0] ? tcp_send_fin+0x192a/0x1bc0 [ 1131.721752][ C0] ? tcp_shutdown+0x1f7/0x270 [ 1131.726435][ C0] ? inet_shutdown+0x44f/0x6d0 [ 1131.731207][ C0] ? kernel_sock_shutdown+0x98/0xc0 [ 1131.736413][ C0] ? rds_tcp_accept_one+0x1060/0x12c0 [ 1131.741793][ C0] ? rds_tcp_accept_worker+0x60/0x180 [ 1131.747173][ C0] ? process_one_work+0x1688/0x2140 [ 1131.752378][ C0] ? worker_thread+0x10bc/0x2730 [ 1131.757322][ C0] ? kthread+0x551/0x590 [ 1131.761578][ C0] ? ret_from_fork+0x1f/0x30 [ 1131.766174][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.771988][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1131.778089][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1131.783322][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.789141][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1131.795308][ C0] ? __msan_get_context_state+0x9/0x20 [ 1131.800775][ C0] ? __module_get+0x19/0x210 [ 1131.805379][ C0] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1131.811543][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1131.816751][ C0] __msan_chain_origin+0x50/0x90 [ 1131.821696][ C0] tcp_time_wait+0x102b/0x1150 [ 1131.826471][ C0] tcp_fin+0x23a/0x9f0 [ 1131.830554][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1131.835417][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.841232][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1131.847298][ C0] ? tcp_urg+0xb22/0x10c0 [ 1131.851640][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1131.857097][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1131.862328][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.868146][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1131.873394][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1131.878070][T28982] new mount options do not match the existing superblock, will be ignored [ 1131.878183][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1131.891157][ C0] ? tcp_v6_rcv+0x1541/0x5a80 [ 1131.895840][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1131.901040][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1131.906807][ C0] ip6_input+0x2dd/0x370 [ 1131.911060][ C0] ? ip6_input+0x370/0x370 [ 1131.915480][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1131.921373][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1131.926059][ C0] ipv6_rcv+0x3bb/0x460 [ 1131.930226][ C0] ? local_bh_enable+0x40/0x40 [ 1131.935002][ C0] __netif_receive_skb+0x265/0x670 [ 1131.940112][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1131.945702][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1131.950562][ C0] process_backlog+0x50d/0xba0 [ 1131.955330][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.961150][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1131.966440][ C0] napi_poll+0x43b/0xfd0 [ 1131.970694][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1131.975914][ C0] net_rx_action+0x35c/0xd40 [ 1131.980519][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1131.985326][ C0] __do_softirq+0x2ea/0x7f5 [ 1131.989847][ C0] asm_call_on_stack+0xf/0x20 [ 1131.994509][ C0] [ 1131.997451][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1132.002481][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1132.007679][ C0] local_bh_enable+0x36/0x40 [ 1132.012266][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 1132.017480][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.022681][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1132.027799][ C0] ip6_finish_output+0x14b/0x4b0 [ 1132.032748][ C0] ip6_output+0x68d/0x7f0 [ 1132.037120][ C0] ? ip6_output+0x7f0/0x7f0 [ 1132.041621][ C0] ? ac6_seq_show+0x200/0x200 [ 1132.046294][ C0] ip6_xmit+0x2475/0x2b40 [ 1132.050641][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 1132.055152][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 1132.059845][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1132.065479][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1132.070706][ C0] tcp_write_xmit+0x4f5b/0xe6a0 [ 1132.075581][ C0] ? kmsan_get_metadata+0xb0/0x180 [ 1132.080730][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.085924][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.091127][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.096328][ C0] __tcp_push_pending_frames+0x150/0x5c0 [ 1132.101983][ C0] tcp_send_fin+0x192a/0x1bc0 [ 1132.106665][ C0] ? tcp_set_state+0x9ec/0xb40 [ 1132.111426][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.116626][ C0] tcp_shutdown+0x1f7/0x270 [ 1132.121129][ C0] ? tcp_set_state+0xb40/0xb40 [ 1132.125898][ C0] inet_shutdown+0x44f/0x6d0 [ 1132.130499][ C0] ? inet_recvmsg+0x6b0/0x6b0 [ 1132.135179][ C0] kernel_sock_shutdown+0x98/0xc0 [ 1132.140208][ C0] rds_tcp_accept_one+0x1060/0x12c0 [ 1132.145415][ C0] rds_tcp_accept_worker+0x60/0x180 [ 1132.150617][ C0] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 1132.155644][ C0] process_one_work+0x1688/0x2140 [ 1132.160731][ C0] worker_thread+0x10bc/0x2730 [ 1132.165497][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1132.170709][ C0] kthread+0x551/0x590 [ 1132.174779][ C0] ? process_one_work+0x2140/0x2140 [ 1132.179978][ C0] ? kthread_blkcg+0x110/0x110 [ 1132.184750][ C0] ret_from_fork+0x1f/0x30 [ 1132.189176][ C0] Uninit was stored to memory at: [ 1132.194199][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.199913][ C0] __msan_chain_origin+0x50/0x90 [ 1132.204861][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1132.209627][ C0] tcp_time_wait+0xd9/0x1150 [ 1132.214231][ C0] tcp_fin+0x23a/0x9f0 [ 1132.218293][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.223136][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.228585][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.233344][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.237847][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.243558][ C0] ip6_input+0x2dd/0x370 [ 1132.247796][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.252465][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.256617][ C0] __netif_receive_skb+0x265/0x670 [ 1132.261730][ C0] process_backlog+0x50d/0xba0 [ 1132.266488][ C0] napi_poll+0x43b/0xfd0 [ 1132.270726][ C0] net_rx_action+0x35c/0xd40 [ 1132.275311][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.279793][ C0] [ 1132.282111][ C0] Uninit was stored to memory at: [ 1132.287142][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.292853][ C0] __msan_chain_origin+0x50/0x90 [ 1132.297816][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 1132.303012][ C0] tcp_time_wait+0xf7b/0x1150 [ 1132.307698][ C0] tcp_fin+0x23a/0x9f0 [ 1132.311761][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.316605][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.322083][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.326847][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.331352][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.337084][ C0] ip6_input+0x2dd/0x370 [ 1132.341321][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.346033][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.350183][ C0] __netif_receive_skb+0x265/0x670 [ 1132.355294][ C0] process_backlog+0x50d/0xba0 [ 1132.360052][ C0] napi_poll+0x43b/0xfd0 [ 1132.364288][ C0] net_rx_action+0x35c/0xd40 [ 1132.368876][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.373359][ C0] [ 1132.375692][ C0] Uninit was stored to memory at: [ 1132.380719][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.386442][ C0] __msan_chain_origin+0x50/0x90 [ 1132.391375][ C0] tcp_time_wait+0x1064/0x1150 [ 1132.396132][ C0] tcp_fin+0x23a/0x9f0 [ 1132.400194][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.405042][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.410497][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.415270][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.419775][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.425506][ C0] ip6_input+0x2dd/0x370 [ 1132.429760][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.434520][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.438679][ C0] __netif_receive_skb+0x265/0x670 [ 1132.443790][ C0] process_backlog+0x50d/0xba0 [ 1132.448548][ C0] napi_poll+0x43b/0xfd0 [ 1132.452786][ C0] net_rx_action+0x35c/0xd40 [ 1132.457372][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.461860][ C0] [ 1132.464174][ C0] Uninit was stored to memory at: [ 1132.469196][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.474908][ C0] __msan_chain_origin+0x50/0x90 [ 1132.479846][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1132.484604][ C0] tcp_time_wait+0xd9/0x1150 [ 1132.489187][ C0] tcp_fin+0x23a/0x9f0 [ 1132.493253][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.498103][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.503555][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.508314][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.512818][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.518541][ C0] ip6_input+0x2dd/0x370 [ 1132.522776][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.527445][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.531600][ C0] __netif_receive_skb+0x265/0x670 [ 1132.536709][ C0] process_backlog+0x50d/0xba0 [ 1132.541468][ C0] napi_poll+0x43b/0xfd0 [ 1132.545713][ C0] net_rx_action+0x35c/0xd40 [ 1132.550313][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.554799][ C0] [ 1132.557235][ C0] Uninit was stored to memory at: [ 1132.562260][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.567978][ C0] __msan_chain_origin+0x50/0x90 [ 1132.572920][ C0] __inet_twsk_schedule+0x289/0x2f0 [ 1132.578132][ C0] tcp_time_wait+0xf7b/0x1150 [ 1132.582810][ C0] tcp_fin+0x23a/0x9f0 [ 1132.586871][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.591720][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.597172][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.601934][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.606437][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.612153][ C0] ip6_input+0x2dd/0x370 [ 1132.616389][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.621061][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.625216][ C0] __netif_receive_skb+0x265/0x670 [ 1132.630348][ C0] process_backlog+0x50d/0xba0 [ 1132.635110][ C0] napi_poll+0x43b/0xfd0 [ 1132.639350][ C0] net_rx_action+0x35c/0xd40 [ 1132.643939][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.648425][ C0] [ 1132.650745][ C0] Uninit was stored to memory at: [ 1132.655776][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.661493][ C0] __msan_chain_origin+0x50/0x90 [ 1132.666429][ C0] tcp_time_wait+0x1064/0x1150 [ 1132.671191][ C0] tcp_fin+0x23a/0x9f0 [ 1132.675262][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.680125][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.685592][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.690355][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.694859][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.700583][ C0] ip6_input+0x2dd/0x370 [ 1132.704826][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.709502][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.713690][ C0] __netif_receive_skb+0x265/0x670 [ 1132.718805][ C0] process_backlog+0x50d/0xba0 [ 1132.723682][ C0] napi_poll+0x43b/0xfd0 [ 1132.727930][ C0] net_rx_action+0x35c/0xd40 [ 1132.732523][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.737015][ C0] [ 1132.739368][ C0] Uninit was stored to memory at: [ 1132.744400][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1132.750118][ C0] __msan_chain_origin+0x50/0x90 [ 1132.755058][ C0] inet_twsk_alloc+0xaf3/0xbd0 [ 1132.759817][ C0] tcp_time_wait+0xd9/0x1150 [ 1132.764404][ C0] tcp_fin+0x23a/0x9f0 [ 1132.768579][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.773427][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.778884][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.783654][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.788162][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.793886][ C0] ip6_input+0x2dd/0x370 [ 1132.798130][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.802803][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.806964][ C0] __netif_receive_skb+0x265/0x670 [ 1132.812084][ C0] process_backlog+0x50d/0xba0 [ 1132.816857][ C0] napi_poll+0x43b/0xfd0 [ 1132.821102][ C0] net_rx_action+0x35c/0xd40 [ 1132.825692][ C0] __do_softirq+0x2ea/0x7f5 [ 1132.830177][ C0] [ 1132.832498][ C0] Uninit was created at: [ 1132.836753][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1132.842401][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1132.847189][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1132.852647][ C0] alloc_pages_current+0x685/0xb50 [ 1132.857753][ C0] alloc_slab_page+0x11c/0x1240 [ 1132.862604][ C0] new_slab+0x2bf/0x10c0 [ 1132.866845][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1132.871519][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1132.876367][ C0] inet_twsk_alloc+0x154/0xbd0 [ 1132.881128][ C0] tcp_time_wait+0xd9/0x1150 [ 1132.885731][ C0] tcp_fin+0x23a/0x9f0 [ 1132.889794][ C0] tcp_data_queue+0x1e5c/0xb570 [ 1132.894647][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 1132.900105][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1132.904870][ C0] tcp_v6_rcv+0x56db/0x5a80 [ 1132.909375][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1132.915091][ C0] ip6_input+0x2dd/0x370 [ 1132.919327][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1132.923996][ C0] ipv6_rcv+0x3bb/0x460 [ 1132.928182][ C0] __netif_receive_skb+0x265/0x670 [ 1132.933292][ C0] process_backlog+0x50d/0xba0 [ 1132.938061][ C0] napi_poll+0x43b/0xfd0 [ 1132.942317][ C0] net_rx_action+0x35c/0xd40 13:29:51 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) [ 1132.946918][ C0] __do_softirq+0x2ea/0x7f5 13:29:51 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) [ 1133.054057][T28976] new mount options do not match the existing superblock, will be ignored [ 1133.294951][T28992] new mount options do not match the existing superblock, will be ignored 13:29:52 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) [ 1133.777189][T28999] new mount options do not match the existing superblock, will be ignored [ 1133.811250][T28998] new mount options do not match the existing superblock, will be ignored 13:29:53 executing program 1: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:53 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:53 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 13:29:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) [ 1135.123094][T29019] new mount options do not match the existing superblock, will be ignored [ 1135.292907][T29020] new mount options do not match the existing superblock, will be ignored [ 1135.314704][T29018] new mount options do not match the existing superblock, will be ignored 13:29:54 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:54 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:54 executing program 1: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) [ 1135.913777][T29047] new mount options do not match the existing superblock, will be ignored [ 1136.148538][T29052] new mount options do not match the existing superblock, will be ignored [ 1136.218645][T29053] new mount options do not match the existing superblock, will be ignored 13:29:55 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:55 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:55 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/snapshot\x00', 0x0, 0x0) [ 1136.791026][T29063] new mount options do not match the existing superblock, will be ignored [ 1136.941606][T29068] new mount options do not match the