Extracting prog: 3m46.55602222s Minimizing prog: 54m44.107749788s Simplifying prog options: 5m0.242247414s Extracting C: 1m52.524388803s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-bind$rds-sendmsg$rds-sendmsg$rds-bpf$PROG_LOAD_XDP detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-bind$rds-sendmsg$rds-sendmsg$rds-bpf$PROG_LOAD_XDP detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) program crashed: WARNING in __rds_conn_create single: successfully extracted reproducer found reproducer with 24 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-bind$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-bind$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-splice-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$eJzs3U1vXNX9B/Dv9UNiDAoB8uefRkAmoQEDqbGdEhqxaWKPE1M/VLYjEVUVAZJUUaxSQSsBqkQqVV0VtYuqC7pj2RUSG9hU2bWvoItKFW8BsYq66FT3zji2scdjBz8RPh9rMvfhd8/5nbnX92SuZ+4J32SNRqN6tJlvdFh/8a87mi17zrmxzz/6+IPy8Zub2ZfuvJ9Pk74ktaQnyeGkd3RsdmaqQ0E3kstJbiVFkv1pPt/Rtc6ml1P8IQ8szd9K8Zey3srFr9E4Omrwrbbbxx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxFxejY0NBwkcmJ6Yuv1NqrhgBvt3LZ4N6fVaN+F591rDcpykf6+haH+j58aGn1o+U/x/NYc+6xakDy9OW9+x89+NIjPV2L26+T8Gb8tzUY8qY3fPvd9268trBw9a0tSuSb5nx9emJuZmLq7Pl6bWJupnbm9Omh5y+Mz9XGJybrc5fm5utTtdHZ+tn5mdnawOgzteEzZ07V6oOXZi5Onx8bnKwvLnzxeyNDQ6drLw/+uH52dm5m+vmXB+dGL0xMTk5Mn69iytVlzIvlgfijifnafP3sVK127frC1VMrMlrjkCiDhju1pAwa6RCTkaGRkeHhkZHh0y+ceeHFoaGepQXdqRYMfcXqTe4ctOURvakXm73sw66NRm7tCRy+hq5W/5/JTGQ6F/NKamv+jGYss5nJVJv1LVX//+CXHetd3v8v9vKHl1YfSdX/P9Gce6Jd/98ml537eTvv5r3cyGtZyEKu5q0Va/ffRYmNxu63auM/51PPdCYyl5lMZCpnqyW11pJazuR0Tmcor+ZCxjOXWsYzkcnUM5dLmct86tURNZrZ1HM28z3ljq5lIKN5JrUM50zO5FRqqWcwlzKTi5nO+YzlbFXKtVyvXvdT6+R4J2h4I0Ej6wSt0/+3Fmyi/+dbaqtP4XDXGq3+f1/n0IHRnUgIAAAA2HLf+UcOHHr47/9OevN4dY0dAAAAuNdUH9d/rHzqLaceTzE+MVkf2u20AAAAgC1UVN+xK5L052hzavGbUC4CAAAAwD2i+vv/E+VTfzl1NIX3/wAAAHCv6XyP/Y4RxcnUcrNcVbvSjLzSimjd57d/fGKyPjg6M/nScJ6q7jJQfdNgVWndOZhUXz94NseaUcf6m8/9K0vsK6OGB18aTl+Otxoy8GT59OTAGpEjZeSzeboZ+fRiZF9WRZ4qIwHgXnd8nf54o/3/sznZjDh5pLp9e8+RNfrgIT0rAOwVa46x02g0Gs2lVf/fYRSe4vuLw/+0ef//cK4dbX6kYDBv5M0s5EpOVt82qD5x0Co1t4osldq/7GMIJztcDehfNsLLycXrAUcfWHU94PUVsSM5ueqKQLtyT233bgCAHXV8VT+8+v3/nf5/8X8Fq67/r3j/vz9H2vWjPlIIAHvBnRHst3Fit9sIAKx0V7109zYmBAAAAAAAAAAAAAAAAAAAAAAAAAAAAPeAnbj//9edKIpky0u+mWSvNNDEtk307cwR/tN923CI7u7Ebp+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AlF0r3W8q5kf9IzlOT5nc9q+9zc7QR2WXE7t/NODux2HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA95rW/f+70ny+v7koPV3JiSSXk/xkt3PcSrd3O4Fdtuz+/+U+T6NIT3O3p+gdHZudmSp3f/aX6z//6OMPysfd1FMWUNawYnCJVg3tt3qo2qp/7OrbN3755i9qY+eqJM/Nj0+OTZ2f/eFS4KPFJ0ktzceixXx/XbSO4pUt/6Rs6cbqHa/qHVtd7/+vtfWdek/87Y/t27ZkKY3rC1dHyprm66/M/+rn199ZFvRwjiVPDiQDK2v6WfloU9Ox9K5Xb/FF8bviQP6cy9X+L9MoGkW5ix6s2n/ftesLVwffeHPhSpucDuZokitJ38ZzOrp6Tyyqjrqu3rLWoSqo/OdQh/LWdX/3gUajWeLw2m2476HqkOnfVBtq7dtQ6fC6t9p4qs2r+kie2uSebjQa769b4aL/NJqac8UXxb+KC/lnfrts/I+ucv+fyEZ+O8uYKnLZkdK+zSeWWj6yfMWrX41s+1vJNvh9Xs8P7uz/rmXn/9a+2pnz0bIat+73InlqeY1FsxdqqaYPfaVHap192mXZyvNQM6pNnv+X51Zv1yHP5zqcUTbVzo0qvig+LAbyZW4a/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANj7iqR7reVdyYkkB5M8WM7XksZW1NfVX2xFMRu0b9WSmztY+15xX7k3W4rbuZ13cmBXEwIAAAAAAABgy5wb+/yjjz8oH9Xf47vz3eLTpK/5l/6eJAeLP/WOjs3OTHUoqDe5nORWOd23uRzK7fLA0vytcu7w5tsCAGzM/wIAAP//Bxd9gA==") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r5 