f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:13 executing program 5: 22:56:14 executing program 4: 22:56:14 executing program 2: 22:56:14 executing program 3: 22:56:14 executing program 4: 22:56:14 executing program 3: 22:56:14 executing program 2: 22:56:14 executing program 5: 22:56:14 executing program 0: 22:56:15 executing program 4: 22:56:15 executing program 2: 22:56:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:15 executing program 3: 22:56:15 executing program 0: 22:56:15 executing program 5: 22:56:15 executing program 3: 22:56:16 executing program 2: 22:56:16 executing program 4: 22:56:16 executing program 0: 22:56:16 executing program 5: 22:56:16 executing program 3: 22:56:16 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:16 executing program 2: 22:56:16 executing program 4: 22:56:16 executing program 0: 22:56:17 executing program 5: 22:56:17 executing program 3: 22:56:17 executing program 2: 22:56:17 executing program 4: 22:56:17 executing program 0: 22:56:17 executing program 5: 22:56:17 executing program 3: 22:56:17 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:18 executing program 2: 22:56:18 executing program 4: 22:56:18 executing program 0: 22:56:18 executing program 5: 22:56:18 executing program 3: 22:56:18 executing program 2: 22:56:18 executing program 4: 22:56:18 executing program 0: 22:56:18 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:19 executing program 5: 22:56:19 executing program 3: 22:56:19 executing program 2: 22:56:19 executing program 4: 22:56:19 executing program 5: 22:56:19 executing program 0: 22:56:19 executing program 3: 22:56:19 executing program 2: 22:56:19 executing program 4: 22:56:19 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:20 executing program 5: 22:56:20 executing program 0: 22:56:20 executing program 3: 22:56:20 executing program 2: 22:56:20 executing program 4: 22:56:20 executing program 5: 22:56:20 executing program 0: 22:56:21 executing program 3: 22:56:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:21 executing program 4: 22:56:21 executing program 2: 22:56:21 executing program 5: 22:56:21 executing program 3: 22:56:21 executing program 0: 22:56:21 executing program 4: 22:56:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:22 executing program 2: 22:56:22 executing program 5: 22:56:22 executing program 3: 22:56:22 executing program 0: 22:56:22 executing program 4: 22:56:22 executing program 5: 22:56:22 executing program 2: 22:56:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:22 executing program 3: 22:56:22 executing program 0: 22:56:23 executing program 4: 22:56:23 executing program 5: 22:56:23 executing program 2: 22:56:23 executing program 3: 22:56:23 executing program 4: 22:56:23 executing program 0: 22:56:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:23 executing program 2: 22:56:23 executing program 5: 22:56:24 executing program 3: 22:56:24 executing program 0: 22:56:24 executing program 4: 22:56:24 executing program 5: 22:56:24 executing program 2: 22:56:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:24 executing program 0: 22:56:24 executing program 3: 22:56:25 executing program 5: 22:56:25 executing program 4: 22:56:25 executing program 2: 22:56:25 executing program 0: 22:56:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={0x0}}, 0x0) 22:56:25 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:25 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') pipe(&(0x7f0000000b00)) 22:56:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x6, &(0x7f0000000280)=@framed={{}, [@alu={0x0, 0x0, 0x5}, @map_val]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000340)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:25 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @remote}}) 22:56:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 22:56:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000780)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{0xfffffffffffffffe}], 0x1}}], 0x2, 0x0) 22:56:26 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0xcd) 22:56:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) 22:56:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc020660b, 0x0) 22:56:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0xa318e26eb48f6f18}) 22:56:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newchain={0xec4, 0x64, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x85}}, @TCA_RATE={0x6, 0x5, {0xac, 0x53}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe78, 0x2, [@TCA_RSVP_ACT={0x668, 0x6, [@m_tunnel_key={0x90, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={[], [], @multicast1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}]}, {0x15, 0x6, "d73cf57673c6f06e6d5fd89a95a6c567b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ct={0xd4, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_ZONE={0x6}]}, {0x91, 0x6, "0d918790d593d7c94fe444e9e9a1d188d17a30c3b53055ddd74e9c13c06e9fb8fd7701e743273faead0f7cd0178fea09c6bf551767a4d47e00d369db8b0bea0b545349869467c50035eafa591fc600132edaee14ce0a13677dcdec08d73ba5dbc6d08c94ccef0a670ad6123a0f589bff879849f22a0233d413db7e5376efae50eb0691599b4d5d2fc36f4cad3a"}, {0xc}, {0xc}}}, @m_ctinfo={0xc0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6}]}, {0x71, 0x6, "3425da468e9b9f9299292a62c1a963b75946d3f65d94c8d1517eb4e8570e848d6bb05bcd4d8d13950502ec7ed94dbe4233e01cd6b56420a01f7c1763e8fcc79793ce14daf31625dc31daea204f30dae64793696ef03761a34d8299f96fb628a93baf807357611c793f856bea5a"}, {0xc}, {0xc}}}, @m_gact={0x120, 0x0, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x7}}, @TCA_GACT_PROB={0xc}]}, {0x9d, 0x6, "2516d95c67499b34af4fd19031caa3ff70e333cb2c8319f3e17e99ce1ea24423d9cb5e75abd337fddaf2743b49330f35350e4b76befc724e6bd6651e8feddd3632d146353ac23f55072f2a6c5d836e558c2ce692bc713a4becb349f6736c783017a1205c06462b01a64fbf9a5faee006bfa5d50897e307d83a31b098a7f30060b8549e3035a8fd94bf3eda91cfa0e362f72938b12ca21e8072"}, {0xc}, {0xc}}}, @m_ct={0x54, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x11, 0x6, "b0d395e18ce69c77740c5a5c94"}, {0xc}, {0xc}}}, @m_tunnel_key={0x34, 0xe, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x14c, 0x16, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x3, 0xffffffffffffffff, 0x9, 0x7}, 0x100}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x14c, 0x0, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '$\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x81, 0x1, 0x100, 0xc5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1f, 0xffff, 0x10000002, 0x81, 0x80000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffc01, 0x2, 0x1, 0x1, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, 'p\'%/%,@$\x00'}]}, {0xbf, 0x6, "1567b334460dedb153137d9ccaacf69017487f18e4f57b2baf978f9ce48d4b4d2fc48b3889eb03d4c2196b65ea1dc3551ac32153610e3e1aeda9bd739e811d4c8a66fa7af4c8c849ff9bd1ec113e6df4f9bb370553c3b2dc89ff4e9db4253ff96347746615ca5bf5373189a6e54b9d5bcba9bcb5cfc6c34800c8640b7192efdf31875614c94efb187398d736cc12fad7ebdd34ec2587561cd707365ae0b376761ddba687bc7adbeb660b7e986b89a3e63f4bc8aa11f90a77755f4b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xb45, 0x3, 0x7, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0xfffffffc, 0x7ff, 0x6]}]}]}}]}, 0xec4}}, 0xc0) 22:56:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5}, 0x14}}, 0x0) 22:56:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000180)) 22:56:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}}) 22:56:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000240)=@raw=[@ldst={0x1, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:27 executing program 3: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040), 0xfffffdc8) 22:56:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 22:56:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x0, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x88) 22:56:28 executing program 2: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) 22:56:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'ipvlan1\x00', 'vcan0\x00', {}, {}, 0x0, 0x5}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'netpci0\x00', 'wg2\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 22:56:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1a, 0x0, &(0x7f0000000b40)) 22:56:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'veth0_to_team\x00'}}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'geneve0\x00', 'ip6gretap0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30, 'mark\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth1_to_bond\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="8d4e311e02f1"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 22:56:28 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000000600110000000000080013000000000005d8"], 0x54}}, 0x0) 22:56:28 executing program 2: socketpair(0x2, 0xa, 0xffff, &(0x7f0000000000)) 22:56:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "6b5ab2907669d83a", "91d440b94dd040465fc7b9b1fdb955bb", "76063420", "bbf33878bdfb314f"}, 0x28) [ 2048.950423][ T2369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:56:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x3f00}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000180)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) [ 2049.060042][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:56:29 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001740)={0xa, 0xa3, 0xf9, 0x17}, 0x40) 22:56:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) 22:56:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:30 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:56:30 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000700)={&(0x7f0000000740), 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0) 22:56:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="fe", 0x1}], 0x1}}], 0x1, 0x0) 22:56:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@hoplimit], 0xffffffffffffff7c}}], 0x2, 0x0) 22:56:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x17, 0x0, &(0x7f0000000b40)) 22:56:30 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 22:56:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, &(0x7f0000000b40)) 22:56:31 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x20, 0x0, 0x9, @mcast1, @loopback, 0x7800, 0x0, 0x4, 0x2c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 22:56:31 executing program 2: pipe(&(0x7f0000001000)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) 22:56:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 22:56:31 executing program 5: socket$inet_icmp(0xa, 0x2, 0x3a) 22:56:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6_vti0\x00'}) 22:56:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, &(0x7f0000000b40)) 22:56:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x7, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004bdadd"], 0x14}}, 0x0) 22:56:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x10001}, 0x4) 22:56:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x6, 0x4) 22:56:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x3, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x98, 0x98, 0x0, 0x130, 0x1c8, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 22:56:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x2}, 0x14) 22:56:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000340)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}]}, 0x18}}, 0x0) 22:56:33 executing program 0: socketpair(0x1, 0x0, 0xfff, &(0x7f0000000000)) 22:56:33 executing program 4: pipe(&(0x7f0000001000)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 22:56:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0x2, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x3) 22:56:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) 22:56:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @broadcast}, @empty, [0x0, 0x0, 0xff], [], 'xfrm0\x00', 'bridge0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00'}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 22:56:34 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 22:56:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{}, [@func]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000180)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001b40)={'ip6gre0\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 22:56:35 