existing superblock, will be ignored 13:29:56 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:56 executing program 0: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:56 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/snapshot\x00', 0x0, 0x0) [ 1137.562767][T29080] new mount options do not match the existing superblock, will be ignored [ 1137.745777][T29081] new mount options do not match the existing superblock, will be ignored 13:29:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:57 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/snapshot\x00', 0x0, 0x0) 13:29:57 executing program 3: clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, 0x0, 0x0) 13:29:57 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 13:29:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:57 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) 13:29:57 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/snapshot\x00', 0x0, 0x0) [ 1138.858185][T29099] new mount options do not match the existing superblock, will be ignored 13:29:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:58 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) 13:29:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:59 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) 13:29:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:59 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:29:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x483}]}) 13:29:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000001300)={0x30}, 0x30) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 13:29:59 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) [ 1141.192036][T28236] usb 1-1: new high-speed USB device number 40 using dummy_hcd 13:30:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 13:30:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 1141.528838][T29213] xt_CT: You must specify a L4 protocol and not use inversions on it 13:30:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x3, [@union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @const, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "b8"}]}, {0x0, [0x0]}}, 0x0, 0x117}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 13:30:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/219) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02969341", 0x6}], 0x1000000000000006, 0x0, 0x0) [ 1141.592837][T28236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.603157][T28236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1141.613098][T28236] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1141.622294][T28236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:30:00 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x17a, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 1141.861361][T28236] usb 1-1: config 0 descriptor?? [ 1141.886149][T29218] dump_vmcs: 3 callbacks suppressed [ 1141.886168][T29218] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1141.924923][T29225] xt_CT: You must specify a L4 protocol and not use inversions on it 13:30:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 1142.131520][T28236] rtl8192cu: Chip version 0x10 [ 1142.346408][T29251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.792819][T28236] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1142.800214][T28236] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1142.991261][T16856] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1143.001831][T16856] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1143.011128][T16856] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1143.018800][T16856] rtlwifi: Selected firmware is not available [ 1143.073911][T16856] usb 1-1: USB disconnect, device number 40 [ 1143.861618][T10190] usb 1-1: new high-speed USB device number 41 using dummy_hcd 13:30:02 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:02 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000151300000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0) 13:30:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/219) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02969341", 0x6}], 0x1000000000000006, 0x0, 0x0) 13:30:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 1144.213305][T29292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1144.250714][T29294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/219) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02969341", 0x6}], 0x1000000000000006, 0x0, 0x0) [ 1144.448823][T29308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:03 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) 13:30:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:03 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000151300000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0) [ 1144.921222][ T12] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1144.991232][T10190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.001521][T10190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1145.011432][T10190] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1145.020538][T10190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.055452][T29321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/219) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02969341", 0x6}], 0x1000000000000006, 0x0, 0x0) [ 1145.178687][T10190] usb 1-1: config 0 descriptor?? [ 1145.205309][T29323] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1145.282755][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.293079][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1145.303625][ T12] usb 5-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1145.312974][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.472424][T10190] rtl8192cu: Chip version 0x10 13:30:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1145.588267][ T12] usb 5-1: config 0 descriptor?? [ 1145.799252][T29348] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1145.864574][ T12] rtl8192cu: Chip version 0x10 [ 1146.155118][T10190] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1146.164882][T10190] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1146.316973][T16856] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1146.327334][T16856] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1146.336681][T16856] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1146.344458][T16856] rtlwifi: Selected firmware is not available [ 1146.453844][T16856] usb 1-1: USB disconnect, device number 41 [ 1146.521027][ T12] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1146.543774][ T12] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1146.616070][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1146.626915][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1146.636264][ T8692] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1146.644229][ T8692] rtlwifi: Selected firmware is not available [ 1146.738881][ T12] usb 5-1: USB disconnect, device number 21 [ 1146.949800][ C0] not chained 370000 origins [ 1146.954519][ C0] CPU: 0 PID: 18153 Comm: kworker/u4:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1146.963009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.973109][ C0] Workqueue: krdsd rds_connect_worker [ 1146.978483][ C0] Call Trace: [ 1146.981797][ C0] [ 1146.984669][ C0] dump_stack+0x21c/0x280 [ 1146.989010][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 1146.994732][ C0] ? stack_trace_save+0x1a0/0x1a0 [ 1146.999762][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.004979][ C0] ? __should_failslab+0x1f6/0x290 [ 1147.010091][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.015292][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.021105][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 1147.027279][ C0] ? tcp_parse_options+0x206d/0x2100 [ 1147.032584][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.037783][ C0] __msan_chain_origin+0x50/0x90 [ 1147.042723][ C0] tcp_conn_request+0x19a0/0x4c30 [ 1147.047765][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.052965][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.058771][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.063979][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.069094][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 1147.074378][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.079782][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.084989][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.090810][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.096019][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.101227][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.105999][ C0] ? tcp_v6_fill_cb+0x501/0x5f0 [ 1147.110862][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.115404][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 1147.120598][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.126354][ C0] ip6_input+0x2dd/0x370 [ 1147.130601][ C0] ? ip6_input+0x370/0x370 [ 1147.135022][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1147.140912][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.145615][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.149783][ C0] ? local_bh_enable+0x40/0x40 [ 1147.154644][ C0] __netif_receive_skb+0x265/0x670 [ 1147.159757][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1147.165303][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1147.170179][ C0] process_backlog+0x50d/0xba0 [ 1147.174951][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.180766][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1147.186045][ C0] napi_poll+0x43b/0xfd0 [ 1147.190288][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.195488][ C0] net_rx_action+0x35c/0xd40 [ 1147.200099][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1147.204885][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.209404][ C0] asm_call_on_stack+0xf/0x20 [ 1147.214171][ C0] [ 1147.217216][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1147.222247][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 1147.227482][ C0] local_bh_enable+0x36/0x40 [ 1147.232076][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 1147.237314][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.242525][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1147.247660][ C0] ip6_finish_output+0x14b/0x4b0 [ 1147.252612][ C0] ip6_output+0x68d/0x7f0 [ 1147.256955][ C0] ? ip6_output+0x7f0/0x7f0 [ 1147.261457][ C0] ? ac6_seq_show+0x200/0x200 [ 1147.266141][ C0] ip6_xmit+0x2475/0x2b40 [ 1147.270496][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 1147.275011][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 1147.279794][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1147.285430][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1147.290630][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1147.296211][ C0] tcp_connect+0x153f/0x3bb0 [ 1147.300800][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1147.306086][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.311894][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 1147.317802][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 1147.322687][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 1147.327884][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 1147.333357][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.338560][ C0] inet_stream_connect+0x101/0x180 [ 1147.343710][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 1147.349340][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 1147.354988][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.360210][ C0] ? rds_tcp_state_change+0x400/0x400 [ 1147.365583][ C0] rds_connect_worker+0x36b/0x550 [ 1147.370618][ C0] ? rds_addr_cmp+0x290/0x290 [ 1147.375294][ C0] process_one_work+0x1688/0x2140 [ 1147.380332][ C0] worker_thread+0x10bc/0x2730 [ 1147.385096][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1147.390312][ C0] kthread+0x551/0x590 [ 1147.394385][ C0] ? process_one_work+0x2140/0x2140 [ 1147.399581][ C0] ? kthread_blkcg+0x110/0x110 [ 1147.404341][ C0] ret_from_fork+0x1f/0x30 [ 1147.408863][ C0] Uninit was stored to memory at: [ 1147.413887][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.419601][ C0] __msan_chain_origin+0x50/0x90 [ 1147.424536][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1147.429554][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.434679][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.440047][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.444821][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.449324][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.455040][ C0] ip6_input+0x2dd/0x370 [ 1147.459275][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.463946][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.468111][ C0] __netif_receive_skb+0x265/0x670 [ 1147.473215][ C0] process_backlog+0x50d/0xba0 [ 1147.477974][ C0] napi_poll+0x43b/0xfd0 [ 1147.482223][ C0] net_rx_action+0x35c/0xd40 [ 1147.486806][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.491297][ C0] [ 1147.493617][ C0] Uninit was stored to memory at: [ 1147.498646][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.504367][ C0] __msan_chain_origin+0x50/0x90 [ 1147.509306][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1147.514595][ C0] tcp_conn_request+0x3046/0x4c30 [ 1147.519623][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.524759][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.530127][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.534895][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.539398][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.545132][ C0] ip6_input+0x2dd/0x370 [ 1147.549370][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.554043][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.558203][ C0] __netif_receive_skb+0x265/0x670 [ 1147.563328][ C0] process_backlog+0x50d/0xba0 [ 1147.568086][ C0] napi_poll+0x43b/0xfd0 [ 1147.572354][ C0] net_rx_action+0x35c/0xd40 [ 1147.576945][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.581432][ C0] [ 1147.583752][ C0] Uninit was stored to memory at: [ 1147.588793][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.594509][ C0] __msan_chain_origin+0x50/0x90 [ 1147.599437][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1147.604469][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.609592][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.614984][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.619758][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.624267][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.629984][ C0] ip6_input+0x2dd/0x370 [ 1147.634225][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.638899][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.643061][ C0] __netif_receive_skb+0x265/0x670 [ 1147.648171][ C0] process_backlog+0x50d/0xba0 [ 1147.652931][ C0] napi_poll+0x43b/0xfd0 [ 1147.657172][ C0] net_rx_action+0x35c/0xd40 [ 1147.661758][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.666242][ C0] [ 1147.668556][ C0] Uninit was stored to memory at: [ 1147.673589][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.679302][ C0] __msan_chain_origin+0x50/0x90 [ 1147.684232][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1147.689513][ C0] tcp_conn_request+0x3046/0x4c30 [ 1147.694539][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.699647][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.705016][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.709773][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.714273][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.720012][ C0] ip6_input+0x2dd/0x370 [ 1147.724246][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.728918][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.733074][ C0] __netif_receive_skb+0x265/0x670 [ 1147.738180][ C0] process_backlog+0x50d/0xba0 [ 1147.742954][ C0] napi_poll+0x43b/0xfd0 [ 1147.747192][ C0] net_rx_action+0x35c/0xd40 [ 1147.751779][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.756293][ C0] [ 1147.758614][ C0] Uninit was stored to memory at: [ 1147.763642][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.769371][ C0] __msan_chain_origin+0x50/0x90 [ 1147.774308][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1147.779331][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.784441][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.789821][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.794590][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.799110][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.804857][ C0] ip6_input+0x2dd/0x370 [ 1147.809103][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.813779][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.817943][ C0] __netif_receive_skb+0x265/0x670 [ 1147.823073][ C0] process_backlog+0x50d/0xba0 [ 1147.827837][ C0] napi_poll+0x43b/0xfd0 [ 1147.832167][ C0] net_rx_action+0x35c/0xd40 [ 1147.836842][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.841327][ C0] [ 1147.843648][ C0] Uninit was stored to memory at: [ 1147.848685][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.854403][ C0] __msan_chain_origin+0x50/0x90 [ 1147.859338][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 1147.864653][ C0] tcp_conn_request+0x3046/0x4c30 [ 1147.869679][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.874788][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.880156][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.884913][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.889418][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.895139][ C0] ip6_input+0x2dd/0x370 [ 1147.899381][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.904070][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.908233][ C0] __netif_receive_skb+0x265/0x670 [ 1147.913338][ C0] process_backlog+0x50d/0xba0 [ 1147.918099][ C0] napi_poll+0x43b/0xfd0 [ 1147.922340][ C0] net_rx_action+0x35c/0xd40 [ 1147.926927][ C0] __do_softirq+0x2ea/0x7f5 [ 1147.931417][ C0] [ 1147.933738][ C0] Uninit was stored to memory at: [ 1147.938773][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1147.944497][ C0] __msan_chain_origin+0x50/0x90 [ 1147.949428][ C0] tcp_conn_request+0x19d6/0x4c30 [ 1147.954450][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1147.959560][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1147.964932][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1147.969820][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1147.974333][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1147.980060][ C0] ip6_input+0x2dd/0x370 [ 1147.984299][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1147.988976][ C0] ipv6_rcv+0x3bb/0x460 [ 1147.993138][ C0] __netif_receive_skb+0x265/0x670 [ 1147.998248][ C0] process_backlog+0x50d/0xba0 [ 1148.003012][ C0] napi_poll+0x43b/0xfd0 [ 1148.007256][ C0] net_rx_action+0x35c/0xd40 [ 1148.011846][ C0] __do_softirq+0x2ea/0x7f5 [ 1148.016330][ C0] [ 1148.018685][ C0] Uninit was created at: [ 1148.022929][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 1148.028562][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 1148.033339][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 1148.038800][ C0] alloc_pages_current+0x685/0xb50 [ 1148.043909][ C0] alloc_slab_page+0x11c/0x1240 [ 1148.048769][ C0] new_slab+0x2bf/0x10c0 [ 1148.053037][ C0] ___slab_alloc+0xcd3/0x18a0 [ 1148.057715][ C0] kmem_cache_alloc+0xb70/0xc50 [ 1148.062572][ C0] inet_reqsk_alloc+0xaf/0x910 [ 1148.067333][ C0] tcp_conn_request+0x8dc/0x4c30 [ 1148.072283][ C0] tcp_v6_conn_request+0x27f/0x330 [ 1148.077414][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 1148.082782][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1148.087548][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 1148.092060][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1148.097779][ C0] ip6_input+0x2dd/0x370 [ 1148.102021][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 1148.106701][ C0] ipv6_rcv+0x3bb/0x460 [ 1148.110861][ C0] __netif_receive_skb+0x265/0x670 [ 1148.115976][ C0] process_backlog+0x50d/0xba0 [ 1148.120738][ C0] napi_poll+0x43b/0xfd0 [ 1148.124984][ C0] net_rx_action+0x35c/0xd40 [ 1148.129608][ C0] __do_softirq+0x2ea/0x7f5 13:30:07 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:07 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) 13:30:07 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) 13:30:07 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000151300000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0) 13:30:07 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) [ 1148.491247][T29416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:07 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:07 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) [ 1148.830835][ T12] usb 1-1: new high-speed USB device number 42 using dummy_hcd 13:30:07 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) 13:30:08 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000151300000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0) [ 1149.261648][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.271721][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1149.281743][ T12] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1149.291012][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:30:08 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) [ 1149.420261][ T12] usb 1-1: config 0 descriptor?? 13:30:08 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 13:30:08 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, 'mime_type+'}}, 0x33) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x33, 0x0) [ 1149.596663][T29447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.621141][ T8693] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1149.681619][ T12] rtl8192cu: Chip version 0x10 [ 1149.992138][ T8693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.002450][ T8693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1150.012476][ T8693] usb 5-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1150.021970][ T8693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.218336][ T8693] usb 5-1: config 0 descriptor?? [ 1150.360132][ T12] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1150.384278][ T12] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1150.442958][ T8692] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1150.453458][ T8692] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1150.462911][ T8692] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1150.470788][ T8692] rtlwifi: Selected firmware is not available [ 1150.500927][ T8693] rtl8192cu: Chip version 0x10 [ 1150.577909][ T8692] usb 1-1: USB disconnect, device number 42 [ 1151.161290][ T8693] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1151.176389][ T8693] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin 13:30:10 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:10 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 13:30:10 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 13:30:10 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) r1 = socket(0x2, 0x803, 0xff) dup3(r1, r0, 0x0) 13:30:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) [ 1151.412957][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1151.423483][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1151.432922][ T8692] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1151.440824][ T8692] rtlwifi: Selected firmware is not available [ 1151.454428][ T8693] usb 5-1: USB disconnect, device number 22 13:30:10 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) 13:30:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:30:11 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) r1 = socket(0x2, 0x803, 0xff) dup3(r1, r0, 0x0) [ 1152.060661][T16856] usb 1-1: new high-speed USB device number 43 using dummy_hcd 13:30:11 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) [ 1152.442350][T16856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.452615][T16856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1152.462577][T16856] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1152.471786][T16856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:30:11 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 13:30:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:30:11 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) r1 = socket(0x2, 0x803, 0xff) dup3(r1, r0, 0x0) [ 1152.610864][T16856] usb 1-1: config 0 descriptor?? [ 1152.680686][ T8693] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1152.871027][T16856] rtl8192cu: Chip version 0x10 [ 1153.042401][ T8693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.052565][ T8693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1153.062695][ T8693] usb 5-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1153.072114][ T8693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.210457][ T8693] usb 5-1: config 0 descriptor?? [ 1153.470380][ T8693] rtl8192cu: Chip version 0x10 [ 1153.522899][T16856] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1153.566297][T16856] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1153.785789][ T3218] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1153.796366][ T3218] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1153.805763][ T3218] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1153.813514][ T3218] rtlwifi: Selected firmware is not available [ 1153.843994][T16856] usb 1-1: USB disconnect, device number 43 [ 1154.132954][ T8693] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1154.147158][ T8693] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1154.278440][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1154.288936][ T8692] usb 5-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1154.298428][ T8692] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1154.306273][ T8692] rtlwifi: Selected firmware is not available 13:30:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) r1 = socket(0x2, 0x803, 0xff) dup3(r1, r0, 0x0) 13:30:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:30:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = accept(r0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000200)) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x0) 13:30:13 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) [ 1154.442303][ T8692] usb 5-1: USB disconnect, device number 23 13:30:14 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:14 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400000008000000"], 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:14 executing program 5: unshare(0x2000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 13:30:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:15 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400000008000000"], 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:15 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:15 executing program 5: unshare(0x2000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 13:30:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = accept(r0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000200)) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x0) 13:30:15 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:15 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400000008000000"], 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:15 executing program 5: unshare(0x2000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 13:30:16 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:16 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:16 executing program 5: unshare(0x2000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 13:30:16 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:17 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400000008000000"], 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = accept(r0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000200)) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x0) 13:30:17 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:17 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:17 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:17 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:17 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:18 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:18 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:18 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 13:30:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = accept(r0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000200)) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x0) 13:30:19 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:19 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:19 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) 13:30:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:19 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:20 executing program 0: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) 13:30:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) 13:30:20 executing program 4: accept$inet6(0xffffffffffffffff, 0x0, 0x0) 13:30:20 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @rand_addr, @broadcast}, '\x00\x00\x00\x00'}}}}, 0x0) 13:30:20 executing program 0: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) 13:30:21 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 13:30:21 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @rand_addr, @broadcast}, '\x00\x00\x00\x00'}}}}, 0x0) 13:30:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) 13:30:21 executing program 3: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) 13:30:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 13:30:21 executing program 0: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) 13:30:21 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @rand_addr, @broadcast}, '\x00\x00\x00\x00'}}}}, 0x0) 13:30:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) 13:30:21 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x500, 0x0) [ 1162.720102][T29772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:30:21 executing program 3: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) [ 1162.892847][T29776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:30:22 executing program 0: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) 13:30:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 13:30:22 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x500, 0x0) 13:30:22 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @rand_addr, @broadcast}, '\x00\x00\x00\x00'}}}}, 0x0) 13:30:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) write(0xffffffffffffffff, &(0x7f0000000000)="12", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000540)={r2, 0x0, 0x20}, &(0x7f0000000580)=0x18) 13:30:22 executing program 3: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x40044591) [ 1163.608604][T29794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:30:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) 13:30:22 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x500, 0x0) 13:30:22 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) 13:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 