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r3, &(0x7f0000000540), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-write$binfmt_misc-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r4 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r2, &(0x7f0000000540), 0xfffffecc) (async) write$binfmt_misc(r2, &(0x7f0000000540), 0xfffffecc) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-write$binfmt_misc-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$eJzs3U1vXNX9B/Dv9UNiDAoB8uefRkAmoQEDqbGdEhqxaWKPE1M/VLYjEVUVAZJUUaxSQSsBqkQqVV0VtYuqC7pj2RUSG9hU2bWvoItKFW8BsYq66FT3zji2scdjBz8RPh9rMvfhd8/5nbnX92SuZ+4J32SNRqN6tJlvdFh/8a87mi17zrmxzz/6+IPy8Zub2ZfuvJ9Pk74ktaQnyeGkd3RsdmaqQ0E3kstJbiVFkv1pPt/Rtc6ml1P8IQ8szd9K8Zey3srFr9E4Omrwrbbbxx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxFxejY0NBwkcmJ6Yuv1NqrhgBvt3LZ4N6fVaN+F591rDcpykf6+haH+j58aGn1o+U/x/NYc+6xakDy9OW9+x89+NIjPV2L26+T8Gb8tzUY8qY3fPvd9268trBw9a0tSuSb5nx9emJuZmLq7Pl6bWJupnbm9Omh5y+Mz9XGJybrc5fm5utTtdHZ+tn5mdnawOgzteEzZ07V6oOXZi5Onx8bnKwvLnzxeyNDQ6drLw/+uH52dm5m+vmXB+dGL0xMTk5Mn69iytVlzIvlgfijifnafP3sVK127frC1VMrMlrjkCiDhju1pAwa6RCTkaGRkeHhkZHh0y+ceeHFoaGepQXdqRYMfcXqTe4ctOURvakXm73sw66NRm7tCRy+hq5W/5/JTGQ6F/NKamv+jGYss5nJVJv1LVX//+CXHetd3v8v9vKHl1YfSdX/P9Gce6Jd/98ml537eTvv5r3cyGtZyEKu5q0Va/ffRYmNxu63auM/51PPdCYyl5lMZCpnqyW11pJazuR0Tmcor+ZCxjOXWsYzkcnUM5dLmct86tURNZrZ1HM28z3ljq5lIKN5JrUM50zO5FRqqWcwlzKTi5nO+YzlbFXKtVyvXvdT6+R4J2h4I0Ej6wSt0/+3Fmyi/+dbaqtP4XDXGq3+f1/n0IHRnUgIAAAA2HLf+UcOHHr47/9OevN4dY0dAAAAuNdUH9d/rHzqLaceTzE+MVkf2u20AAAAgC1UVN+xK5L052hzavGbUC4CAAAAwD2i+vv/E+VTfzl1NIX3/wAAAHCv6XyP/Y4RxcnUcrNcVbvSjLzSimjd57d/fGKyPjg6M/nScJ6q7jJQfdNgVWndOZhUXz94NseaUcf6m8/9K0vsK6OGB18aTl+Otxoy8GT59OTAGpEjZeSzeboZ+fRiZF9WRZ4qIwHgXnd8nf54o/3/sznZjDh5pLp9e8+RNfrgIT0rAOwVa46x02g0Gs2lVf/fYRSe4vuLw/+0ef//cK4dbX6kYDBv5M0s5EpOVt82qD5x0Co1t4osldq/7GMIJztcDehfNsLLycXrAUcfWHU94PUVsSM5ueqKQLtyT233bgCAHXV8VT+8+v3/nf5/8X8Fq67/r3j/vz9H2vWjPlIIAHvBnRHst3Fit9sIAKx0V7109zYmBAAAAAAAAAAAAAAAAAAAAAAAAAAAAPeAnbj//9edKIpky0u+mWSvNNDEtk307cwR/tN923CI7u7Ebp+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AlF0r3W8q5kf9IzlOT5nc9q+9zc7QR2WXE7t/NODux2HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA95rW/f+70ny+v7koPV3JiSSXk/xkt3PcSrd3O4Fdtuz+/+U+T6NIT3O3p+gdHZudmSp3f/aX6z//6OMPysfd1FMWUNawYnCJVg3tt3qo2qp/7OrbN3755i9qY+eqJM/Nj0+OTZ2f/eFS4KPFJ0ktzceixXx/XbSO4pUt/6Rs6cbqHa/qHVtd7/+vtfWdek/87Y/t27ZkKY3rC1dHyprm66/M/+rn199ZFvRwjiVPDiQDK2v6WfloU9Ox9K5Xb/FF8bviQP6cy9X+L9MoGkW5ix6s2n/ftesLVwffeHPhSpucDuZokitJ38ZzOrp6Tyyqjrqu3rLWoSqo/OdQh/LWdX/3gUajWeLw2m2476HqkOnfVBtq7dtQ6fC6t9p4qs2r+kie2uSebjQa769b4aL/NJqac8UXxb+KC/lnfrts/I+ucv+fyEZ+O8uYKnLZkdK+zSeWWj6yfMWrX41s+1vJNvh9Xs8P7uz/rmXn/9a+2pnz0bIat+73InlqeY1FsxdqqaYPfaVHap192mXZyvNQM6pNnv+X51Zv1yHP5zqcUTbVzo0qvig+LAbyZW4a/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANj7iqR7reVdyYkkB5M8WM7XksZW1NfVX2xFMRu0b9WSmztY+15xX7k3W4rbuZ13cmBXEwIAAAAAAABgy5wb+/yjjz8oH9Xf47vz3eLTpK/5l/6eJAeLP/WOjs3OTHUoqDe5nORWOd23uRzK7fLA0vytcu7w5tsCAGzM/wIAAP//Bxd9gA==") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r4 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f00000010c0)=""/184, 0xb8) write$binfmt_misc(r2, &(0x7f0000000540), 0xfffffecc) (async) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-getdents-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) r3 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f00000010c0)=""/184, 0xb8) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-open-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-open-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") open(&(0x7f0000001080)='.