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c020000130001"], 0x23c}}, 0x0) 22:56:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 22:56:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, &(0x7f0000000b40)) 22:56:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8913, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 22:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x301}, 0x14}}, 0x0) 22:56:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e}]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000180)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:35 executing program 2: pipe(&(0x7f00000004c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0xfaff, 0x0, 0x32, 0xffffffffffffffff, 0x0) 22:56:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 22:56:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@private, @private}, &(0x7f0000000b40)=0xfffffffffffffed3) 22:56:36 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) 22:56:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) 22:56:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000b40)) 22:56:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0x69288, 0x0, 0x7, 0x0, 0x1}, 0x40) 22:56:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xb4) 22:56:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x6, 0x16, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x98, 0x98, 0x0, 0x130, 0x1c8, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 22:56:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000003c0)=0x2, 0x4) 22:56:37 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000540)=[{r0}, {r1}, {r2, 0x8404}], 0x3, 0xffff) 22:56:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000500)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000b40)) 22:56:38 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0xfffffffffffffffe, 0x0) 22:56:38 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x2c) 22:56:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340), 0x4) 22:56:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}) 22:56:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}}}, 0x88) 22:56:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x2, 0x0) 22:56:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x100}, 0x4) 22:56:39 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000480), 0x8) 22:56:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 22:56:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 22:56:39 executing program 2: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 22:56:39 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 22:56:39 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001380)='\'', &(0x7f0000000080)="0e"}, 0x48) 22:56:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) 22:56:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 22:56:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001740)={0xa, 0xa3, 0xf9, 0x17, 0x40}, 0x40) 22:56:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:56:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newchain={0xec4, 0x64, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe78, 0x2, [@TCA_RSVP_ACT={0x668, 0x6, [@m_tunnel_key={0x90, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={[], [], @multicast1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}]}, {0x15, 0x6, "d73cf57673c6f06e6d5fd89a95a6c567b2"}, {0xc}, {0xc}}}, @m_ct={0xd4, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_ZONE={0x6}]}, {0x91, 0x6, "0d918790d593d7c94fe444e9e9a1d188d17a30c3b53055ddd74e9c13c06e9fb8fd7701e743273faead0f7cd0178fea09c6bf551767a4d47e00d369db8b0bea0b545349869467c50035eafa591fc600132edaee14ce0a13677dcdec08d73ba5dbc6d08c94ccef0a670ad6123a0f589bff879849f22a0233d413db7e5376efae50eb0691599b4d5d2fc36f4cad3a"}, {0xc}, {0xc}}}, @m_ctinfo={0xc0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6}]}, {0x71, 0x6, "3425da468e9b9f9299292a62c1a963b75946d3f65d94c8d1517eb4e8570e848d6bb05bcd4d8d13950502ec7ed94dbe4233e01cd6b56420a01f7c1763e8fcc79793ce14daf31625dc31daea204f30dae64793696ef03761a34d8299f96fb628a93baf807357611c793f856bea5a"}, {0xc}, {0xc}}}, @m_gact={0x120, 0x0, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0x9d, 0x6, "2516d95c67499b34af4fd19031caa3ff70e333cb2c8319f3e17e99ce1ea24423d9cb5e75abd337fddaf2743b49330f35350e4b76befc724e6bd6651e8feddd3632d146353ac23f55072f2a6c5d836e558c2ce692bc713a4becb349f6736c783017a1205c06462b01a64fbf9a5faee006bfa5d50897e307d83a31b098a7f30060b8549e3035a8fd94bf3eda91cfa0e362f72938b12ca21e8072"}, {0xc}, {0xc}}}, @m_ct={0x64, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev}, @TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x11, 0x6, "b0d395e18ce69c77740c5a5c94"}, {0xc}, {0xc}}}, @m_tunnel_key={0xfc, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0xc9, 0x6, "987a850d647495d1df98c6a5bc92f3cfe233a8b79d44d53545b65eb2e695908de31ac4306f4a0248a24a6f1a73d847f0af0c5468738ad0602ddf38b32a1a211f18cb2bf07549cf2f37998b1c9c0151f7109cd4fd1a40ed7017e0fdd9dfb51b54f5dbb719163b8b3ec0b86b7828c25e7cec91ce6651ba942a9787c2ce35751e39754cffab3aa731a77aba672457164947d75e3e0fb0b62161a78eb8905cbd181a7dd6c35b3b088da5b6a91ea5bbb16e7073f12452b19f04a88382edfa853ff70bf1025301b2"}, {0xc}, {0xc}}}, @m_connmark={0x14c, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0xfd, 0x6, "81ca3fdcb4aaf6fa124a732bd6159b9e8dcb296e49db730bb7aea92c8c54e4876217fc128c067524857f043e82104a190e4fbdce76bb64ebf87720415d16389c1f0b22842047159c8590176aa64b28ea620d4a30358741d3caebabccb7e3c9156176c48835e75e591baef04d4fc3ff075eef847887f6e503b117dab546bfee385951d758576893fc1e6a84cfee5a4a47d932e01a09dd6e3ddacf2cdc0d73a49aaea456bb6a2c0b039e93324a2fbc675283d498520798c8f6824eec721f3bd284ca0f758ad48983abe3345ab61c5eb9f67aa9d231c711824eb98abc2df2247d7b938f1bf989b417c0382f73876001a21b2aba600c7630fdcbb7"}, {0xc}, {0xc}}}, @m_simple={0x74, 0x0, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x45, 0x6, "1567b334460dedb153137d9ccaacf69017487f18e4f57b2baf978f9ce48d4b4d2fc48b3889eb03d4c2196b65ea1dc3551ac32153610e3e1aeda9bd739e811d4c8a"}, {0xc}, {0xc}}}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0xec4}}, 0x0) 22:56:40 executing program 4: unshare(0x8000100) 22:56:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000d7f9ff94"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000180)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:56:41 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x5}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)) 22:56:41 executing program 0: r0 = socket(0x1, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001680), 0x8) 22:56:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001780)=[{&(0x7f00000000c0)=@abs, 0x6e, 0x0}], 0x1, 0x0) 22:56:41 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000000), 0x0, 0x4000) 22:56:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x0, 0x0) statx(r0, &(0x7f0000000000)='\x00', 0x1000, 0x0, &(0x7f0000000100)) 22:56:41 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) 22:56:41 executing program 0: r0 = socket(0x1, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000001800)) 22:56:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000140)=0xfffffffffffffe87) 22:56:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:42 executing program 4: r0 = socket(0x1, 0x3, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 22:56:42 executing program 5: open$dir(&(0x7f0000000600)='./file0\x00', 0x40, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000680)) 22:56:42 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) statx(r0, &(0x7f0000000000)='\x00', 0x1000, 0x0, &(0x7f0000000100)) 22:56:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0)=""/130, 0x82, 0x20, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) 22:56:42 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="1756eb41b42a340c3fd9f631864168e3bbc130bc072070b9a0d77ef87f1c1f79a88ef2d5971cb52be8424a4e569c077aca821031bc1b28014e6cbde73268e3bab3d41af67514df3237625f58456ce72cdbec023cab38f502f91880d79b9bacc5972520df77c4f1d1db37ed4cc25e1323405c48f4fd6fa7d3b33bb6131f1316d17dea8d86f12158840ba54bedb9698783088d9b6e4df3dd26255f221d09051cd7c588116cce601012976bbe2d9c29c89000185699c028d525741bbff9705a2fc2", 0xc0}], 0x1000000000000030}}], 0x1, 0x0) 22:56:42 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 22:56:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:43 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001380)={&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffeed}, 0x0) 22:56:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000000), 0x0, 0x8000) 22:56:43 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001c00), 0x0, 0x4000) 22:56:43 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='N', 0x1}], 0x1}}], 0x1, 0x0) 22:56:43 executing program 5: 22:56:43 executing program 3: 22:56:43 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:44 executing program 2: 22:56:44 executing program 0: 22:56:44 executing program 4: 22:56:44 executing program 5: 22:56:44 executing program 3: 22:56:44 executing program 2: 22:56:44 executing program 4: 22:56:44 executing program 0: 22:56:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:45 executing program 5: 22:56:45 executing program 3: 22:56:45 executing program 2: 22:56:45 executing program 4: 22:56:45 executing program 0: 22:56:45 executing program 5: 22:56:45 executing program 3: 22:56:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:46 executing program 2: 22:56:46 executing program 4: 22:56:46 executing program 5: 22:56:46 executing program 0: 22:56:46 executing program 3: 22:56:46 executing program 2: 22:56:46 executing program 5: 22:56:46 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 22:56:46 executing program 0: 22:56:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:47 executing program 3: 22:56:47 executing program 2: 22:56:47 executing program 5: 22:56:47 executing program 4: 22:56:47 executing program 0: 22:56:47 executing program 2: 22:56:47 executing program 5: 22:56:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:47 executing program 3: 22:56:48 executing program 0: 22:56:48 executing program 4: 22:56:48 executing program 2: 22:56:48 executing program 3: 22:56:48 executing program 5: 22:56:48 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:48 executing program 0: 22:56:48 executing program 4: 22:56:48 executing program 2: 22:56:49 executing program 5: 22:56:49 executing program 3: 22:56:49 executing program 4: 22:56:49 executing program 0: 22:56:49 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:49 executing program 2: 22:56:49 executing program 5: 22:56:49 executing program 3: 22:56:50 executing program 2: 22:56:50 executing program 4: 22:56:50 executing program 5: 22:56:50 executing program 0: 22:56:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:50 executing program 3: 22:56:50 executing program 2: 22:56:50 executing program 4: 22:56:50 executing program 5: 22:56:50 executing program 0: 22:56:51 executing program 3: 22:56:51 executing program 2: 22:56:51 executing program 4: 22:56:51 executing program 5: 22:56:51 executing program 0: 22:56:51 executing program 3: 22:56:51 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:51 executing program 2: 22:56:52 executing program 5: 22:56:52 executing program 0: 22:56:52 executing program 4: 22:56:52 executing program 3: 22:56:52 executing program 2: 22:56:52 executing program 0: 22:56:52 executing program 5: 22:56:52 executing program 4: 22:56:53 executing program 3: 22:56:53 executing program 2: 22:56:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:53 executing program 0: 22:56:53 executing program 4: 22:56:53 executing program 5: 22:56:53 executing program 3: 22:56:53 executing program 2: 22:56:53 executing program 0: 22:56:54 executing program 4: 22:56:54 executing program 5: 22:56:54 executing program 2: 22:56:54 executing program 3: 22:56:54 executing program 0: 22:56:54 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:54 executing program 5: 22:56:54 executing program 4: 22:56:55 executing program 3: 22:56:55 executing program 2: 22:56:55 executing program 0: 22:56:55 executing program 5: 22:56:55 executing program 4: 22:56:55 executing program 3: 22:56:55 executing program 2: 22:56:55 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:55 executing program 0: 22:56:56 executing program 5: 22:56:56 executing program 4: 22:56:56 executing