13:30:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) [ 1164.492438][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:30:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) 13:30:23 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x500, 0x0) 13:30:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) write(0xffffffffffffffff, &(0x7f0000000000)="12", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000540)={r2, 0x0, 0x20}, &(0x7f0000000580)=0x18) 13:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 13:30:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) 13:30:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) [ 1165.385625][T29845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:30:24 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) 13:30:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000015c0)={0x4, 0x0, [{0x2, 0x7f, &(0x7f0000000300)=""/127}, {0x2000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0x6f, &(0x7f0000001380)=""/111}, {0x0, 0x0, 0x0}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r3, r2, 0x0) 13:30:25 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) write(0xffffffffffffffff, &(0x7f0000000000)="12", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000540)={r2, 0x0, 0x20}, &(0x7f0000000580)=0x18) [ 1166.431887][T29865] not chained 380000 origins [ 1166.436522][T29865] CPU: 1 PID: 29865 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 1166.445274][T29865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.455422][T29865] Call Trace: [ 1166.458723][T29865] dump_stack+0x21c/0x280 [ 1166.463065][T29865] kmsan_internal_chain_origin+0x6f/0x130 [ 1166.468878][T29865] ? aa_sk_perm+0x7da/0xe70 [ 1166.473415][T29865] ? kmsan_get_metadata+0x116/0x180 [ 1166.478626][T29865] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.484460][T29865] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1166.490535][T29865] ? kmsan_get_metadata+0x116/0x180 [ 1166.495745][T29865] ? kmsan_set_origin_checked+0x95/0xf0 [ 1166.501299][T29865] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1166.507376][T29865] ? _copy_from_user+0x221/0x330 [ 1166.512322][T29865] ? kmsan_get_metadata+0x116/0x180 [ 1166.517528][T29865] __msan_chain_origin+0x50/0x90 [ 1166.522471][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.527965][T29865] ? __msan_get_context_state+0x9/0x20 [ 1166.533435][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.538133][T29865] ? __msan_poison_alloca+0xf0/0x120 [ 1166.543425][T29865] ? ktime_get_ts64+0x79f/0x8d0 [ 1166.548302][T29865] ? _copy_to_user+0x203/0x2b0 [ 1166.553075][T29865] ? kmsan_get_metadata+0x116/0x180 [ 1166.558291][T29865] ? __prepare_exit_to_usermode+0x16c/0x560 [ 1166.564189][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.568960][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.573821][T29865] do_syscall_64+0xad/0x160 [ 1166.578331][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.584222][T29865] RIP: 0033:0x45d5f9 [ 1166.588213][T29865] Code: Bad RIP value. [ 1166.592274][T29865] RSP: 002b:00007fe000194c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1166.600751][T29865] RAX: ffffffffffffffda RBX: 0000000000027a40 RCX: 000000000045d5f9 [ 1166.608722][T29865] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 1166.616692][T29865] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1166.624660][T29865] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1166.632632][T29865] R13: 000000000169fb6f R14: 00007fe0001959c0 R15: 000000000118cf4c [ 1166.640609][T29865] Uninit was stored to memory at: [ 1166.645776][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.651497][T29865] __msan_chain_origin+0x50/0x90 [ 1166.656424][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.661863][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.666535][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.671281][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.676119][T29865] do_syscall_64+0xad/0x160 [ 1166.680607][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.686471][T29865] [ 1166.688783][T29865] Uninit was stored to memory at: [ 1166.693789][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.699488][T29865] __msan_chain_origin+0x50/0x90 [ 1166.704405][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.709841][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.714502][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.719247][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.724086][T29865] do_syscall_64+0xad/0x160 [ 1166.728572][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.734442][T29865] [ 1166.736751][T29865] Uninit was stored to memory at: [ 1166.741765][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.747470][T29865] __msan_chain_origin+0x50/0x90 [ 1166.752395][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.757835][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.762499][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.767244][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.772099][T29865] do_syscall_64+0xad/0x160 [ 1166.776583][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.782444][T29865] [ 1166.784747][T29865] Uninit was stored to memory at: [ 1166.789754][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.795456][T29865] __msan_chain_origin+0x50/0x90 [ 1166.800375][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.805827][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.810488][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.815239][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.820087][T29865] do_syscall_64+0xad/0x160 [ 1166.824574][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.830441][T29865] [ 1166.832747][T29865] Uninit was stored to memory at: [ 1166.837758][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.843457][T29865] __msan_chain_origin+0x50/0x90 [ 1166.848462][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.853901][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.858571][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.863321][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.868156][T29865] do_syscall_64+0xad/0x160 [ 1166.872647][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.878522][T29865] [ 1166.880836][T29865] Uninit was stored to memory at: [ 1166.885849][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.891560][T29865] __msan_chain_origin+0x50/0x90 [ 1166.896485][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.901925][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.906584][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.911359][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.916200][T29865] do_syscall_64+0xad/0x160 [ 1166.920692][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.926558][T29865] [ 1166.928993][T29865] Uninit was stored to memory at: [ 1166.934007][T29865] kmsan_internal_chain_origin+0xad/0x130 [ 1166.939712][T29865] __msan_chain_origin+0x50/0x90 [ 1166.944634][T29865] __copy_msghdr_from_user+0x4e1/0xc20 [ 1166.950077][T29865] __sys_sendmmsg+0x638/0xfd0 [ 1166.954738][T29865] __se_sys_sendmmsg+0xbd/0xe0 [ 1166.959498][T29865] __x64_sys_sendmmsg+0x56/0x70 [ 1166.964335][T29865] do_syscall_64+0xad/0x160 [ 1166.968826][T29865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1166.974702][T29865] [ 1166.977012][T29865] Local variable ----msg_sys@__sys_sendmmsg created at: 13:30:25 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) [ 1166.984018][T29865] __sys_sendmmsg+0xbb/0xfd0 [ 1166.988606][T29865] __sys_sendmmsg+0xbb/0xfd0 13:30:26 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:26 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) write(0xffffffffffffffff, &(0x7f0000000000)="12", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000540)={r2, 0x0, 0x20}, &(0x7f0000000580)=0x18) 13:30:26 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:27 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:27 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:27 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 13:30:27 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 13:30:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:27 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xc000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 13:30:28 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x4, 0x0, 0x0) 13:30:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) 13:30:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) [ 1169.649642][T29917] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 13:30:28 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 13:30:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 13:30:28 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x4, 0x0, 0x0) 13:30:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 13:30:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) 13:30:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) [ 1170.338528][T29938] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 13:30:29 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 13:30:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 13:30:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) 13:30:29 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x4, 0x0, 0x0) 13:30:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) [ 1170.996235][T29955] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 13:30:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 13:30:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) 13:30:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 13:30:30 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x4, 0x0, 0x0) [ 1171.545226][T29968] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 13:30:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 13:30:30 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f04f6f07e5e12eff930465c770c5ed7dcfa8893dcc45b90999b9f3ebee982dce535ffeb34b6553d1e702afa0cd5715ec4dcccb43dc2a799b62fcc6925c088d3ce15f89af81687e1d3565b0d6946ce5abdb19a9c9bc0cf1c78d1e1bc21c198db883e8503743344a2eeb3f7e452dcda97534ef7659bd114c8f1", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:30:30 executing program 2: tgkill(0x0, 0x0, 0x0) 13:30:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) [ 1171.947424][ C1] sd 0:0:1:0: [sg0] tag#8020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1171.958156][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB: Test Unit Ready [ 1171.964915][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1171.974838][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1171.984618][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1171.994466][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.004253][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.014058][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.023866][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.033702][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.043609][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.053454][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.063319][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.073177][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.083053][ C1] sd 0:0:1:0: [sg0] tag#8020 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:31 executing program 2: tgkill(0x0, 0x0, 0x0) 13:30:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f04f6f07e5e12eff930465c770c5ed7dcfa8893dcc45b90999b9f3ebee982dce535ffeb34b6553d1e702afa0cd5715ec4dcccb43dc2a799b62fcc6925c088d3ce15f89af81687e1d3565b0d6946ce5abdb19a9c9bc0cf1c78d1e1bc21c198db883e8503743344a2eeb3f7e452dcda97534ef7659bd114c8f1", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:30:31 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) 13:30:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) 13:30:31 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f6486b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc71"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1172.903993][ C1] sd 0:0:1:0: [sg0] tag#8021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1172.914908][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB: Test Unit Ready [ 1172.921671][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.931518][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.941343][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.951232][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.961049][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.970887][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.980796][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1172.990649][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.000497][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.010405][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.020265][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.030127][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.039955][ C1] sd 0:0:1:0: [sg0] tag#8021 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:33 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:33 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) 13:30:33 executing program 2: tgkill(0x0, 0x0, 0x0) 13:30:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) [ 1174.798958][ C0] sd 0:0:1:0: [sg0] tag#6266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1174.809782][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB: Test Unit Ready [ 1174.816583][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.826566][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.836625][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.846540][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.856540][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.866414][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.876283][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.886154][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.895972][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.905796][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.915701][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.925515][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.935472][ C0] sd 0:0:1:0: [sg0] tag#6266 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1174.948175][ C1] sd 0:0:1:0: [sg0] tag#8022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1174.958780][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB: Test Unit Ready [ 1174.965527][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.975474][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.985389][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.995288][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.005173][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.015113][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.025142][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.035058][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:30:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) 13:30:34 executing program 2: tgkill(0x0, 0x0, 0x0) [ 1175.044920][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.054767][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.064597][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.074445][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1175.084270][ C1] sd 0:0:1:0: [sg0] tag#8022 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0xa, 0x0, "c60578a9f66246ab282961528198bd4cb35d7a37888062d97ef11af4fe7387d9"}) 