\x00', 0x8000, 0x50) (async) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-syz_mount_image$iso9660-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x380cc52, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466382c6d61703d6f66662c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d63703837342c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f726f636b000100006f636b2c73686f776173736f632c73e2736563746f723d3078303030303030303030303030313030312c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c2c"], 0x3, 0x9e2, &(0x7f0000000680)="$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") bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-sendmsg$nl_route-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-sendmsg$nl_route-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_CREATE-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-sendmsg$IPSET_CMD_CREATE-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-socket$nl_route-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-close-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-socket$inet_udp-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-pipe-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-setns-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setns(0xc9, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-mmap-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sg-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0xe6, 0x2602) setns(0xc9, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: SYZFAIL: failed to recv rpc ignore low priority crash: SYZFAIL: failed to recv rpc testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, 0x0, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-setns-socket$rds-bind$rds-sendmsg$rds-sendmsg$rds detailed listing: executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) program crashed: WARNING in __rds_conn_create validation run: crashed=true reproducing took 1h11m54.969126892s repro crashed as (corrupted=false): ------------[ cut here ]------------ raw_local_irq_restore() called with IRQs enabled WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10, CPU#0: syz.0.17/5532 Modules linked in: CPU: 0 UID: 0 PID: 5532 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10 Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d 74 0a 93 05 <67> 48 0f b9 3a 90 e9 09 05 03 00 cc cc cc cc cc cc cc cc cc 90 90 RSP: 0018:ffffc90002bff620 EFLAGS: 00010206 RAX: 0000000000000202 RBX: 0000000000000287 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff917dd080 RBP: ffffc90002bff7a0 R08: ffffffff914a1263 R09: 1ffffffff229424c R10: dffffc0000000000 R11: fffffbfff229424d R12: ffffffff8b2ad755 R13: ffff888059832458 R14: ffffffff914a1260 R15: 0000000000000287 FS: 00007f190191d6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f48b022e440 CR3: 0000000044f27000 CR4: 0000000000352ef0 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] _raw_spin_unlock_irqrestore+0x67/0x80 