program 3: 22:56:56 executing program 2: 22:56:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:56 executing program 0: 22:56:56 executing program 5: 22:56:56 executing program 4: 22:56:56 executing program 3: 22:56:57 executing program 2: 22:56:57 executing program 5: 22:56:57 executing program 4: 22:56:57 executing program 0: 22:56:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000]}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:58 executing program 0: 22:56:58 executing program 5: 22:56:58 executing program 4: 22:56:58 executing program 2: 22:56:58 executing program 3: 22:56:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000]}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:58 executing program 5: 22:56:58 executing program 4: 22:56:58 executing program 3: 22:56:58 executing program 2: 22:56:58 executing program 0: 22:56:59 executing program 5: 22:56:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000]}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:59 executing program 2: 22:56:59 executing program 3: 22:56:59 executing program 4: 22:56:59 executing program 0: 22:56:59 executing program 5: 22:57:00 executing program 4: 22:57:00 executing program 3: 22:57:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 22:57:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:00 executing program 0: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xfffffffffffffffb}, 0x0, 0x0) 22:57:00 executing program 5: mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 22:57:00 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ee28520030000400000000000055223e9b333e680600aa3a"], 0x0) 22:57:00 executing program 4: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 22:57:00 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x8, 0x0, 0x0) 22:57:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffdfffff86dd60ee6755f6f73fce9112642852003000040000000000005522"], 0x0) 22:57:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000000c0)={0x0, 0xffffffffffffa964}, 0x10) 22:57:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:01 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x801, 0x0, 0x0) 22:57:01 executing program 2: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f00000000c0), &(0x7f0000000040)={0x8}, 0x0, 0x0) 22:57:01 executing program 3: socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x5, 0x40000000}, &(0x7f0000000000), 0x0, 0x0) 22:57:01 executing program 0: symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 22:57:01 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x933504d7cfafcbfc, 0x0) r0 = geteuid() getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f0000000000)='./file0\x00', r0, r1) 22:57:02 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000002780)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) 22:57:02 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 22:57:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:02 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) poll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x0) 22:57:02 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 22:57:02 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 22:57:02 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000002780)='/dev/zero\x00', 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 22:57:02 executing program 4: symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 22:57:03 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 22:57:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="c5", 0x1}, {&(0x7f00000000c0)="b91cf916d7393f7546c0518ebaa47f14bb5ea3e27bb1bf83bb9ce9359eba63ce89091ed539d06a08e2e7e263c82fbf6da00923344825f36cf94e0b114f0d0504820c909c9f3f1f16ea32bb5bd59d25ac991cd3", 0x53}, {&(0x7f0000000140)="b6e4223157751743184ffeab76aff20f05a7d69c87d81a68d5322696002479b07126370826b8315b88c58c37007ea5485a9d9fc9c5d0bf50c37a870190e83de12b1c2225207d52431ab2e7efc67138eded75070302307b2053e6b91a64469f30049cfb6490205c71a8c94b544a864c0d715d31123ee81d81e1b2f18f8491e47a49e8c7d4f4f545e5a7345f91302901221607a5327c7fef8cf3a4290192cb", 0x9e}, {&(0x7f0000000200)="f7c9aa001a", 0x5}, {&(0x7f0000000340)="9b16ef68947c1bc87cb14b2aa45d081b16e18cd292a0600e5f2d97a18e7dfe637435622b008867908e9d7e611fde81bb2de3c494dd69ed392d4156b937a52bc8117078f857b4938a2fc5ad6ea0f606abc2fb0d499a27fb5de09c5a9b969d59afa8e2d4a4863848876bc581844b1bba68fba0ae30b8cb37948ac6", 0x7a}], 0x5}, 0x0) 22:57:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:03 executing program 3: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 22:57:03 executing program 2: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 22:57:03 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) 22:57:03 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0xf, 0x0) 22:57:03 executing program 5: dup(0xffffffffffffff9c) getrusage(0x0, &(0x7f0000000100)) 22:57:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) 22:57:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 22:57:04 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:57:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:04 executing program 0: 22:57:04 executing program 5: 22:57:04 executing program 3: 22:57:04 executing program 2: 22:57:05 executing program 0: 22:57:05 executing program 4: 22:57:05 executing program 5: 22:57:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:05 executing program 3: 22:57:05 executing program 2: 22:57:05 executing program 0: 22:57:05 executing program 4: 22:57:05 executing program 5: 22:57:06 executing program 2: 22:57:06 executing program 3: 22:57:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:06 executing program 0: 22:57:06 executing program 4: 22:57:06 executing program 5: 22:57:06 executing program 2: 22:57:06 executing program 3: 22:57:07 executing program 4: 22:57:07 executing program 5: 22:57:07 executing program 0: 22:57:07 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:07 executing program 3: 22:57:07 executing program 2: 22:57:07 executing program 4: 22:57:07 executing program 3: 22:57:07 executing program 0: 22:57:07 executing program 5: 22:57:08 executing program 4: 22:57:08 executing program 2: 22:57:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:08 executing program 3: 22:57:08 executing program 0: 22:57:08 executing program 5: 22:57:08 executing program 4: 22:57:08 executing program 3: 22:57:08 executing program 2: 22:57:09 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 22:57:09 executing program 5: futex(0x0, 0x3c, 0x0, 0x0, &(0x7f00000010c0), 0x0) 22:57:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x1800) r1 = socket(0x2, 0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x7, 0xffffff01, 0x0, 0xd82, r0, 0x8, [], r4, r0, 0x3, 0x4}, 0x40) 22:57:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 22:57:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 22:57:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000016280)={&(0x7f0000015180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000015280)=""/4096, 0x44, 0x1000, 0x1}, 0x20) 22:57:09 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffff7f00000000}}, 0x0) 22:57:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000000)=ANY=[], 0x2a) 22:57:10 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 22:57:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x0, 0x4}, 0x40) 22:57:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000016280)={&(0x7f0000015180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000015280)=""/4096, 0x44, 0x1000, 0x1}, 0x20) 22:57:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') close(r0) 22:57:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000000)=ANY=[], 0x1800) 22:57:11 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 22:57:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000e0001006e657464657673d38591"], 0x3c}}, 0x0) 22:57:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000000)=ANY=[], 0x2000002a) 22:57:11 executing program 2: futex(&(0x7f0000001040), 0x5, 0x0, 0x0, &(0x7f00000010c0), 0x0) 22:57:11 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5411, &(0x7f00000000c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f0000000340)={'wg0\x00', @ifru_hwaddr=@dev}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000140)=""/92) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xb7, 0x80, 0x6f654c14, 0x18, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, 0x7800, 0x1, 0x1, 0x29}}) 22:57:11 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x8, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @echo_request}}}}}, 0x0) 22:57:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:12 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109880, 0x0) read$char_raw(r0, 0x0, 0x1800) 22:57:12 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 22:57:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000016c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 22:57:12 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40a0012, r0, 0x0) 22:57:12 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_raw(r0, 0x0, 0x0) 22:57:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e25, @multicast2}}, 0x0, 0x7, 0x12, 0x0, "0000000000000000000039015ff4e90002000100"}, 0xd8) r2 = socket(0x23, 0xa, 0x200) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbff, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4008055) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0xe) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20044891, &(0x7f0000000680)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="000332a3d5b72b200fcb2ddc9f824eb215b3a14a8cf0435d62f0826dd5a55725ce8f3f0396fedde6184b8fef0f1ee71df017293cd7f223bad586dac67c13d93bdc0617cc4f119dd8b83b63aca4faa953787da8485944bd118a62e6f46ec372f4e19fc4ce6e28313526601b8c9626526ead76170294aebed4b1544744dfcf040d69", 0x81, 0xa71f6ddd5596b0ab, 0x0, 0x0) close(r1) 22:57:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x1800) 22:57:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x1800) 22:57:13 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:13 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:13 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x1812, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) 22:57:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 22:57:14 executing program 2: futex(&(0x7f0000001040), 0x3, 0x0, 0x0, &(0x7f00000010c0), 0x0) 22:57:14 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20020008) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on']) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus/file0\x00') 22:57:14 executing program 5: syz_open_dev$char_raw(0x0, 0x1, 0x0) 22:57:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x2a) 22:57:14 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:14 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 22:57:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x7702000000000000) 22:57:15 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x82002) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xa) 22:57:15 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x1800) 22:57:15 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800101, 0x0) 22:57:15 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 22:57:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000900)=ANY=[], 0x2a) 22:57:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000016c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 22:57:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 22:57:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2, 0x0, 0x700}}) 22:57:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{0x0, 0x0, 0xffffffff}, {&(0x7f00000002c0)="0a239cedb072", 0x6, 0x9}], 0x0, &(0x7f00000015c0)) 22:57:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000200)={""/61181}, 0xf000) 22:57:16 executing program 5: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 22:57:16 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:16 executing program 4: mlockall(0x1) syz_io_uring_setup(0xa5f, &(0x7f00000010c0)={0x0, 0xf000000}, &(0x7f0000e94000/0x4000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000001140), &(0x7f0000001180)) [ 2096.375846][ T3307] FAT-fs (loop3): bogus number of FAT structure [ 2096.382326][ T3307] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2096.600942][ T3307] FAT-fs (loop3): bogus number of FAT structure [ 2096.607682][ T3307] FAT-fs (loop3): Can't find a valid FAT filesystem 22:57:17 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) 22:57:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f00000015c0)) 22:57:17 executing program 3: prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x2000)=nil) 22:57:17 executing program 5: 22:57:17 executing program 0: 22:57:17 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:18 executing program 3: 22:57:18 executing program 2: 22:57:18 executing program 5: 22:57:18 executing program 0: 22:57:18 executing program 2: 22:57:20 executing program 4: 22:57:20 executing program 5: 22:57:20 executing program 3: 22:57:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:20 executing program 0: 22:57:20 executing program 2: 22:57:20 executing program 5: 22:57:20 executing program 0: 22:57:21 executing program 3: 22:57:21 executing program 2: 22:57:21 executing program 4: 22:57:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:21 executing program 5: 22:57:22 executing program 3: 22:57:22 executing program 2: 22:57:22 executing program 4: 22:57:22 executing program 5: 22:57:22 executing program 0: 22:57:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:23 executing program 3: 22:57:23 executing program 4: 22:57:23 executing program 2: 22:57:23 executing program 5: 22:57:23 executing program 0: 22:57:23 executing program 4: 22:57:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:23 executing program 3: 22:57:23 executing program 2: 22:57:23 executing program 5: 22:57:24 executing program 0: 22:57:24 executing program 4: 22:57:24 executing program 3: 22:57:24 executing program 2: 22:57:24 executing program 5: 22:57:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:24 executing program 0: 22:57:25 executing program 3: 22:57:25 executing program 2: 22:57:25 executing program 4: 22:57:25 executing program 5: 22:57:25 executing program 0: r0 = gettid() migrate_pages(r0, 0x2, 0x0, &(0x7f0000000040)=0x3) 22:57:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='B'], 0x42}}, 0x0) 22:57:25 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:25 executing program 5: r0 = socket(0x2, 0x3, 0x7e) unshare(0x28020400) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 22:57:25 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000008c0)) 22:57:25 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x0) 22:57:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xfffffffffffffe27, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}}, 0x0) 22:57:26 executing program 2: syz_mount_image$fuse(&(0x7f00000001c0)='fuse\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 22:57:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001a80)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 22:57:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2}]}, 0x20}}, 0x0) 22:57:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1260, &(0x7f00000001c0)) 22:57:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2106.382940][ T3448] fuse: Bad value for 'fd' [ 2106.432146][ T3448] fuse: Bad value for 'fd' 22:57:27 executing program 0: mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 22:57:27 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 22:57:27 executing program 5: pselect6(0x40, &(0x7f00000000c0)={0x6}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 22:57:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1269, &(0x7f00000001c0)) 22:57:27 executing program 4: add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) [ 2107.119024][ T32] audit: type=1326 audit(1604703447.451:47): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=3464 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fcd549 code=0x0 22:57:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:57:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, &(0x7f00000043c0)="05", 0x1, 0x0, 0x0, 0x0) 22:57:27 executing program 5: socketpair(0x11, 0xa, 0x81, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 22:57:27 executing program 2: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) get_thread_area(0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) sync() 22:57:28 executing program 4: socket$alg(0x26, 0x5, 0x0) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x2}) 22:57:28 executing program 3: perf_event_open(&(0x7f0000000b80)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:57:28 executing program 5: pselect6(0x40, &(0x7f0000002540), 0x0, 0x0, &(0x7f0000002600)={0x77359400}, 0x0) 22:57:28 executing program 0: migrate_pages(0x0, 0x7fff, &(0x7f0000000000), &(0x7f0000000040)=0x787c) 22:57:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab03, 0x0) 22:57:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:57:28 executing program 4: syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) 22:57:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3474}, 0x1, 0x0, 0x5a01}, 0x0) 22:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 22:57:29 executing program 4: getrandom(&(0x7f00000001c0)=""/105, 0xffffffffffffff8d, 0x1) 22:57:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000008a00)=ANY=[], 0x3474}}, 0x0) 22:57:29 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:57:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='coredump_filter\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, 0x0, 0x0) 22:57:29 executing program 3: add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='9', 0x1, 0xfffffffffffffffd) 22:57:30 executing program 5: add_key$keyring(&(0x7f0000002200)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 22:57:30 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/71, 0x47}, {0x0}], 0x2, 0x0) 22:57:30 executing program 0: clock_adjtime(0x7, 0x0) 22:57:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127d, 0x0) 22:57:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 22:57:30 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xea60}) 22:57:31 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[{&(0x7f00000000c0)='-', 0x1, 0x3f}], 0x0, 0x0) 22:57:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x105141, 0x0) 22:57:31 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 22:57:31 executing program 1: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) 22:57:31 executing program 3: prctl$PR_GET_UNALIGN(0x10, 0x0) 22:57:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7ffffffff000}}, 0x0) 22:57:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:57:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x8, 0x2}, 0x10}}, 0x0) 22:57:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') 22:57:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 22:57:32 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, r0+10000000}, 0x0) 22:57:32 executing program 5: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) sync() openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4080, 0x0) 22:57:32 executing program 2: syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[{@max_inline={'max_inline', 0x3d, [0x0]}}]}) 22:57:32 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) 22:57:33 executing program 1: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 22:57:33 executing program 3: socketpair(0x1d, 0x0, 0x7ff, &(0x7f0000000000)) 22:57:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000002100)='/dev/vcsa#\x00', 0xffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) get_thread_area(&(0x7f00000001c0)={0xfffffff7, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}) read$alg(0xffffffffffffffff, 0x0, 0x0) sync() 22:57:33 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20c40, 0x0) 22:57:33 executing program 3: r0 = socket(0x26, 0x5, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x117, 0x1, 0x0, 0x0) 22:57:33 executing program 4: socket$inet(0x2, 0x81005, 0x0) 22:57:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840)='NLBL_CALIPSO\x00') 22:57:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5460, 0x0) 22:57:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:57:34 executing program 5: r0 = gettid() setpriority(0x0, r0, 0x1) 22:57:34 executing program 3: 22:57:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125e, 0x0) 22:57:34 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 22:57:34 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xffffffffffffffff, 0xa40400) 22:57:35 executing program 0: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/121) 22:57:35 executing program 3: r0 = gettid() migrate_pages(r0, 0x2, 0x0, &(0x7f0000000040)=0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000080)=""/166) ptrace$setregs(0xffffffffffffffff, r0, 0x800, &(0x7f0000000300)) 22:57:35 executing program 5: syz_read_part_table(0x0, 0x4, &(0x7f0000001040)=[{&(0x7f0000000040)="8cf04dfd243ec321feab1274e6127464", 0x10, 0x4}, {&(0x7f0000001180)=':', 0x1}, {&(0x7f00000010c0)="9f", 0x1}, {&(0x7f0000001200)='w', 0x1}]) 22:57:35 executing program 4: prctl$PR_GET_UNALIGN(0x7, 0x0) 22:57:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0) 22:57:35 executing program 1: mq_unlink(&(0x7f0000000100)='-\x00') 22:57:35 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000008c0)={0x0, @can, @sco, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x400}) 22:57:35 executing program 3: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000500)) 22:57:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc020660b, 0x0) 22:57:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x161, 0x0) 22:57:36 executing program 5: r0 = socket(0x2, 0x3, 0x7e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8955, &(0x7f0000000040)) 22:57:36 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) 22:57:36 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xffffffffffffffff, 0x424c0) 22:57:36 executing program 4: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x0, 0xea60}) 22:57:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1277, 0x0) 22:57:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)) 22:57:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x125f, 0x0) 22:57:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000000c0)=@vsock, &(0x7f0000000140)=0x80) 22:57:37 executing program 1: waitid(0x0, 0x0, &(0x7f0000000000), 0x80000006, 0x0) 22:57:37 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000700)) 22:57:37 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:57:37 executing program 2: r0 = socket(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008d1) 22:57:37 executing program 0: process_vm_writev(0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1, 0x0, 0x0, 0x0) 22:57:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070cd, 0x0) 22:57:37 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 22:57:37 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(0x0) prctl$PR_SET_NAME(0xf, 0x0) 22:57:38 executing program 3: prctl$PR_GET_UNALIGN(0xd, 0x0) 22:57:38 executing program 2: syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x5, 0x28a0c0) 22:57:38 executing program 0: pselect6(0x40, &(0x7f0000002540), 0x0, &(0x7f00000025c0)={0x2}, 0x0, 0x0) 22:57:38 executing program 5: r0 = inotify_init() r1 = socket(0x2, 0x3, 0x7e) dup2(r0, r1) 22:57:38 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f}}, 0x0) 22:57:38 executing program 4: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) 22:57:38 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1014c0, 0x0) 22:57:38 executing program 2: futex(0x0, 0x8c, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 22:57:39 executing program 1: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x202002) 22:57:39 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x40440, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 22:57:39 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') 22:57:39 executing program 3: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 22:57:39 executing program 2: syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=always,huge=advise,huge=advise,mpol=']) 22:57:39 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/btrfs-control\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 22:57:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 22:57:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@size={'size', 0x3d, [0x30]}}]}) 22:57:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 