13:30:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f04f6f07e5e12eff930465c770c5ed7dcfa8893dcc45b90999b9f3ebee982dce535ffeb34b6553d1e702afa0cd5715ec4dcccb43dc2a799b62fcc6925c088d3ce15f89af81687e1d3565b0d6946ce5abdb19a9c9bc0cf1c78d1e1bc21c198db883e8503743344a2eeb3f7e452dcda97534ef7659bd114c8f1", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:30:34 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f6486b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc71"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:34 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:34 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:34 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f6486b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc71"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:34 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1176.163174][ C1] sd 0:0:1:0: [sg0] tag#8023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1176.163789][ C0] sd 0:0:1:0: [sg0] tag#6267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1176.173785][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB: Test Unit Ready [ 1176.184315][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB: Test Unit Ready [ 1176.190844][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.197318][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.207016][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.216686][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.226521][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.236192][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.245854][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.255778][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.265469][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.275146][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.284820][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.294466][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.304123][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.313785][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.323456][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.333209][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.342928][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.352614][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.362312][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.372001][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.381669][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.391335][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.401010][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.410658][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1176.420314][ C1] sd 0:0:1:0: [sg0] tag#8023 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1176.429960][ C0] sd 0:0:1:0: [sg0] tag#6267 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:36 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1177.412519][ C0] sd 0:0:1:0: [sg0] tag#6268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1177.414219][ C1] sd 0:0:1:0: [sg0] tag#8024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1177.423288][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB: Test Unit Ready [ 1177.433853][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB: Test Unit Ready [ 1177.440433][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.446963][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.456682][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.466400][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.476109][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.485823][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.495543][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.505292][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.515056][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.524755][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.534465][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.544161][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.553866][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.563604][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.573318][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.583048][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.592774][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.602494][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.612198][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.621936][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.631663][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.641365][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.651072][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.660767][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.670471][ C0] sd 0:0:1:0: [sg0] tag#6268 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1177.680211][ C1] sd 0:0:1:0: [sg0] tag#8024 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1177.695536][ C1] sd 0:0:1:0: [sg0] tag#8025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1177.706246][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB: Test Unit Ready [ 1177.712997][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.722906][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.732870][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.742809][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.752771][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.762677][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.772625][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.782603][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.792519][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.802435][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:30:36 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1177.812463][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.822349][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1177.832276][ C1] sd 0:0:1:0: [sg0] tag#8025 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:36 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:36 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1178.096816][ C1] sd 0:0:1:0: [sg0] tag#8026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1178.107569][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB: Test Unit Ready [ 1178.114173][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.123993][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.133862][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.143708][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.153516][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.163366][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.173205][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.183082][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.192907][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.202717][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.212526][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.222338][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1178.232157][ C1] sd 0:0:1:0: [sg0] tag#8026 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:36 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1179.134179][ C0] sd 0:0:1:0: [sg0] tag#6270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1179.145046][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB: Test Unit Ready [ 1179.151919][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.161816][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.171725][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.181598][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.191513][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.201411][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.211285][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.221161][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.231033][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.240985][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.250862][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.260837][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.270816][ C0] sd 0:0:1:0: [sg0] tag#6270 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1179.278779][ C0] sd 0:0:1:0: [sg0] tag#6271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1179.289452][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB: Test Unit Ready [ 1179.296181][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.306114][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.307194][ C1] sd 0:0:1:0: [sg0] tag#8027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1179.315977][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.326429][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB: Test Unit Ready [ 1179.336129][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.342684][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.352369][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.362043][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.371747][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.381413][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.391110][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.400788][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.410488][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.420244][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.429910][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.439625][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.449321][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.459086][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.468751][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.478430][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.488123][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.497813][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.507477][ C0] sd 0:0:1:0: [sg0] tag#6271 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1179.517107][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.524816][ C0] sd 0:0:1:0: [sg0] tag#6208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1179.534367][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.544844][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB: Test Unit Ready [ 1179.554554][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.561081][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.570766][ C1] sd 0:0:1:0: [sg0] tag#8027 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1179.580445][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.597772][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.607653][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.617531][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.627449][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.637358][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.647196][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.657109][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.667035][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.676983][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:30:38 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1179.686977][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.696883][ C0] sd 0:0:1:0: [sg0] tag#6208 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f04f6f07e5e12eff930465c770c5ed7dcfa8893dcc45b90999b9f3ebee982dce535ffeb34b6553d1e702afa0cd5715ec4dcccb43dc2a799b62fcc6925c088d3ce15f89af81687e1d3565b0d6946ce5abdb19a9c9bc0cf1c78d1e1bc21c198db883e8503743344a2eeb3f7e452dcda97534ef7659bd114c8f1", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:30:38 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:38 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:38 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f6486b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc71"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1180.006928][ C0] sd 0:0:1:0: [sg0] tag#6209 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1180.017730][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB: Test Unit Ready [ 1180.024455][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.034511][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.044406][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.054303][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.064176][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.074017][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.083844][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.093668][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.103494][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.113311][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.123155][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.132961][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.142756][ C0] sd 0:0:1:0: [sg0] tag#6209 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1180.505255][ C0] sd 0:0:1:0: [sg0] tag#6210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1180.516081][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB: Test Unit Ready [ 1180.522900][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.532778][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.542693][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.552596][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.562502][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.572437][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.582365][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.592265][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.602188][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.612113][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.622041][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.631970][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.641897][ C0] sd 0:0:1:0: [sg0] tag#6210 CDB[c0]: 00 00 00 00 00 00 00 00 13:30:40 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040011) fchown(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x6, 0x8, 0x72, 0x2, 0xf63, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 13:30:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'vlan1\x00', @ifru_names='team_slave_0\x00'}) 13:30:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:30:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:40 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 13:30:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:30:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'vlan1\x00', @ifru_names='team_slave_0\x00'}) 13:30:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'vlan1\x00', @ifru_names='team_slave_0\x00'}) 13:30:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'vlan1\x00', @ifru_names='team_slave_0\x00'}) 13:30:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:30:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:42 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 13:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:30:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060410000900000000080000", 0x58}], 0x1) [ 1183.721003][ C1] not chained 390000 origins [ 1183.725724][ C1] CPU: 1 PID: 1576 Comm: kworker/u4:13 Not tainted 5.8.0-rc5-syzkaller #0 [ 1183.734234][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.744303][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 1183.749937][ C1] Call Trace: [ 1183.753217][ C1] [ 1183.756071][ C1] dump_stack+0x21c/0x280 [ 1183.760403][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 1183.766121][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 1183.772021][ C1] ? __msan_chain_origin+0x50/0x90 [ 1183.777216][ C1] ? inet_twsk_alloc+0xac7/0xbd0 [ 1183.782154][ C1] ? tcp_time_wait+0xd9/0x1150 [ 1183.786919][ C1] ? tcp_fin+0x23a/0x9f0 [ 1183.791187][ C1] ? tcp_data_queue+0x1e5c/0xb570 [ 1183.796301][ C1] ? tcp_rcv_state_process+0x2e24/0x45b0 [ 1183.801949][ C1] ? tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1183.806891][ C1] ? tcp_v6_rcv+0x56db/0x5a80 [ 1183.811582][ C1] ? ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1183.817472][ C1] ? ip6_input+0x2dd/0x370 [ 1183.821893][ C1] ? ip6_rcv_finish+0x5fc/0x7f0 [ 1183.826744][ C1] ? ipv6_rcv+0x3bb/0x460 [ 1183.831076][ C1] ? __netif_receive_skb+0x265/0x670 [ 1183.836364][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 1183.842262][ C1] ? net_rx_action+0x35c/0xd40 [ 1183.847025][ C1] ? __do_softirq+0x2ea/0x7f5 [ 1183.851705][ C1] ? asm_call_on_stack+0xf/0x20 [ 1183.856564][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 1183.861793][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 1183.867164][ C1] ? local_bh_enable+0x36/0x40 [ 1183.872023][ C1] ? ip6_finish_output2+0x24b4/0x2a70 [ 1183.877390][ C1] ? __ip6_finish_output+0x9c0/0xa90 [ 1183.882672][ C1] ? ip6_finish_output+0x14b/0x4b0 [ 1183.887776][ C1] ? ip6_output+0x68d/0x7f0 [ 1183.892274][ C1] ? ip6_xmit+0x2475/0x2b40 [ 1183.896772][ C1] ? inet6_csk_xmit+0x47f/0x5a0 [ 1183.901644][ C1] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 1183.907015][ C1] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 1183.912047][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 1183.917853][ C1] ? tcp_send_fin+0x192a/0x1bc0 [ 1183.922723][ C1] ? tcp_shutdown+0x1f7/0x270 [ 1183.927402][ C1] ? inet_shutdown+0x44f/0x6d0 [ 1183.932170][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 1183.937375][ C1] ? rds_tcp_accept_one+0x1060/0x12c0 [ 1183.942755][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 1183.948125][ C1] ? process_one_work+0x1688/0x2140 [ 1183.953323][ C1] ? worker_thread+0x10bc/0x2730 [ 1183.958250][ C1] ? kthread+0x551/0x590 [ 1183.962489][ C1] ? ret_from_fork+0x1f/0x30 [ 1183.967070][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1183.972862][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1183.978921][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1183.984110][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1183.989900][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1183.996041][ C1] ? __msan_get_context_state+0x9/0x20 [ 1184.001486][ C1] ? __module_get+0x19/0x210 [ 1184.006069][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.011259][ C1] __msan_chain_origin+0x50/0x90 [ 1184.016194][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1184.021397][ C1] tcp_time_wait+0xf7b/0x1150 [ 1184.026067][ C1] tcp_fin+0x23a/0x9f0 [ 1184.030132][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.034978][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1184.040771][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1184.046821][ C1] ? tcp_urg+0xb22/0x10c0 [ 1184.051145][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.056584][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.061766][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1184.067559][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.072740][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.077507][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.082023][ C1] ? tcp_v6_rcv+0x1541/0x5a80 [ 1184.086690][ C1] ? tcp_v6_early_demux+0xd60/0xd60 [ 1184.091873][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.097596][ C1] ip6_input+0x2dd/0x370 [ 1184.101845][ C1] ? ip6_input+0x370/0x370 [ 1184.106256][ C1] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 1184.112128][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.116804][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.120956][ C1] ? local_bh_enable+0x40/0x40 [ 1184.125712][ C1] __netif_receive_skb+0x265/0x670 [ 1184.130808][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1184.136333][ C1] ? ip6_rcv_finish+0x7f0/0x7f0 [ 1184.141173][ C1] process_backlog+0x50d/0xba0 [ 1184.145927][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1184.151729][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1184.157000][ C1] napi_poll+0x43b/0xfd0 [ 1184.161230][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.166414][ C1] net_rx_action+0x35c/0xd40 [ 1184.170997][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1184.175747][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.180243][ C1] asm_call_on_stack+0xf/0x20 [ 1184.184895][ C1] [ 1184.187821][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1184.192827][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 1184.198028][ C1] local_bh_enable+0x36/0x40 [ 1184.202604][ C1] ip6_finish_output2+0x24b4/0x2a70 [ 1184.207798][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.212990][ C1] __ip6_finish_output+0x9c0/0xa90 [ 1184.218094][ C1] ip6_finish_output+0x14b/0x4b0 [ 1184.223018][ C1] ip6_output+0x68d/0x7f0 [ 1184.227354][ C1] ? ip6_output+0x7f0/0x7f0 [ 1184.231840][ C1] ? ac6_seq_show+0x200/0x200 [ 1184.236496][ C1] ip6_xmit+0x2475/0x2b40 [ 1184.240850][ C1] ? ip6_xmit+0x2b40/0x2b40 [ 1184.245344][ C1] inet6_csk_xmit+0x47f/0x5a0 [ 1184.250017][ C1] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 1184.255634][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 1184.260851][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 1184.265718][ C1] ? kmsan_get_metadata+0xb0/0x180 [ 1184.270829][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.276007][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.281189][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.286375][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 1184.291991][ C1] tcp_send_fin+0x192a/0x1bc0 [ 1184.296656][ C1] ? tcp_set_state+0x9ec/0xb40 [ 1184.301413][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.306606][ C1] tcp_shutdown+0x1f7/0x270 [ 1184.311094][ C1] ? tcp_set_state+0xb40/0xb40 [ 1184.315845][ C1] inet_shutdown+0x44f/0x6d0 [ 1184.320426][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 1184.325090][ C1] kernel_sock_shutdown+0x98/0xc0 [ 1184.330107][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 1184.335299][ C1] rds_tcp_accept_worker+0x60/0x180 [ 1184.340487][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 1184.345504][ C1] process_one_work+0x1688/0x2140 [ 1184.350555][ C1] worker_thread+0x10bc/0x2730 [ 1184.355307][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1184.360504][ C1] kthread+0x551/0x590 [ 1184.364556][ C1] ? process_one_work+0x2140/0x2140 [ 1184.369741][ C1] ? kthread_blkcg+0x110/0x110 [ 1184.374490][ C1] ret_from_fork+0x1f/0x30 [ 1184.378888][ C1] Uninit was stored to memory at: [ 1184.383923][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.389641][ C1] __msan_chain_origin+0x50/0x90 [ 1184.394560][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1184.399309][ C1] tcp_time_wait+0xd9/0x1150 [ 1184.403880][ C1] tcp_fin+0x23a/0x9f0 [ 1184.407930][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.412764][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.418205][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.422947][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.427432][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.433134][ C1] ip6_input+0x2dd/0x370 [ 1184.437354][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.442020][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.446191][ C1] __netif_receive_skb+0x265/0x670 [ 1184.451285][ C1] process_backlog+0x50d/0xba0 [ 1184.456037][ C1] napi_poll+0x43b/0xfd0 [ 1184.460270][ C1] net_rx_action+0x35c/0xd40 [ 1184.464840][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.469312][ C1] [ 1184.471617][ C1] Uninit was stored to memory at: [ 1184.476623][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.482322][ C1] __msan_chain_origin+0x50/0x90 [ 1184.487248][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1184.492431][ C1] tcp_time_wait+0xf7b/0x1150 [ 1184.497098][ C1] tcp_fin+0x23a/0x9f0 [ 1184.501146][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.505976][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.511414][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.516159][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.520670][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.526377][ C1] ip6_input+0x2dd/0x370 [ 1184.530605][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.535275][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.539414][ C1] __netif_receive_skb+0x265/0x670 [ 1184.544509][ C1] process_backlog+0x50d/0xba0 [ 1184.549259][ C1] napi_poll+0x43b/0xfd0 [ 1184.553488][ C1] net_rx_action+0x35c/0xd40 [ 1184.558060][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.562535][ C1] [ 1184.564837][ C1] Uninit was stored to memory at: [ 1184.569845][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.575543][ C1] __msan_chain_origin+0x50/0x90 [ 1184.580464][ C1] tcp_time_wait+0x1064/0x1150 [ 1184.585211][ C1] tcp_fin+0x23a/0x9f0 [ 1184.589259][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.594105][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.599546][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.604288][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.608770][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.614469][ C1] ip6_input+0x2dd/0x370 [ 1184.618690][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.623364][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.627509][ C1] __netif_receive_skb+0x265/0x670 [ 1184.632603][ C1] process_backlog+0x50d/0xba0 [ 1184.637351][ C1] napi_poll+0x43b/0xfd0 [ 1184.641574][ C1] net_rx_action+0x35c/0xd40 [ 1184.646143][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.650637][ C1] [ 1184.652943][ C1] Uninit was stored to memory at: [ 1184.657947][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.663649][ C1] __msan_chain_origin+0x50/0x90 [ 1184.668567][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1184.673317][ C1] tcp_time_wait+0xd9/0x1150 [ 1184.677887][ C1] tcp_fin+0x23a/0x9f0 [ 1184.681942][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.686775][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.692219][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.696964][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.701449][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.707147][ C1] ip6_input+0x2dd/0x370 [ 1184.711369][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.716113][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.720252][ C1] __netif_receive_skb+0x265/0x670 [ 1184.725346][ C1] process_backlog+0x50d/0xba0 [ 1184.730095][ C1] napi_poll+0x43b/0xfd0 [ 1184.734321][ C1] net_rx_action+0x35c/0xd40 [ 1184.738899][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.743374][ C1] [ 1184.745680][ C1] Uninit was stored to memory at: [ 1184.750704][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.756416][ C1] __msan_chain_origin+0x50/0x90 [ 1184.761371][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 1184.766556][ C1] tcp_time_wait+0xf7b/0x1150 [ 1184.771214][ C1] tcp_fin+0x23a/0x9f0 [ 1184.775263][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.780103][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.785558][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.790303][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.794787][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.800602][ C1] ip6_input+0x2dd/0x370 [ 1184.804829][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.809491][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.813637][ C1] __netif_receive_skb+0x265/0x670 [ 1184.818738][ C1] process_backlog+0x50d/0xba0 [ 1184.823494][ C1] napi_poll+0x43b/0xfd0 [ 1184.827724][ C1] net_rx_action+0x35c/0xd40 [ 1184.832304][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.836782][ C1] [ 1184.839092][ C1] Uninit was stored to memory at: [ 1184.844127][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.849831][ C1] __msan_chain_origin+0x50/0x90 [ 1184.854752][ C1] tcp_time_wait+0x1064/0x1150 [ 1184.859498][ C1] tcp_fin+0x23a/0x9f0 [ 1184.863544][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.868375][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.873816][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.878561][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.883049][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.888764][ C1] ip6_input+0x2dd/0x370 [ 1184.893095][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.897774][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.901924][ C1] __netif_receive_skb+0x265/0x670 [ 1184.907025][ C1] process_backlog+0x50d/0xba0 [ 1184.911776][ C1] napi_poll+0x43b/0xfd0 [ 1184.916005][ C1] net_rx_action+0x35c/0xd40 [ 1184.920581][ C1] __do_softirq+0x2ea/0x7f5 [ 1184.925078][ C1] [ 1184.927387][ C1] Uninit was stored to memory at: [ 1184.932400][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1184.938112][ C1] __msan_chain_origin+0x50/0x90 [ 1184.943032][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 1184.947795][ C1] tcp_time_wait+0xd9/0x1150 [ 1184.952372][ C1] tcp_fin+0x23a/0x9f0 [ 1184.956425][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1184.961264][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1184.966739][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1184.971507][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1184.975996][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1184.981694][ C1] ip6_input+0x2dd/0x370 [ 1184.985929][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1184.990587][ C1] ipv6_rcv+0x3bb/0x460 [ 1184.994752][ C1] __netif_receive_skb+0x265/0x670 [ 1184.999852][ C1] process_backlog+0x50d/0xba0 [ 1185.004614][ C1] napi_poll+0x43b/0xfd0 [ 1185.008847][ C1] net_rx_action+0x35c/0xd40 [ 1185.013430][ C1] __do_softirq+0x2ea/0x7f5 [ 1185.017912][ C1] [ 1185.020222][ C1] Uninit was created at: [ 1185.024457][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 1185.030073][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 1185.034932][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 1185.040393][ C1] alloc_pages_current+0x685/0xb50 [ 1185.045484][ C1] alloc_slab_page+0x11c/0x1240 [ 1185.050315][ C1] new_slab+0x2bf/0x10c0 [ 1185.054539][ C1] ___slab_alloc+0xcd3/0x18a0 [ 1185.059195][ C1] kmem_cache_alloc+0xb70/0xc50 [ 1185.064028][ C1] inet_twsk_alloc+0x154/0xbd0 [ 1185.068774][ C1] tcp_time_wait+0xd9/0x1150 [ 1185.073342][ C1] tcp_fin+0x23a/0x9f0 [ 1185.077396][ C1] tcp_data_queue+0x1e5c/0xb570 [ 1185.082238][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 1185.087678][ C1] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 1185.092420][ C1] tcp_v6_rcv+0x56db/0x5a80 [ 1185.096919][ C1] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 1185.102618][ C1] ip6_input+0x2dd/0x370 [ 1185.106841][ C1] ip6_rcv_finish+0x5fc/0x7f0 [ 1185.111499][ C1] ipv6_rcv+0x3bb/0x460 [ 1185.115654][ C1] __netif_receive_skb+0x265/0x670 [ 1185.120749][ C1] process_backlog+0x50d/0xba0 [ 1185.125509][ C1] napi_poll+0x43b/0xfd0 [ 1185.129742][ C1] net_rx_action+0x35c/0xd40 [ 1185.134320][ C1] __do_softirq+0x2ea/0x7f5 13:30:44 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 13:30:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000001000000000300120000000000000000000000000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6201e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:45 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 13:30:45 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 13:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060410000900000000080000", 0x58}], 0x1) 13:30:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:45 