kernel/locking/spinlock.c:221 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __rds_conn_create+0x1de5/0x2290 net/rds/connection.c:364 rds_conn_create_outgoing+0x43/0x60 net/rds/connection.c:394 rds_sendmsg+0xfca/0x20e0 net/rds/send.c:1348 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f190099e559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f190191d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1900c25fa0 RCX: 00007f190099e559 RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 RBP: 00007f1900a35b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1900c26038 R14: 00007f1900c25fa0 R15: 00007ffdb2c18668 ---------------- Code disassembly (best guess): 0: cc int3 1: cc int3 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: cc int3 c: cc int3 d: cc int3 e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: f3 0f 1e fa endbr64 22: 90 nop 23: 48 8d 3d 74 0a 93 05 lea 0x5930a74(%rip),%rdi # 0x5930a9e * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 90 nop 30: e9 09 05 03 00 jmp 0x3053e 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: cc int3 3c: cc int3 3d: cc int3 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): ------------[ cut here ]------------ raw_local_irq_restore() called with IRQs enabled WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10, CPU#0: syz.0.17/5532 Modules linked in: CPU: 0 UID: 0 PID: 5532 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10 Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d 74 0a 93 05 <67> 48 0f b9 3a 90 e9 09 05 03 00 cc cc cc cc cc cc cc cc cc 90 90 RSP: 0018:ffffc90002bff620 EFLAGS: 00010206 RAX: 0000000000000202 RBX: 0000000000000287 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff917dd080 RBP: ffffc90002bff7a0 R08: ffffffff914a1263 R09: 1ffffffff229424c R10: dffffc0000000000 R11: fffffbfff229424d R12: ffffffff8b2ad755 R13: ffff888059832458 R14: ffffffff914a1260 R15: 0000000000000287 FS: 00007f190191d6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f48b022e440 CR3: 0000000044f27000 CR4: 0000000000352ef0 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] _raw_spin_unlock_irqrestore+0x67/0x80 kernel/locking/spinlock.c:221 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __rds_conn_create+0x1de5/0x2290 net/rds/connection.c:364 rds_conn_create_outgoing+0x43/0x60 net/rds/connection.c:394 rds_sendmsg+0xfca/0x20e0 net/rds/send.c:1348 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f190099e559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f190191d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1900c25fa0 RCX: 00007f190099e559 RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 RBP: 00007f1900a35b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1900c26038 R14: 00007f1900c25fa0 R15: 00007ffdb2c18668 ---------------- Code disassembly (best guess): 0: cc int3 1: cc int3 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: cc int3 c: cc int3 d: cc int3 e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: f3 0f 1e fa endbr64 22: 90 nop 23: 48 8d 3d 74 0a 93 05 lea 0x5930a74(%rip),%rdi # 0x5930a9e * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 90 nop 30: e9 09 05 03 00 jmp 0x3053e 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: cc int3 3c: cc int3 3d: cc int3 3e: 90 nop 3f: 90 nop