2119.830554][ T3716] tmpfs: Bad value for 'mpol' [ 2119.866422][ T3716] tmpfs: Bad value for 'mpol' 22:57:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22000400) r1 = dup2(r0, r0) openat$cgroup_freezer_state(r1, &(0x7f0000000200)='freezer.state\x00', 0x2, 0x0) 22:57:40 executing program 5: r0 = socket(0x2, 0x3, 0x7e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8903, &(0x7f0000000040)) 22:57:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 22:57:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb}]}, 0x20}}, 0x0) 22:57:40 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x410780) 22:57:40 executing program 0: r0 = socket(0x11, 0x3, 0x4) close(r0) 22:57:41 executing program 2: r0 = timerfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x10012, r0, 0x0) 22:57:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 22:57:41 executing program 5: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) 22:57:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x1262, 0x0) 22:57:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, r0) 22:57:41 executing program 0: pselect6(0x40, &(0x7f0000002540), &(0x7f0000002580)={0x4}, 0x0, 0x0, 0x0) 22:57:41 executing program 2: move_pages(0x0, 0x2, &(0x7f0000000940)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) 22:57:41 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)) 22:57:42 executing program 5: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000b00)) 22:57:42 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)={0x0, 0x2710}) 22:57:42 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x10000002) 22:57:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c07, 0x0) 22:57:42 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r0, 0x409, 0x14) 22:57:42 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 22:57:42 executing program 5: syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000200)="12", 0x1}], 0x0, &(0x7f0000000480)) 22:57:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') 22:57:42 executing program 0: r0 = socket(0x2, 0x3, 0x7e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x4020940d, &(0x7f0000000040)) 22:57:42 executing program 4: r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 22:57:42 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendto(r0, &(0x7f00000043c0)="055a564b717fadba1814b632460337cc", 0x10, 0x0, 0x0, 0x0) 22:57:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f00000001c0)) 22:57:43 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0xffffffff, 0x0, 0x0) 22:57:43 executing program 3: perf_event_open(&(0x7f0000000b80)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:57:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:57:43 executing program 0: r0 = socket(0x2, 0x3, 0x7) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x541b, 0x0) 22:57:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x80081270, &(0x7f00000001c0)) 22:57:44 executing program 1: socket(0x26, 0x5, 0xffff8000) 22:57:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 22:57:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) time(&(0x7f0000000080)) 22:57:44 executing program 0: fchownat(0xffffffffffffff9c, 0x0, 0xee00, 0xee01, 0x1000) 22:57:44 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[{&(0x7f00000000c0)='7', 0x1, 0xffffffffffff1a6e}, {&(0x7f00000001c0)='B', 0x1}, {&(0x7f0000000280)='\t', 0x1, 0xfffffffffffffc00}, {&(0x7f00000002c0)='[', 0x1}, {&(0x7f00000003c0)='Q', 0x1}], 0x0, 0x0) 22:57:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x2ecda7fe2fe00207, 0x4050, 0x0, 0x0) 22:57:44 executing program 3: r0 = socket(0x2, 0x3, 0x7e) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0, 0xf0ff7f}}, 0x0) 22:57:44 executing program 1: pselect6(0x40, &(0x7f0000002540)={0xfffffffffffffffe}, &(0x7f0000002580), &(0x7f00000025c0), &(0x7f0000002600)={0x77359400}, &(0x7f0000002680)={&(0x7f0000002640)={[0x8]}, 0x8}) 22:57:45 executing program 5: add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)='9', 0x1, 0xfffffffffffffffd) 22:57:45 executing program 1: memfd_create(&(0x7f0000002600)='&G&}*@%*\xae\'(/$$&\x00', 0x0) 22:57:45 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x200) 22:57:45 executing program 3: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x0) 22:57:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140)={[{@dots='dots'}, {@nodots='nodots'}], [{@subj_role={'subj_role'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-:${&:'}}]}) 22:57:45 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x101000, 0x0) 22:57:46 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000040)) [ 2125.793577][ T3839] FAT-fs (loop2): Unrecognized mount option "subj_role=" or missing value 22:57:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4020940d, 0x0) 22:57:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3474}, 0x1, 0x0, 0x4000}, 0x0) 22:57:46 executing program 4: memfd_create(&(0x7f0000000000)='%[&/\x00', 0x0) 22:57:46 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/133, 0x85}}, 0x120) [ 2125.948429][ T3839] FAT-fs (loop2): Unrecognized mount option "subj_role=" or missing value 22:57:46 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f00000001c0)='B', 0x1}, {&(0x7f0000000280)='\t', 0x1, 0xfffffffffffffc00}], 0x0, 0x0) 22:57:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@huge_advise='huge=advise'}, {@size={'size'}}]}) [ 2126.403766][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.411817][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.420094][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.427863][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.435586][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.443189][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 22:57:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', 0x0, 0x0, 0x0) [ 2126.450917][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.458625][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.466340][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.473939][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.481655][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.489422][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.497090][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.504674][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.512400][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.520122][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.527821][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.535548][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.543198][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.550949][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.558668][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.566487][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.574116][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.581963][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.589697][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.597414][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.605129][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.612742][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.620534][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.628274][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.636010][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.643675][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.651420][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.659142][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.666846][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.674468][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.682189][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.689901][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.697597][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.705300][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.712934][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.720678][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.728478][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.736368][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.743992][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 22:57:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1263, 0x0) [ 2126.751743][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.759479][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.767186][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.774817][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.782536][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.790253][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.797955][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 22:57:47 executing program 4: add_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) [ 2126.805673][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.813299][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.821003][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.828726][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.836499][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.844133][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.851850][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.859574][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.867309][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.875024][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.882638][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.890364][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.898065][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.905778][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.913493][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.921263][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.928985][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.936690][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.944295][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.952017][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.959732][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.967434][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.975140][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.982742][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.990461][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2126.998151][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.005856][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.013457][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.021173][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.028883][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.036584][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.044210][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.051916][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.059612][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.067304][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.075018][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.082631][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.090340][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.098023][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.105741][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.113335][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.121045][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.128761][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.136469][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.144068][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.151757][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.159450][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.167135][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.174734][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.182456][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.190166][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.197876][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.205585][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.213189][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.220881][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.228583][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.236306][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.243915][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.251641][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.259352][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.267036][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.274636][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.282360][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.290070][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.297754][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.305468][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.313072][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.320797][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.328486][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.336209][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.343807][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.351509][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.359313][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.367011][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.374633][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.382356][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.390161][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.397859][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.405574][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.413167][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.420877][T29560] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2127.455321][ T3862] tmpfs: Bad value for 'size' [ 2127.484367][ T3864] tmpfs: Bad value for 'size' [ 2127.486839][T29560] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 22:57:47 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}) 22:57:48 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0xfffffffffffffffe}) 22:57:48 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 22:57:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) [ 2128.057444][ T3881] fuse: Bad value for 'fd' 22:57:48 executing program 5: syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}}) [ 2128.087803][ T3881] fuse: Bad value for 'fd' 22:57:48 executing program 4: sysfs$2(0x2, 0x3, &(0x7f0000000080)=""/152) 22:57:48 executing program 1: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x200000000000000]}, 0x8}) 22:57:48 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x515400, 0x0) 22:57:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127c, &(0x7f00000001c0)) [ 2128.576866][ T3889] fuse: Bad value for 'fd' [ 2128.626587][ T3889] fuse: Bad value for 'fd' 22:57:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x4fb5}, 0x4) 22:57:49 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80200) 22:57:49 executing program 4: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x200000000000000]}, 0x8}) 22:57:49 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000001c00)={@broadcast, @empty, @void}, 0x0) 22:57:49 executing program 1: pselect6(0x0, 0x0, &(0x7f0000002580), &(0x7f00000025c0), &(0x7f0000002600)={0x77359400}, &(0x7f0000002680)={&(0x7f0000002640)={[0x8]}, 0x8}) 22:57:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={0x0}}, 0x0) 22:57:50 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x10000002) 22:57:50 executing program 5: r0 = socket(0x2, 0x3, 0x7e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x40049409, &(0x7f0000000040)) 22:57:50 executing program 3: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0xa03) 22:57:50 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x11000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd69}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:57:50 executing program 4: iopl(0x0) 22:57:50 executing program 0: timer_create(0x3, &(0x7f0000000880)={0x0, 0x26}, &(0x7f00000008c0)) 22:57:51 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002080)='/dev/vcsu\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 22:57:51 executing program 3: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={r0}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x200000000000000]}, 0x8}) 22:57:51 executing program 1: timer_create(0x0, 0x0, &(0x7f00000008c0)) 22:57:51 executing program 2: 22:57:51 executing program 4: 22:57:51 executing program 0: 22:57:51 executing program 5: 22:57:52 executing program 1: 22:57:52 executing program 0: 22:57:52 executing program 3: 22:57:52 executing program 2: 22:57:52 executing program 4: 22:57:52 executing program 5: 22:57:53 executing program 1: 22:57:53 executing program 3: 22:57:53 executing program 4: 22:57:53 executing program 2: 22:57:53 executing program 0: 22:57:53 executing program 5: 22:57:53 executing program 1: 22:57:54 executing program 4: 22:57:54 executing program 3: 22:57:54 executing program 2: 22:57:54 executing program 0: 22:57:54 executing program 5: 22:57:54 executing program 1: 22:57:54 executing program 3: 22:57:54 executing program 4: 22:57:54 executing program 2: 22:57:54 executing program 0: 22:57:54 executing program 5: 22:57:55 executing program 1: 22:57:55 executing program 4: 22:57:55 executing program 3: 22:57:55 executing program 5: 22:57:55 executing program 0: 22:57:55 executing program 2: 22:57:55 executing program 1: 22:57:55 executing program 3: 22:57:55 executing program 4: 22:57:56 executing program 5: 22:57:56 executing program 2: 22:57:56 executing program 0: 22:57:56 executing program 1: 22:57:56 executing program 4: 22:57:56 executing program 3: 22:57:56 executing program 5: 22:57:56 executing program 2: 22:57:56 executing program 0: 22:57:56 executing program 1: 22:57:57 executing program 4: 22:57:57 executing program 3: 22:57:57 executing program 5: 22:57:57 executing program 2: 22:57:57 executing program 0: 22:57:57 executing program 1: 22:57:57 executing program 4: 22:57:57 executing program 5: 22:57:57 executing program 3: 22:57:57 executing program 0: 22:57:57 executing program 2: 22:57:58 executing program 1: 22:57:58 executing program 5: 22:57:58 executing program 4: 22:57:58 executing program 0: 22:57:58 executing program 3: 22:57:58 executing program 2: 22:57:58 executing program 5: 22:57:58 executing program 4: 22:57:58 executing program 1: 22:57:59 executing program 0: 22:57:59 executing program 3: 22:57:59 executing program 2: 22:57:59 executing program 5: 22:57:59 executing program 1: 22:57:59 executing program 4: 22:57:59 executing program 0: 22:57:59 executing program 3: 22:57:59 executing program 2: 22:58:00 executing program 1: 22:58:00 executing program 5: 22:58:00 executing program 4: 22:58:00 executing program 0: 22:58:00 executing program 3: 22:58:00 executing program 2: 22:58:00 executing program 1: 22:58:00 executing program 5: 22:58:01 executing program 0: 22:58:01 executing program 4: 22:58:01 executing program 3: 22:58:01 executing program 5: 22:58:01 executing program 2: 22:58:01 executing program 1: 22:58:01 executing program 0: 22:58:01 executing program 4: 22:58:01 executing program 3: 22:58:01 executing program 5: 22:58:02 executing program 1: 22:58:02 executing program 2: 22:58:02 executing program 3: 22:58:02 executing program 0: 22:58:02 executing program 4: 22:58:02 executing program 5: 22:58:02 executing program 1: 22:58:02 executing program 2: 22:58:02 executing program 3: 22:58:02 executing program 0: 22:58:03 executing program 4: 22:58:03 executing program 5: 22:58:03 executing program 2: 22:58:03 executing program 1: 22:58:03 executing program 3: 22:58:03 executing program 4: 22:58:03 executing program 0: 22:58:03 executing program 5: 22:58:03 executing program 2: 22:58:04 executing program 1: 22:58:04 executing program 3: 22:58:04 executing program 4: 22:58:04 executing program 0: 22:58:04 executing program 2: 22:58:04 executing program 5: 22:58:04 executing program 1: 22:58:04 executing program 3: 22:58:04 executing program 4: 22:58:05 executing program 0: 22:58:05 executing program 5: 22:58:05 executing program 2: 22:58:05 executing program 1: 22:58:05 executing program 3: 22:58:05 executing program 4: 22:58:05 executing program 0: 22:58:05 executing program 5: 22:58:05 executing program 1: 22:58:05 executing program 2: 22:58:06 executing program 3: 22:58:06 executing program 4: 22:58:06 executing program 5: 22:58:06 executing program 0: 22:58:06 executing program 2: 22:58:06 executing program 1: 22:58:06 executing program 3: 22:58:06 executing program 4: 22:58:07 executing program 3: 22:58:07 executing program 1: 22:58:07 executing program 2: 22:58:07 executing program 4: 22:58:07 executing program 0: 22:58:07 executing program 5: 22:58:08 executing program 3: 22:58:08 executing program 2: 22:58:08 executing program 1: 22:58:08 executing program 4: 22:58:08 executing program 5: 22:58:08 executing program 0: 22:58:08 executing program 2: 22:58:08 executing program 3: 22:58:08 executing program 5: 22:58:08 executing program 4: 22:58:08 executing program 1: 22:58:09 executing program 0: 22:58:09 executing program 2: 22:58:09 executing program 3: 22:58:09 executing program 4: 22:58:09 executing program 5: 22:58:09 executing program 0: 22:58:09 executing program 1: 22:58:09 executing program 2: 22:58:10 executing program 3: 22:58:10 executing program 4: 22:58:10 executing program 5: 22:58:10 executing program 0: 22:58:10 executing program 1: 22:58:10 executing program 2: 22:58:10 executing program 3: 22:58:10 executing program 4: 22:58:10 executing program 5: 22:58:11 executing program 1: 22:58:11 executing program 0: 22:58:11 executing program 2: 22:58:11 executing program 3: 22:58:11 executing program 5: 22:58:11 executing program 4: 22:58:11 executing program 0: 22:58:11 executing program 1: 22:58:11 executing program 2: 22:58:11 executing program 5: 22:58:12 executing program 3: 22:58:12 executing program 4: 22:58:12 executing program 0: 22:58:12 executing program 1: 22:58:12 executing program 2: 22:58:12 executing program 5: 22:58:12 executing program 3: 22:58:12 executing program 4: 22:58:12 executing program 0: 22:58:12 executing program 1: 22:58:13 executing program 2: 22:58:13 executing program 5: 22:58:13 executing program 3: 22:58:13 executing program 4: 22:58:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001bc0)={&(0x7f0000000740)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x64, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0xe, [{@multicast2, 0xbb}, {@rand_addr=0x64010102}, {@multicast2, 0x8}, {@local}]}, @lsrr={0x83, 0xb, 0x7d, [@remote, @local]}, @end, @ssrr={0x89, 0x1f, 0x81, [@empty, @remote, @rand_addr=0x64010102, @remote, @local, @broadcast, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xde, 0x0, 0x3, [0x80, 0x0, 0x10000, 0x0, 0x401]}, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x1, [0x0, 0x1f, 0xffff7fff]}, @timestamp_addr={0x44, 0x1c, 0xba, 0x1, 0x8, [{@loopback, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x67}, {@multicast2, 0x7}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xae, 0x0, 0xe, [0x1, 0x2, 0x4]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x190}, 0x54) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000008001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f00"/76], 0x98}, 0x0) 22:58:13 executing program 1: socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x11000000}}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="e66fdb0cda49903d45feb3fb5ca6dc312d9539dbd37f1062895219d8f43c785b7cdcec414a54b65ec6be6fbe70d0a7ef7354dbfcd292e7ade946102ab6fd58c86bad6066c9bc4d571b7532f65e4f3472692bac485813c0a1078797c0847ae1d233a8607bb887de51b59d5be0b4acd2cd9a7b6d26c45388f0d0832bc5ac4d4b5f224e90c7a3d2e47d6976d9170f7effca48c63f10adbf1dfc41091751b6406d4317105537393fc66a96c908e5d3c8ac80c83c434a166e4be9b26262", 0x200007fb}, {&(0x7f0000000800)="a5d0ad5c4f5d25e5ce804ee8eff6a9d3751f7d57a8d653a20f66ffbd85ecd5c230ee1d2d4449e08ebc9b59106fbc1ba4e32fe8efb559fe1dabd8051b3e4742240027708700c2f6865f7197357b2f718f9b41b9bc0578a86e78c440e84130828643ad7a782910cee5d19a6e9850e309db6ca7d90abec63f82de2722b9e234040c111454a723d44751122b6af34887150c5dfa35f783127a8ca4dcac8c8338bdd27ad748e7f471c094f4f4cba0cce1ccaed72ca441519d9677a7bd4dd86a514ae6", 0xc0}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f00000008c0)="f1b9348f405606cffc6d8aeb4ac55b507d3373554404e4cfbb051dabebcbd637807d5f982357a1f24bbbc50cd64cb0dd146f3c558c1a906b0d90aa39cae4fdeddb09cdc632fd3a701ce90f93488cbe1bc0394fc7ed4a1f331ecef4ca98850387b2eecf226ca7ec3171981382aa8ab1c8cf4c48846daf2bbb291f11ef68ae505ffb99ed80acbb61cd89b5ea16da75f26d59b00344a35faef92e1524aa2724c1b763645ff5f88d505a6cece68d36346fc260eb524c431c0155d38f5bea7f66595c", 