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 13:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060410000900000000080000", 0x58}], 0x1) 13:30:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:30:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:46 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 13:30:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060410000900000000080000", 0x58}], 0x1) 13:30:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:47 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "1ba92580ea2452168c2bcd68cbd3413233b0fc04a2136f9104edf772e59ac8f7"}) 13:30:47 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 13:30:47 executing program 5: unshare(0x40600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsync(r0) 13:30:47 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:30:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "1ba92580ea2452168c2bcd68cbd3413233b0fc04a2136f9104edf772e59ac8f7"}) 13:30:48 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ID={0x8, 0x19}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 13:30:48 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:48 executing program 5: unshare(0x40600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsync(r0) 13:30:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "1ba92580ea2452168c2bcd68cbd3413233b0fc04a2136f9104edf772e59ac8f7"}) 13:30:48 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_batadv\x00'}}, 0x1e) 13:30:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ID={0x8, 0x19}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 13:30:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000040bf", @ANYRES32, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c"], 0x7c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fe", 0x21) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:30:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "1ba92580ea2452168c2bcd68cbd3413233b0fc04a2136f9104edf772e59ac8f7"}) 13:30:49 executing program 5: unshare(0x40600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsync(r0) 13:30:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:30:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:30:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ID={0x8, 0x19}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 13:30:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000040bf", @ANYRES32, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c"], 0x7c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fe", 0x21) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:30:50 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000) 13:30:50 executing program 5: unshare(0x40600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsync(r0) 13:30:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ID={0x8, 0x19}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 13:30:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000040bf", @ANYRES32, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c"], 0x7c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fe", 0x21) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:30:50 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f00}, 0x10) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 13:30:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:30:51 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff0f}, 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 13:30:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:30:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000040bf", @ANYRES32, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c"], 0x7c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fe", 0x21) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:30:51 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f00}, 0x10) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 13:30:52 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff0f}, 0x10) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 13:30:52 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f00}, 0x10) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1194.221007][ C0] ===================================================== [ 1194.228006][ C0] BUG: KMSAN: uninit-value in update_stack_state+0x1ee/0xb40 [ 1194.235362][ C0] CPU: 0 PID: 30267 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1194.244009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.254041][ C0] Call Trace: [ 1194.257311][ C0] [ 1194.260238][ C0] dump_stack+0x21c/0x280 [ 1194.264556][ C0] kmsan_report+0xf7/0x1e0 [ 1194.268963][ C0] __msan_warning+0x58/0xa0 [ 1194.273453][ C0] update_stack_state+0x1ee/0xb40 [ 1194.278490][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.283675][ C0] unwind_next_frame+0x8c6/0xed0 [ 1194.288600][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.294398][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1194.299951][ C0] arch_stack_walk+0x338/0x3d0 [ 1194.304697][ C0] ? stack_trace_save+0x1a0/0x1a0 [ 1194.309709][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1194.315263][ C0] stack_trace_save+0x117/0x1a0 [ 1194.320105][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1194.325810][ C0] ? dev_loopback_xmit+0x64c/0x730 [ 1194.330915][ C0] ? ip6_finish_output2+0x274a/0x2a70 [ 1194.336274][ C0] ? __ip6_finish_output+0x9c0/0xa90 [ 1194.341542][ C0] ? kmsan_internal_chain_origin+0xad/0x130 [ 1194.347419][ C0] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1194.353563][ C0] ? kmsan_memcpy_metadata+0xb/0x10 [ 1194.358762][ C0] ? __msan_memcpy+0x43/0x50 [ 1194.363336][ C0] ? pskb_expand_head+0x3fd/0x1e30 [ 1194.368426][ C0] ? skb_copy_ubufs+0x2123/0x29a0 [ 1194.373431][ C0] ? __netif_receive_skb_core+0x6301/0x6520 [ 1194.379303][ C0] ? __netif_receive_skb+0x164/0x670 [ 1194.384570][ C0] ? process_backlog+0x50d/0xba0 [ 1194.389488][ C0] ? napi_poll+0x43b/0xfd0 [ 1194.393883][ C0] ? net_rx_action+0x35c/0xd40 [ 1194.398628][ C0] ? __do_softirq+0x2ea/0x7f5 [ 1194.403284][ C0] ? asm_call_on_stack+0xf/0x20 [ 1194.408114][ C0] ? do_softirq_own_stack+0x7c/0xa0 [ 1194.413303][ C0] ? __irq_exit_rcu+0x226/0x270 [ 1194.418142][ C0] ? irq_exit_rcu+0xe/0x10 [ 1194.422542][ C0] ? sysvec_call_function_single+0x107/0x130 [ 1194.428504][ C0] ? asm_sysvec_call_function_single+0x12/0x20 [ 1194.434728][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1194.440265][ C0] ? should_fail+0x72/0x9e0 [ 1194.444753][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.450036][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.455229][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.460418][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1194.465951][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.471251][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.477040][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1194.483089][ C0] ? __kmalloc_node_track_caller+0x22c/0x12e0 [ 1194.489147][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1194.495122][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 1194.500140][ C0] __msan_memcpy+0x43/0x50 [ 1194.504538][ C0] pskb_expand_head+0x3fd/0x1e30 [ 1194.509479][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.515298][ C0] skb_copy_ubufs+0x2123/0x29a0 [ 1194.520162][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.525953][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.531139][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.536928][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1194.542978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.548173][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1194.553454][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.558640][ C0] __netif_receive_skb_core+0x6301/0x6520 [ 1194.564347][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.569529][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.574724][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.579913][ C0] __netif_receive_skb+0x164/0x670 [ 1194.585009][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1194.590548][ C0] process_backlog+0x50d/0xba0 [ 1194.595300][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.601100][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1194.606392][ C0] napi_poll+0x43b/0xfd0 [ 1194.610633][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.615828][ C0] net_rx_action+0x35c/0xd40 [ 1194.620425][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1194.625182][ C0] __do_softirq+0x2ea/0x7f5 [ 1194.629685][ C0] asm_call_on_stack+0xf/0x20 [ 1194.634342][ C0] [ 1194.637273][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1194.642284][ C0] __irq_exit_rcu+0x226/0x270 [ 1194.646951][ C0] irq_exit_rcu+0xe/0x10 [ 1194.651198][ C0] sysvec_call_function_single+0x107/0x130 [ 1194.657000][ C0] asm_sysvec_call_function_single+0x12/0x20 [ 1194.662976][ C0] RIP: 0010:kmsan_task_context_state+0x4d/0x90 [ 1194.669120][ C0] Code: 85 d2 74 26 48 98 48 c7 c3 10 83 02 00 48 03 1c c5 a0 36 0c 92 ba b0 0f 00 00 48 89 df 31 f6 e8 09 57 bf 03 48 89 d8 5b 5d c3 <85> c9 74 1e 48 63 c9 48 69 c9 b0 0f 00 00 48 98 48 8b 04 c5 a0 36 [ 1194.688715][ C0] RSP: 0018:ffff8881d1bf6fa0 EFLAGS: 00000246 [ 1194.694767][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 1194.702725][ C0] RDX: 0000000000000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1194.710685][ C0] RBP: ffff8881d1bf6fa8 R08: ffffffff8ddf199c R09: ffff88812fffa000 [ 1194.718644][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1194.726607][ C0] R13: ffff888024270b00 R14: ffff888036d36560 R15: ffff888036d36558 [ 1194.734580][ C0] ? netif_rx_ni+0x20c/0x3c0 [ 1194.739167][ C0] __msan_get_context_state+0x9/0x20 [ 1194.744440][ C0] do_softirq+0x23/0x150 [ 1194.748680][ C0] netif_rx_ni+0x21b/0x3c0 [ 1194.753090][ C0] dev_loopback_xmit+0x64c/0x730 [ 1194.758030][ C0] ip6_finish_output2+0x274a/0x2a70 [ 1194.763224][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.769021][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1194.775106][ C0] ? validate_xmit_skb+0x1aa0/0x1aa0 [ 1194.780394][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1194.785499][ C0] ip6_finish_output+0x14b/0x4b0 [ 1194.790438][ C0] ip6_output+0x68d/0x7f0 [ 1194.794766][ C0] ? ip6_output+0x7f0/0x7f0 [ 1194.799260][ C0] ? ac6_seq_show+0x200/0x200 [ 1194.803981][ C0] ip6_local_out+0x17b/0x1e0 [ 1194.808585][ C0] ip6_send_skb+0xfd/0x430 [ 1194.813000][ C0] udp_v6_send_skb+0x14cc/0x21a0 [ 1194.817950][ C0] udpv6_sendmsg+0x52c0/0x55c0 [ 1194.822710][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.828505][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1194.834567][ C0] ? ip_do_fragment+0x3b50/0x3b50 [ 1194.839604][ C0] ? aa_sk_perm+0x7da/0xe70 [ 1194.844109][ C0] ? __udp6_lib_rcv+0x4c30/0x4c30 [ 1194.849120][ C0] inet6_sendmsg+0x15b/0x1d0 [ 1194.853700][ C0] ____sys_sendmsg+0xc82/0x1240 [ 1194.858557][ C0] ? inet6_compat_ioctl+0xa00/0xa00 [ 1194.863748][ C0] __sys_sendmmsg+0x9ee/0xfd0 [ 1194.868431][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1194.873701][ C0] ? ktime_get_ts64+0x79f/0x8d0 [ 1194.878549][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.883730][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.889525][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1194.894709][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1194.900500][ C0] ? __prepare_exit_to_usermode+0x16c/0x560 [ 1194.906381][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 1194.911132][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 1194.915973][ C0] do_syscall_64+0xad/0x160 [ 1194.920463][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1194.926335][ C0] RIP: 0033:0x45d5f9 [ 1194.930205][ C0] Code: Bad RIP value. [ 1194.934269][ C0] RSP: 002b:00007f3c2fc8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1194.942675][ C0] RAX: ffffffffffffffda RBX: 0000000000027a40 RCX: 000000000045d5f9 [ 1194.950632][ C0] RDX: 0000000000000237 RSI: 0000000020004d80 RDI: 0000000000000003 [ 1194.958584][ C0] RBP: 000000000118d168 R08: 0000000000000000 R09: 0000000000000000 [ 1194.966537][ C0] R10: 0000000004000000 R11: 0000000000000246 R12: 000000000118d12c [ 1194.974494][ C0] R13: 000000000169fb6f R14: 00007f3c2fc909c0 R15: 000000000118d12c [ 1194.982456][ C0] [ 1194.984760][ C0] Local variable ----item@nf_ct_deliver_cached_events created at: [ 1194.992601][ C0] nf_ct_deliver_cached_events+0x7d/0x7e0 [ 1194.998301][ C0] nf_ct_deliver_cached_events+0x7d/0x7e0 [ 1195.003989][ C0] ===================================================== [ 1195.010892][ C0] Disabling lock debugging due to kernel taint [ 1195.017019][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1195.023590][ C0] CPU: 0 PID: 30267 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1195.033649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.043694][ C0] Call Trace: [ 1195.046971][ C0] [ 1195.049816][ C0] dump_stack+0x21c/0x280 [ 1195.054132][ C0] panic+0x4d7/0xef7 [ 1195.058021][ C0] ? add_taint+0x17c/0x210 [ 1195.062426][ C0] kmsan_report+0x1df/0x1e0 [ 1195.066943][ C0] __msan_warning+0x58/0xa0 [ 1195.071433][ C0] update_stack_state+0x1ee/0xb40 [ 1195.076466][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.081651][ C0] unwind_next_frame+0x8c6/0xed0 [ 1195.086591][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.092405][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1195.097930][ C0] arch_stack_walk+0x338/0x3d0 [ 1195.102676][ C0] ? stack_trace_save+0x1a0/0x1a0 [ 1195.107701][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1195.113233][ C0] stack_trace_save+0x117/0x1a0 [ 1195.118071][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1195.123774][ C0] ? dev_loopback_xmit+0x64c/0x730 [ 1195.128873][ C0] ? ip6_finish_output2+0x274a/0x2a70 [ 1195.134229][ C0] ? __ip6_finish_output+0x9c0/0xa90 [ 1195.139497][ C0] ? kmsan_internal_chain_origin+0xad/0x130 [ 1195.145374][ C0] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1195.151508][ C0] ? kmsan_memcpy_metadata+0xb/0x10 [ 1195.156686][ C0] ? __msan_memcpy+0x43/0x50 [ 1195.161256][ C0] ? pskb_expand_head+0x3fd/0x1e30 [ 1195.166350][ C0] ? skb_copy_ubufs+0x2123/0x29a0 [ 1195.171355][ C0] ? __netif_receive_skb_core+0x6301/0x6520 [ 1195.177230][ C0] ? __netif_receive_skb+0x164/0x670 [ 1195.182493][ C0] ? process_backlog+0x50d/0xba0 [ 1195.187414][ C0] ? napi_poll+0x43b/0xfd0 [ 1195.191812][ C0] ? net_rx_action+0x35c/0xd40 [ 1195.196561][ C0] ? __do_softirq+0x2ea/0x7f5 [ 1195.201223][ C0] ? asm_call_on_stack+0xf/0x20 [ 1195.206069][ C0] ? do_softirq_own_stack+0x7c/0xa0 [ 1195.211253][ C0] ? __irq_exit_rcu+0x226/0x270 [ 1195.216086][ C0] ? irq_exit_rcu+0xe/0x10 [ 1195.220486][ C0] ? sysvec_call_function_single+0x107/0x130 [ 1195.226447][ C0] ? asm_sysvec_call_function_single+0x12/0x20 [ 1195.232580][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1195.238110][ C0] ? should_fail+0x72/0x9e0 [ 1195.242607][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.247787][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.252971][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.258154][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1195.263679][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.268874][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.274662][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1195.280711][ C0] ? __kmalloc_node_track_caller+0x22c/0x12e0 [ 1195.286765][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1195.292731][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 1195.297734][ C0] __msan_memcpy+0x43/0x50 [ 1195.302132][ C0] pskb_expand_head+0x3fd/0x1e30 [ 1195.307056][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.312874][ C0] skb_copy_ubufs+0x2123/0x29a0 [ 