0xc0}, {&(0x7f0000000980)="a890e850f03711b4a130fd2b2cb54c29da5874dbf332f09da8bab18afdcceeffddcf365f95b1f28e53f1642747bbe954f6f4a3b228ed8c1269cbf8c18d977039b9c84e5c30567e2e4d31d10eb4d7f30f1074104fb70a2c", 0x57}, {&(0x7f0000000a00)="15c752f4f64c6d4630a0e658e628cf8ba33be5e43fb67e93203ab48e84a5a3e435e467e16f216b62c0271b6ab86b8890adba51a81bf3adb5a496eeddb3919a55cb89dd22429d178b15e4c0f53499b932f0d99daf96fd06e99731a8", 0x5b}], 0x6, &(0x7f0000000b00)=[{0x18, 0x0, 0x0, "3bb255e8a340"}, {0xf8, 0x0, 0x0, "e6d50ab79937ebe0f7a317571ae931d7b829a2f7a39b1ecc757c41a86c0a14b7b6a6bfd0d874c200086ee24dbae97a65c978af9bb14d32f8081f18814f64221d9022f55f8f3a87854056e323680d1540068c86d14b9304ff44a4f2918e67a9b22b019a3b79f2db01ba7e6ea2a607432b7b0876a225c23590547032f68e6fcb97446e5a630628229650543f542a5c961e5b4d01d359dfd7b7648070ac2370337169fa3f343430d75457091516bff92e9fe5cb7619dad6e89437e60823cfbe5763fc4964f8e18d836dab0bdcaa3304bb74925b689edc60b11b07109597e21b70e4a0c513e0848508"}, {0x90, 0x0, 0x0, "64d3f00f48497cfc84121530fbce9714cb5d8eb2873d6faa555ca8a1ca687003cfe49e0025f507a131f3de44640864f5861e6d8f289fa57f644b641514f746294eba417b62258acf55b666ba6914358fe8899e03609d91f4a20d982d0bc6efa6460c0b39052cf4def05928c6c7bb0e6e1cb030f96f54bb62a804e78a"}, {0x78, 0x0, 0x0, "a6d1bae6c20998ff0a6461218c1b920fbac8da8777c0bbce5522fc9303544f4c9d7e1aad9e388a504beaaa8e0a69d58353804d7b5acfc9235b88922699581e0f405d0c0a62ac568d71dde0e5d297762ca71fc2ec1d1a87b97a77b129b39b38459f1b"}], 0x218}, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, r1, 0x16) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000080)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="e8dfa0e0b545948112f71dda823ab848e2506f057c0eb9d7de70261fc49be717b998d78a83a3908ddf178eba4f89ad593d0db8482df834868eed204bf965ca2962951d20335989638b11fff139f93c69a9b30db6e0b37e3a928a280edf03f62b900c924c7d74e3f1cadefac62609c65ece3de3318742bce5939b9dcfba545eb04489171fd9c116d5e534bad2dc2e9c10df7a27880fce129aed", 0x99}, {&(0x7f0000000240)="0e1527c8d104f33ff7ed61b24e109385bb71b5d1c8f895d0cb05bac0380155f1c7e4f73c10ef", 0x26}, {&(0x7f0000000280)="04943005a3a9343d9088394e6cb6e607deb1575a2a041332985956b65c3ed25d641aca4ed230248ac40e6e0e121597e524a3126aabbf4a2a40e69baa5bb935c336ad637ca1afaa8846df1bcde14364cb7491d28156e2dc82139a005766f73bae6b413277ee4c83be074d", 0x6a}], 0x3, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x13a0}, 0x20048000) close(0xffffffffffffffff) 22:58:13 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000003800)=[{&(0x7f0000000a00)="f4001100002b2c25e994efd184cd1d2205baa68754a3f5ffffff02000000000000000000000000002100000000000000", 0x30}], 0x1}, 0x0) 22:58:13 executing program 5: 22:58:13 executing program 3: 22:58:13 executing program 4: 22:58:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:58:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000001580)=""/146, 0x26, 0x92, 0x1}, 0x20) 22:58:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8fffffffffffff000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) 22:58:14 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000003800)=[{&(0x7f0000000a00)="f4001100002b2c25e994efd184cd1d2205baa68754a3f5ffffff02000000000000000000000000002100000000000000", 0x30}], 0x1}, 0x4000000) 22:58:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001480)={0x1a, 0x0, 0x0, 0x0, 0x18}, 0x40) 22:58:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="86", 0x1}, {0x0}, {&(0x7f0000000140)="c1", 0x1}], 0x3}, 0x0) 22:58:15 executing program 0: bpf$BPF_PROG_TEST_RUN(0x21, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x48) 22:58:15 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001d80), 0x4) 22:58:15 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)="cbb9d6b6ea1a027f50e6492e723adc690a8076922eefd0c2f2bc20d6bae3e37b", 0x20}, {&(0x7f0000000840)}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 22:58:15 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r1}) 22:58:15 executing program 1: unlink(&(0x7f0000001dc0)='./file0\x00') 22:58:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 22:58:15 executing program 5: mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:58:16 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, 0x0, 0x0) 22:58:16 executing program 2: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 22:58:16 executing program 4: bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000018080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000017f80)}, 0x48) 22:58:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x3, &(0x7f0000001780)=@framed, &(0x7f00000014c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000001600)=""/215, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x20) 22:58:16 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) 22:58:16 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0)='wireguard\x00') 22:58:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 22:58:16 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001840)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 22:58:17 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)) socketpair(0x18, 0x0, 0x7, &(0x7f0000000640)) 22:58:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000b80)=@caif=@rfm={0x25, 0x0, "1d9f13084f3ad090f3a959473b5a0f80"}, 0x80) 22:58:17 executing program 3: 22:58:17 executing program 0: 22:58:17 executing program 2: 22:58:17 executing program 4: 22:58:17 executing program 1: 22:58:17 executing program 3: 22:58:18 executing program 5: 22:58:18 executing program 0: 22:58:18 executing program 2: 22:58:18 executing program 4: 22:58:18 executing program 1: 22:58:18 executing program 3: 22:58:18 executing program 5: 22:58:18 executing program 0: 22:58:18 executing program 2: 22:58:19 executing program 4: 22:58:19 executing program 1: 22:58:19 executing program 3: 22:58:19 executing program 5: 22:58:19 executing program 2: 22:58:19 executing program 0: 22:58:19 executing program 3: 22:58:19 executing program 4: 22:58:19 executing program 1: 22:58:20 executing program 2: 22:58:20 executing program 5: 22:58:20 executing program 0: 22:58:20 executing program 3: 22:58:20 executing program 4: 22:58:20 executing program 1: 22:58:20 executing program 5: open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 22:58:20 executing program 2: flock(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffff9c, 0x29, 0x51, &(0x7f0000000000)={0x0, {{0x1c, 0x1c, 0x3}}}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x8, 0xffffffffffffff9c) 22:58:20 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x0, 0x1, "91"}, 0x9) 22:58:20 executing program 3: 22:58:20 executing program 4: 22:58:21 executing program 1: 22:58:21 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) 22:58:21 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@cred, @cred], 0x30}, 0x0) 22:58:21 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000640)=[@rights, @cred, @rights], 0x30}, 0x0) 22:58:21 executing program 0: sendfile(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 22:58:21 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0x0) 22:58:21 executing program 4: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 22:58:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 22:58:22 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) dup2(r0, 0xffffffffffffff9c) 22:58:22 executing program 2: socket$inet6(0x1c, 0x3, 0x1) 22:58:22 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) connect(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 22:58:22 executing program 1: mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:58:22 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000000), 0x4) 22:58:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 22:58:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f00000000c0)={@loopback, @broadcast}, 0xc) 22:58:23 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000000)='T', 0x1) 22:58:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xfffffffffffffd91, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000100), 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1d0dae4c7cee29d095a7b2ebe6d3e2e6d4f9b83e829d306bcd0f3bd3dc7b3e3bfc82ee613dd6132422a8c873143405f0562dc6a812e7a0a229a09db431a8506f08deaded57739ae8f692ff645f6aef7e4d3715bead04e3297819b74b9cc0a56ac5c868491ef68da9809d56bfd67eb20f08a89940566439053d1a560a1b92ec6389cb46197a09ec2d", 0x88}, {&(0x7f0000000e00)="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", 0xabc}], 0x2}, 0x0) 22:58:23 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000140), 0xc) 22:58:23 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}) 22:58:23 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x7) 22:58:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setgroups(0x5, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]) r1 = dup(r0) fchmod(r1, 0x0) 22:58:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 22:58:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xfffffffffffffd91, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="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", 0x16c}, {&(0x7f0000001000)="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", 0x9e9}], 0x2}, 0x0) 22:58:24 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000100)=[{r1}, {r0}, {r1}], 0x3, 0x0, 0x0, 0x0) close(r1) 22:58:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000001680)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="b544c70ca1844cf5344fb601f49646279dec340f59971d9c10bcc315f31c26700d93c1330a3746be90c6a1aa4dbde8f26853f0223768", 0x36}, {&(0x7f0000000040)="b8e4277273ee4e9259cc0366b4de1b9eddf6212473e66691946267e96ec0d5dc41f99a582299e1163ee51fe85818a75a36a8d0d057737cc5d78d6130eb2a3706463ba16d18f420748d2ed942d00518a3184f1e7d193906bf1a4c849b2d327d3c65c4caca168c168b1b75dbb4bc27b901a98c329488f25ff6a221fc1df770626e", 0x80}, {0x0}, {&(0x7f0000000340)="39beef057bdd322bc54f3aeb84ba04e45b97f80b0e5021af358f96d04278a57aac720a49ccb96b98266ef152462664637bfcc10a2770d97bb19983e4ee9fea1f20797a52dbbfc2d188e3f8af89e6c18c43f7823c95701c3835d5bda27dd55d2889e822059451a0db1d01bc31a3fcba7257c8d4ddd97534bc932571b016f0969a9bf7732866b714cefe59d4486b18ec46799b9de49c16c972008d0b774346be2844117f77cbb7e85c1e73b2eab12abbc5fbfd729bd3a90f0276e891088a3d22e49600897ab6efd6df6e53314010a11468db4bd907edb1190b4f5a94742f3f54229c9226010af9cf3b463c45f2bc3e56305ccde7ce088cfb00d0099cb05b78cb448057748b8233f1b9714b526eb1897c10615d32d56b0c719593afbefac161fcfd7eb4ba91ec248e07ce1ee8ae789cae4e4b7dca7ec69191f9f956591c894d6da004e914b62a9bfd0754f46989fc91b7393e9d92b3589bda0f5623112b2dc64b86570d0e0f52208b9114ea92e45c7f7fe95b1d7014648bf3c1d73bf82d9412e26f0cc30210a6fa90b0a467574c8542f5e8a4e03f71b72d09b1081d1c1960aa9dfcd54ddd1dde9de20c775a7eb2a26ba9c017ad4d3eb9cec16663503241576813597044af1ec52fd083526108dc3bb2d2fb200c71c6c7594d8ce10e3a3517de3c90f7d23e2f6787261a288977ac9071909682b1c2fe96981f67b760a99815e5c79a1e9cb32a1e3ba9f5bdd961fa0b3a7156fe3ecdfdeeb369398ecec1c386e71ed57abc83a14e34ceb57c450bfff166be754c8694c2733cf0a819df68af01f3fb0a6cafdbb900e5c7bc03d4713d2feaa651a1a11db64e180ae3a6e489552816d2f0f82ea20d918bc69f5f900f95e531aba71e4f181d5f74cfc121aabad45d01fa2b5c66673dced023192fc98d3f53f9755e6bcdcd298080764149274b45ec6f6215621e321b3179fe919500cda6ff2137e0f45789728dfad518e234fcfc87ff9432a93ab2e18f59aade672082d63e12db6b2245228894faec64a8c3121fccd14d6df39334d77edc284be6b657a64d0324b62b94b7da4531fa27a83301baf24e99d4a702298eb57ff43ddb694a5ac3d0abc398913887d32d3e1fdd4fe2eb372e1f075787b984ecc492d88cbfcfd1659b50f92154c47153683f1e0f11ba3a3e45885a0872889ebc437737e55ed225ee582457d7537de346fbe698c59f85ccb6fb2e26a9162da0e93fd17c2ef9523adea427334e2a030e1a0221594f1d8bd1f6e12f2a5bd8e10542ee7b9ee00a5933700b5046a927e42dcf60c91d7089e5168dc09979478084f8c57e87ca35b3b048d7a3a9a0b3f4d28bb60b8954b5a62bfa6c4ba78eed0267dc93198bea027419587c07e9ef50194f176d831a821a604e16e82081e72f2455c98324aa90cbff109761c2baf24e3305eb05878e306803cfb751eb00fa0308b29577283d718127e6a3269c0fb181f440e25d76e5588e0daba2c3d72a1b0847affeb6a3b09180e62b1e9e0a293f13c84e81de395174e6c7f4e6b0a22b47cc5f832cf87a8268a887bd4aaccedc0b0bcb711f36dbab2f978ef7e70bb6f243f48b7d9b1feff0a372269a900727512d6477131b5353785f4bf0bcd822fd7aa1f0d2cc5242e9b89e9e5b1c7c37b4577cb0ef9a55413297947e49ba5a276b16bcf584e1e413971cccf1e2c6150033123a1b6436d210