1195.317714][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.323514][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.328710][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.334498][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1195.340546][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.345739][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1195.351026][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.356213][ C0] __netif_receive_skb_core+0x6301/0x6520 [ 1195.361916][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.367098][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.372287][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.377469][ C0] __netif_receive_skb+0x164/0x670 [ 1195.382560][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1195.388100][ C0] process_backlog+0x50d/0xba0 [ 1195.392848][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.398641][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1195.403905][ C0] napi_poll+0x43b/0xfd0 [ 1195.408135][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.413316][ C0] net_rx_action+0x35c/0xd40 [ 1195.417899][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1195.422647][ C0] __do_softirq+0x2ea/0x7f5 [ 1195.427143][ C0] asm_call_on_stack+0xf/0x20 [ 1195.431797][ C0] [ 1195.434725][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1195.439732][ C0] __irq_exit_rcu+0x226/0x270 [ 1195.444391][ C0] irq_exit_rcu+0xe/0x10 [ 1195.448634][ C0] sysvec_call_function_single+0x107/0x130 [ 1195.454430][ C0] asm_sysvec_call_function_single+0x12/0x20 [ 1195.460395][ C0] RIP: 0010:kmsan_task_context_state+0x4d/0x90 [ 1195.466533][ C0] Code: 85 d2 74 26 48 98 48 c7 c3 10 83 02 00 48 03 1c c5 a0 36 0c 92 ba b0 0f 00 00 48 89 df 31 f6 e8 09 57 bf 03 48 89 d8 5b 5d c3 <85> c9 74 1e 48 63 c9 48 69 c9 b0 0f 00 00 48 98 48 8b 04 c5 a0 36 [ 1195.486124][ C0] RSP: 0018:ffff8881d1bf6fa0 EFLAGS: 00000246 [ 1195.492172][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 1195.500132][ C0] RDX: 0000000000000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1195.508087][ C0] RBP: ffff8881d1bf6fa8 R08: ffffffff8ddf199c R09: ffff88812fffa000 [ 1195.516040][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1195.523991][ C0] R13: ffff888024270b00 R14: ffff888036d36560 R15: ffff888036d36558 [ 1195.531956][ C0] ? netif_rx_ni+0x20c/0x3c0 [ 1195.536535][ C0] __msan_get_context_state+0x9/0x20 [ 1195.541801][ C0] do_softirq+0x23/0x150 [ 1195.546036][ C0] netif_rx_ni+0x21b/0x3c0 [ 1195.550524][ C0] dev_loopback_xmit+0x64c/0x730 [ 1195.555453][ C0] ip6_finish_output2+0x274a/0x2a70 [ 1195.560638][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.566430][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1195.572490][ C0] ? validate_xmit_skb+0x1aa0/0x1aa0 [ 1195.577759][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1195.582860][ C0] ip6_finish_output+0x14b/0x4b0 [ 1195.587787][ C0] ip6_output+0x68d/0x7f0 [ 1195.592103][ C0] ? ip6_output+0x7f0/0x7f0 [ 1195.596591][ C0] ? ac6_seq_show+0x200/0x200 [ 1195.601271][ C0] ip6_local_out+0x17b/0x1e0 [ 1195.605860][ C0] ip6_send_skb+0xfd/0x430 [ 1195.610269][ C0] udp_v6_send_skb+0x14cc/0x21a0 [ 1195.615206][ C0] udpv6_sendmsg+0x52c0/0x55c0 [ 1195.619955][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.625743][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1195.631797][ C0] ? ip_do_fragment+0x3b50/0x3b50 [ 1195.636813][ C0] ? aa_sk_perm+0x7da/0xe70 [ 1195.641313][ C0] ? __udp6_lib_rcv+0x4c30/0x4c30 [ 1195.646319][ C0] inet6_sendmsg+0x15b/0x1d0 [ 1195.650896][ C0] ____sys_sendmsg+0xc82/0x1240 [ 1195.655740][ C0] ? inet6_compat_ioctl+0xa00/0xa00 [ 1195.660925][ C0] __sys_sendmmsg+0x9ee/0xfd0 [ 1195.665609][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1195.670879][ C0] ? ktime_get_ts64+0x79f/0x8d0 [ 1195.675742][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.681099][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.686887][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.692098][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.697895][ C0] ? __prepare_exit_to_usermode+0x16c/0x560 [ 1195.703776][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 1195.708528][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 1195.713370][ C0] do_syscall_64+0xad/0x160 [ 1195.717887][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1195.723770][ C0] RIP: 0033:0x45d5f9 [ 1195.727654][ C0] Code: Bad RIP value. [ 1195.731728][ C0] RSP: 002b:00007f3c2fc8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1195.740250][ C0] RAX: ffffffffffffffda RBX: 0000000000027a40 RCX: 000000000045d5f9 [ 1195.748214][ C0] RDX: 0000000000000237 RSI: 0000000020004d80 RDI: 0000000000000003 [ 1195.756185][ C0] RBP: 000000000118d168 R08: 0000000000000000 R09: 0000000000000000 [ 1195.764142][ C0] R10: 0000000004000000 R11: 0000000000000246 R12: 000000000118d12c [ 1195.772100][ C0] R13: 000000000169fb6f R14: 00007f3c2fc909c0 R15: 000000000118d12c [ 1195.780727][ C0] ------------[ cut here ]------------ [ 1195.786163][ C0] kernel BUG at mm/kmsan/kmsan.h:87! [ 1195.791445][ C0] invalid opcode: 0000 [#1] SMP [ 1195.796273][ C0] CPU: 0 PID: 30267 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1195.806473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.816518][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1195.823083][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 f0 64 e1 91 31 c0 e8 e8 e1 2f ff 0f 0b 0f 0b 0f 0b 0f 0b e8 62 21 b2 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1195.842658][ C0] RSP: 0018:ffff88812fc04d68 EFLAGS: 00010046 [ 1195.848726][ C0] RAX: 0000000000000002 RBX: 0000000004d20001 RCX: 0000000004d20001 [ 1195.856671][ C0] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fc04e4c [ 1195.864620][ C0] RBP: ffff88812fc04e10 R08: ffffea000000000f R09: ffff88812fffa000 [ 1195.872559][ C0] R10: 0000000000000002 R11: ffff888036d35b80 R12: 0000000000000000 [ 1195.880506][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1195.888450][ C0] FS: 00007f3c2fc90700(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 1195.897345][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.903897][ C0] CR2: 0000000000749198 CR3: 00000001d26bc000 CR4: 00000000001406f0 [ 1195.911839][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1195.919782][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1195.927721][ C0] Call Trace: [ 1195.930973][ C0] [ 1195.933804][ C0] kmsan_check_memory+0xd/0x10 [ 1195.938538][ C0] iowrite8+0x99/0x300 [ 1195.942656][ C0] pvpanic_panic_notify+0xb7/0xe0 [ 1195.947654][ C0] ? pvpanic_mmio_remove+0x60/0x60 [ 1195.952741][ C0] atomic_notifier_call_chain+0x123/0x290 [ 1195.958445][ C0] panic+0x560/0xef7 [ 1195.962319][ C0] ? add_taint+0x17c/0x210 [ 1195.966727][ C0] kmsan_report+0x1df/0x1e0 [ 1195.971222][ C0] __msan_warning+0x58/0xa0 [ 1195.975698][ C0] update_stack_state+0x1ee/0xb40 [ 1195.980705][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1195.985872][ C0] unwind_next_frame+0x8c6/0xed0 [ 1195.990779][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1195.996688][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1196.002207][ C0] arch_stack_walk+0x338/0x3d0 [ 1196.006971][ C0] ? stack_trace_save+0x1a0/0x1a0 [ 1196.011967][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1196.017491][ C0] stack_trace_save+0x117/0x1a0 [ 1196.022315][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 1196.028009][ C0] ? dev_loopback_xmit+0x64c/0x730 [ 1196.033093][ C0] ? ip6_finish_output2+0x274a/0x2a70 [ 1196.038534][ C0] ? __ip6_finish_output+0x9c0/0xa90 [ 1196.043787][ C0] ? kmsan_internal_chain_origin+0xad/0x130 [ 1196.049649][ C0] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1196.055775][ C0] ? kmsan_memcpy_metadata+0xb/0x10 [ 1196.060946][ C0] ? __msan_memcpy+0x43/0x50 [ 1196.065505][ C0] ? pskb_expand_head+0x3fd/0x1e30 [ 1196.070600][ C0] ? skb_copy_ubufs+0x2123/0x29a0 [ 1196.075594][ C0] ? __netif_receive_skb_core+0x6301/0x6520 [ 1196.081459][ C0] ? __netif_receive_skb+0x164/0x670 [ 1196.086721][ C0] ? process_backlog+0x50d/0xba0 [ 1196.091630][ C0] ? napi_poll+0x43b/0xfd0 [ 1196.096018][ C0] ? net_rx_action+0x35c/0xd40 [ 1196.100752][ C0] ? __do_softirq+0x2ea/0x7f5 [ 1196.105398][ C0] ? asm_call_on_stack+0xf/0x20 [ 1196.110219][ C0] ? do_softirq_own_stack+0x7c/0xa0 [ 1196.115477][ C0] ? __irq_exit_rcu+0x226/0x270 [ 1196.120298][ C0] ? irq_exit_rcu+0xe/0x10 [ 1196.124683][ C0] ? sysvec_call_function_single+0x107/0x130 [ 1196.130629][ C0] ? asm_sysvec_call_function_single+0x12/0x20 [ 1196.136763][ C0] ? kmsan_task_context_state+0x4d/0x90 [ 1196.142279][ C0] ? should_fail+0x72/0x9e0 [ 1196.146749][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.151917][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.157080][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.162251][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1196.167764][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.172928][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.178902][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1196.184957][ C0] ? __kmalloc_node_track_caller+0x22c/0x12e0 [ 1196.190999][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1196.196949][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 1196.201947][ C0] __msan_memcpy+0x43/0x50 [ 1196.206336][ C0] pskb_expand_head+0x3fd/0x1e30 [ 1196.211246][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.217031][ C0] skb_copy_ubufs+0x2123/0x29a0 [ 1196.221849][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.227634][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.232818][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.238593][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1196.244624][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.249809][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1196.255063][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.260253][ C0] __netif_receive_skb_core+0x6301/0x6520 [ 1196.265944][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.271114][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.276288][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.281474][ C0] __netif_receive_skb+0x164/0x670 [ 1196.286552][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 1196.292069][ C0] process_backlog+0x50d/0xba0 [ 1196.296802][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.302578][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1196.307846][ C0] napi_poll+0x43b/0xfd0 [ 1196.312106][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.317290][ C0] net_rx_action+0x35c/0xd40 [ 1196.321857][ C0] ? net_tx_action+0xdc0/0xdc0 [ 1196.326591][ C0] __do_softirq+0x2ea/0x7f5 [ 1196.331088][ C0] asm_call_on_stack+0xf/0x20 [ 1196.335737][ C0] [ 1196.338656][ C0] do_softirq_own_stack+0x7c/0xa0 [ 1196.343656][ C0] __irq_exit_rcu+0x226/0x270 [ 1196.348318][ C0] irq_exit_rcu+0xe/0x10 [ 1196.352535][ C0] sysvec_call_function_single+0x107/0x130 [ 1196.358312][ C0] asm_sysvec_call_function_single+0x12/0x20 [ 1196.364258][ C0] RIP: 0010:kmsan_task_context_state+0x4d/0x90 [ 1196.370377][ C0] Code: 85 d2 74 26 48 98 48 c7 c3 10 83 02 00 48 03 1c c5 a0 36 0c 92 ba b0 0f 00 00 48 89 df 31 f6 e8 09 57 bf 03 48 89 d8 5b 5d c3 <85> c9 74 1e 48 63 c9 48 69 c9 b0 0f 00 00 48 98 48 8b 04 c5 a0 36 [ 1196.389948][ C0] RSP: 0018:ffff8881d1bf6fa0 EFLAGS: 00000246 [ 1196.395998][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 1196.403941][ C0] RDX: 0000000000000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1196.411885][ C0] RBP: ffff8881d1bf6fa8 R08: ffffffff8ddf199c R09: ffff88812fffa000 [ 1196.419837][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1196.427780][ C0] R13: ffff888024270b00 R14: ffff888036d36560 R15: ffff888036d36558 [ 1196.435734][ C0] ? netif_rx_ni+0x20c/0x3c0 [ 1196.440295][ C0] __msan_get_context_state+0x9/0x20 [ 1196.445548][ C0] do_softirq+0x23/0x150 [ 1196.449778][ C0] netif_rx_ni+0x21b/0x3c0 [ 1196.454166][ C0] dev_loopback_xmit+0x64c/0x730 [ 1196.459076][ C0] ip6_finish_output2+0x274a/0x2a70 [ 1196.464244][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.470018][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1196.476057][ C0] ? validate_xmit_skb+0x1aa0/0x1aa0 [ 1196.481309][ C0] __ip6_finish_output+0x9c0/0xa90 [ 1196.486394][ C0] ip6_finish_output+0x14b/0x4b0 [ 1196.491321][ C0] ip6_output+0x68d/0x7f0 [ 1196.495623][ C0] ? ip6_output+0x7f0/0x7f0 [ 1196.500094][ C0] ? ac6_seq_show+0x200/0x200 [ 1196.504741][ C0] ip6_local_out+0x17b/0x1e0 [ 1196.509303][ C0] ip6_send_skb+0xfd/0x430 [ 1196.513691][ C0] udp_v6_send_skb+0x14cc/0x21a0 [ 1196.518606][ C0] udpv6_sendmsg+0x52c0/0x55c0 [ 1196.523338][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.529111][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1196.535149][ C0] ? ip_do_fragment+0x3b50/0x3b50 [ 1196.540148][ C0] ? aa_sk_perm+0x7da/0xe70 [ 1196.544644][ C0] ? __udp6_lib_rcv+0x4c30/0x4c30 [ 1196.549634][ C0] inet6_sendmsg+0x15b/0x1d0 [ 1196.554195][ C0] ____sys_sendmsg+0xc82/0x1240 [ 1196.559019][ C0] ? inet6_compat_ioctl+0xa00/0xa00 [ 1196.564185][ C0] __sys_sendmmsg+0x9ee/0xfd0 [ 1196.568836][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 1196.574090][ C0] ? ktime_get_ts64+0x79f/0x8d0 [ 1196.578914][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.584080][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.589888][ C0] ? kmsan_get_metadata+0x116/0x180 [ 1196.595089][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1196.600868][ C0] ? __prepare_exit_to_usermode+0x16c/0x560 [ 1196.606729][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 1196.611465][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 1196.616284][ C0] do_syscall_64+0xad/0x160 [ 1196.620754][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1196.626618][ C0] RIP: 0033:0x45d5f9 [ 1196.630474][ C0] Code: Bad RIP value. [ 1196.634510][ C0] RSP: 002b:00007f3c2fc8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.642886][ C0] RAX: ffffffffffffffda RBX: 0000000000027a40 RCX: 000000000045d5f9 [ 1196.650827][ C0] RDX: 0000000000000237 RSI: 0000000020004d80 RDI: 0000000000000003 [ 1196.658804][ C0] RBP: 000000000118d168 R08: 0000000000000000 R09: 0000000000000000 [ 1196.666744][ C0] R10: 0000000004000000 R11: 0000000000000246 R12: 000000000118d12c [ 1196.674696][ C0] R13: 000000000169fb6f R14: 00007f3c2fc909c0 R15: 000000000118d12c [ 1196.682636][ C0] Modules linked in: [ 1196.686503][ C0] ---[ end trace 320a683e072fea91 ]--- [ 1196.691931][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1196.698487][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 f0 64 e1 91 31 c0 e8 e8 e1 2f ff 0f 0b 0f 0b 0f 0b 0f 0b e8 62 21 b2 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1196.718061][ C0] RSP: 0018:ffff88812fc04d68 EFLAGS: 00010046 [ 1196.724099][ C0] RAX: 0000000000000002 RBX: 0000000004d20001 RCX: 0000000004d20001 [ 1196.732042][ C0] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fc04e4c [ 1196.739988][ C0] RBP: ffff88812fc04e10 R08: ffffea000000000f R09: ffff88812fffa000 [ 1196.747928][ C0] R10: 0000000000000002 R11: ffff888036d35b80 R12: 0000000000000000 [ 1196.755878][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1196.763834][ C0] FS: 00007f3c2fc90700(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 1196.772730][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1196.779283][ C0] CR2: 0000000000749198 CR3: 00000001d26bc000 CR4: 00000000001406f0 [ 1196.787228][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1196.795240][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1196.803187][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1196.810959][ C0] Kernel Offset: disabled [ 1196.815285][ C0] Rebooting in 86400 seconds..