d0612dafbf08d95fa994a2ce560263177dabe8e5c53c112b17f2c5de051fc65062daad94bd48765a77324655b7571ee7909d4a4ba7a0a1105d7eedb5fc4ed649f965f3b71745fc07c3d71d11814f36650319233035aacfd988cbf4528d7a408f4d4020a67e246ea3bacfb8eb34d6cf3c07554d7910e4e9b49e424d612ad043f8a20859549205f7f0eb771dd347a0cc5d0685382a3e6d42ead55856dc833ac95ef3a12b9ca942b09846a3840d345a269e2b198699e2e9bab8b6798ad42d1250c95d0fcdf25512d2be272fa9b51efb00dfe62b051e1ac2227473f69bf6b5431fba8207c7af58955bc2c00f5fef398d5798b8697cf3506ea8b34cc3ee0f736727dff92fe26c76af7c102f5abc5148051f12e24c902602fae77d86dde2cdd2641d6638d6fa06709632f25b414e9ec00b62b5cc01bab7edf0b982aabddc6d3ae5267eb1ad0dd430bd2e62a9d7c66d39f51454d1c49ba6685f1d9fb0638b11e30d0541ee58ceca5c30171b8117b8f7b9690d591b374394bfd7a1758caa20d23a4c435356896fadc727cc0936867171b7f45367a232d458642a66baabddc650d833a553eb36ee3cf9f5be2debd05c5f8f19b1f19c642353824d684da7f725794d17b79d8384a7944485ac92e3d281d2832bc8f47aee8fb41d73b0dce8674271039fda39315a12cc130172c49fbbc3fa79e23b993debb04e6ca3422a9ecb1a2b6058c43243e8010bea38795fa58fb8798c0f8617d09da2080707b7a4615cbf33646359738b429880e3da1ce4f828ceb49925a7061ed6755522edcde74ad7f23d38154d944d618003714818259966b3604e1ef9bd9b7d9ff09a46be6174e4f32ba30c06e5b6fe745bae41bfc7345232e114462482ecd73d93066d5c2f0e47f6be1780ba7034c9cc00dd353118a7d2ffd7295833d4f0a1d4164e69372a88233c6ec08d3d4dcd96e9eb9d61312a91c8ee479f0f98a96d0e6723e6c9ce47f8df22e9d9cfa8ff32bc0aa177f0f0221c60e35a4f1d53bef2d1feb7782d394bd43033aca2c7236afcd34322ba15649c54053b8a12cffce0be6985503955ec481df597463542402f3b698759911d3c89cd22d84f8586f6f04cca81e4f5a5f02fd83064e58bddd9e4269e8ff71bd9c5ded30a11dd2f64433f9e9060b342064e90da931e84f7b9df290de585ceeb7eaf8ef6aac72ccb90ad05fec954d0721afb64e9877626c876fef3ed7dea169f1756eebc30354630c31ee8324625765596bf45a51620044631ad5c59e7deae293860b7715ce5b6ca79368772ee80b9f197b8dbd583403abd50d7e482fe7505d47ccbe1024e907664d4e20e12693d524bbb01e28d1cdad254a55087013bd9c454fde4505fb1d7dc53e728c4377551ca7818657ccc3c321ea69370aa47627ec6df44376fd146a2eaa0f62ec59dd02ca84d20cf0f791a5513beb823e817aca57f46f883d7187955265fe634dd945ebc0aa6f96ae481f29b26663c237a75f35ec569a237d4025a02e81054d153d3b652ad6bccb5ad46167c157d099e749ab05c74b4b5caee4b9d8e976733521d14bd34f2712ea84d5911d5278490c3f1ee00d53f09eb79a1f4a20103364e8ece908f86f21e56bcb84b7b649a9e8a36a92acac60951727ab76e74cbb929ed37cb32ce3c019bf720ab8f639a1ecb170e83e8f2f2f20209bc514288e48f58b60e726221ee104b93de40c5f57a34826aba980d86c4ec930a823535c0feef1979283d5f3fcfdf32b02cf2975570ee5d0e575c8d03762f00aa310d4fcc145c76d967604b1c79cd2f166ebf930db56278dd43fc5c87bcca097e4b61d86862f523566190f77fd08c48153f7bb73b632ef608e666999f0033fa961c8744644ceb43bafa164c73abd7f2a3ed0c043506a5af34bfcd2717d90cc2cf6809b381a18fe479e95dde200196c9a1fee7e4e3e4c3daa7638e869c17c60fadb7767032605aae7b800fbc6fe4cae5f91b52d258878de00f33b46c1f86a1cbe3358fc35d5893ffe2c9d53a8b7d090fa002554b8cf8c373091745b1b89c287f4a851655568f65ae791d0d4d3cc3640cfd6da6d9b8afac0556a9fbef4d388e28a1819a71fb30abf7a153ecde32fc19825250274c55c44520c6d581253deef91893679d4f7c0c3a689395c94b0ebd67c6b88507918f06d1ac4dbee95fc1214e49fbf7700e238319375aec556599d907850a60d97eb23bb69a74de63ccd043258a2d659e2d8e17b7151fcd1edcea69794c6013e9c37683f27fb4644278ca398a1b2a12be53a620a79bdefa5c9e53bf262d92dfe22408955f470862010a849f478e4c781660390a44aa0e85f7ed42a6bebf7a9139680c58c796d2f6f5031a344e6c1ccd1dacd44198e1b163066abfcdf26d80917ba63f72d59c9e57648596ff32bfda8e4df3d9245ff7c5262c03e6aa0e562898df282a7e14f6716b0b0d227ccc50869f6248dabbe5fb93253a8a753f56e5e45acc15d596cf352d4a7eb6a53c4d8cfc0abe9b180fee3358910850623e89f0383ef701e99ad75176167dbc3e00bf71820ac890751e5f88bac0200b4dd16de1283bbd6688580684f1f2f9dc29856d12084096997ca1542fc3b13ea39caf76d5b620fcf39d7d74c56d7c5a21521969237d6d62b6d8d3f9cce615b05ef29868a18ae9a6cc08099885dfda56e35a1ec9a478f3b74a86fdb8b6a8995981db10e85ccdc82f52c467004c91751e96ed76a054dc01d59eb5f89b8290e84269aef127f15a29d253b37af0cca07f8a1d43cc8fc1d58a44fd47ce574f86fb3584872cc9d3bdc17230d79dff075b54adc91bacba", 0xc79}, {&(0x7f00000016c0)="0adb88c90166e7a544958bdd7796be366d7c3e50c62a0da2f480861e538b9b1eccf07a8625cb6c59428daf2a4add3d3d7f8123d265103959d5eaa361500e4072626a1abccb8542025df26df9fb73b837c7495616edba7ef9469427fc4518a01611d420811484ebaeea1e9a6c4e6f873c52628bb09bc8e4df37773bc7d9c4e502f7e7f1347474e3da98afad9308da1355e3cf3ba62ef52aa880eabda064f9", 0x9e}], 0x5}, 0x0) 22:58:24 executing program 1: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x700) 22:58:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='cubic\x00', 0x8) 22:58:24 executing program 3: r0 = getpid() wait4(r0, 0x0, 0x0, &(0x7f0000000040)) 22:58:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000140), 0xc) 22:58:25 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 22:58:25 executing program 3: setgroups(0x6, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) 22:58:25 executing program 1: socketpair(0x2, 0x0, 0x6, 0x0) 22:58:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x4040000, 0x4) 22:58:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 22:58:25 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="bf", 0x1}], 0x1) close(r1) 22:58:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setown(r0, 0x6, 0x0) 22:58:25 executing program 3: execve(0x0, &(0x7f00000000c0), &(0x7f0000000380)) 22:58:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) close(r0) 22:58:25 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x4, 0x4) 22:58:26 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x400, 0x0, &(0x7f0000000040)) 22:58:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 22:58:26 executing program 5: setgroups(0x4, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) 22:58:26 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, 0x0, 0x0) 22:58:26 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 22:58:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x0) 22:58:27 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8, 0x0) 22:58:27 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)=@abs={0x8}, 0x8, &(0x7f0000001440)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000100)="17d075530bb9ee0227ae2649628f61ad8c2c66b015752c46bbc21fbc4dfdf44c0b4a9a49e28b64b2a29b64b0f8e29bf5401ce6f126ab0fc5649e810c9c445d2eb5094e7ed05070f1a64334b0f1fde0108cc7b4bf5277c2e5d56cb0", 0x5b}, {&(0x7f0000001280)="cc93cfe94baa1d5fa6869914a23194093d5d0e19264a13a549fc26939bc35c5863607d573135a05be4a453094a044c52dd79181c92923f4a0549c8a991fec83dcb5cff3392e6f62a9ea957ff54b771932ac30742523d48b2e4f60344411bb3253ea18c3ca7b607fa469285b86894582ca3afd0e8c3dd69abf1e138ab40c4c3a6ba9e2416b8b055e97ccc5211f5e57c4739443c84278d6cdecd6b89ab15007bb5d1b2199feab54a50f1cdcbc5aa08f9f2c9ae287d6d4e6ca0dbaab5052c73ccd0e49913e876b343676385d9776f4869eb3a1208b9c236454c802328c0f6ddeac4cae018d617dd2c505e5a37bff8f357627c16f9c6efc4", 0xf6}, {&(0x7f0000000180)="de4f81e730c026f1200bc09c604bb83fff6b8a0edfb2b153d0e62e8315572c500b3b9dcd4b587f8478f236d97505ca9e83048dd7ec4cb7d84ca0dba3c7a535e39ccd1d81682c5370a82a414ea135d501915ff9dfe5d5b42b7423cad3db17a893ba128f014fba6012aa7785628380f3e42bde52aa0fcb765db283d48d946fcc0057", 0x81}, {&(0x7f0000001380)="204e90fb8615ec19f0679301423a0e812b1446455a8cb493aa157d8955ec2c0b031fefb44bd37213a0e333540b66eac39808cbc952ca305b3f392ee5acd4edfd58c75ffd8dfe482cd9273d88f20873ff99885905e71a8230daf7c9887e74dcce3378cadb83b9d08f83473410a10a8b63584e48ff52a467a592d70770b3a5ca5244da19be94e66e19fa7d071da88c75ca4abf22d37d4c7171b1d577fefac28b475bdda7fe", 0xa4}], 0x5, &(0x7f0000001480)=[@rights], 0x1c}, 0x0) 22:58:27 executing program 5: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 22:58:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 22:58:27 executing program 4: getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x104, 0x0, 0x0) 22:58:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 22:58:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockname$unix(r1, 0x0, &(0x7f0000000180)) 22:58:28 executing program 5: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x51, 0x0, 0x0) 22:58:28 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) 22:58:28 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0x40, 0x0, 0x0) 22:58:28 executing program 4: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) fstat(r0, &(0x7f0000000000)) 22:58:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 22:58:28 executing program 0: setgroups(0x3ffffffffffffe68, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]) 22:58:29 executing program 5: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) clock_gettime(0xf, &(0x7f0000000540)) 22:58:29 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/234) 22:58:29 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) fsync(r0) 22:58:29 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 22:58:29 executing program 2: openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) 22:58:29 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x0) 22:58:29 executing program 1: setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) 22:58:29 executing program 5: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 22:58:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$unix(r1, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0x1f) 22:58:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xfffffffffffffd91, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="1d0dae4c7cee29d095a7b2ebe6d3e2e6d4f9b800000000d6172422a8c873143405f0562dc6a812e7a0a229a09db431a8506f08deaded57739ae8f692ff645f6aef7e4d3715bead04e3297819b74b9cc0a56ac5c868491ef68da9809d56bfd67eb20f08a89940566439053d1a560a1b92ec6389cb46197a09ec2d00000000000000000000000000007b60fc7fb0188f38e250caea55cdc8c4bc45a943e57f1bfc7fa5fbf0a1395eebdfe2849963445681a1f269784d2bd5f4b989426bdc817c81863e332c45142a1e738e98c250d0759709e648aa613cb2f20cd525395e30363fc7d3669867b379aa54fab204bd351817338d98b68859af3971656ea1d34e0d8ebcb4e5ef8bc26a0c87e87c837c784c85123d3aa10a2eae33874e52ef99a46acf4810c0fa6b4046c60fadb62ea85bbfb7c5a9f34504e229dcd297431fd1f543dc9a7d8f2351b3695b8a5f28e045b2cd73be98daaf0655b61ae69da00f159e0815c08654cf64557c241faa73ad", 0x16c}, {&(0x7f0000001000)="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", 0x9d9}], 0x2}, 0x0) 22:58:30 executing program 0: setgroups(0x3, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0]) 22:58:30 executing program 3: execve(0x0, &(0x7f00000000c0)=[&(0x7f0000000040)='%)-s)$/#./\'\x00'], 0x0) 22:58:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000100)={@broadcast, @broadcast}, 0xc) 22:58:30 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) fcntl$setown(r0, 0x6, 0x0) 22:58:31 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x202, 0x0) 22:58:31 executing program 1: socketpair(0x2f, 0x0, 0x6, 0x0) 22:58:31 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 22:58:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0xa}, 0xa) 22:58:31 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) 22:58:31 executing program 5: execve(0x0, &(0x7f00000000c0)=[&(0x7f0000000040)='%)-s)$/#./\'\x00', &(0x7f0000000080)='*{\x00'], &(0x7f0000000380)=[&(0x7f0000000100)='\x8c:\x00', &(0x7f0000000140)='\x00']) 22:58:31 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xa) 22:58:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) 22:58:31 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001280)=""/148) 22:58:32 executing program 0: getgroups(0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) 22:58:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f00000000c0)={0x0, {{0x10, 0x2}}}, 0x8c) 22:58:32 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) lseek(r0, 0x0, 0x0) 22:58:32 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 22:58:32 executing program 4: socket$inet6_udp(0x1c, 0x2, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 22:58:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100)=@file={0xa}, 0xa, 0x0}, 0x0) 22:58:32 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 22:58:32 executing program 3: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, 0x0, 0x0) 22:58:33 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) fcntl$getflags(r0, 0x3) 22:58:33 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 22:58:33 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 22:58:33 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000140), 0x8) 22:58:33 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="e3ff7200", @ANYRES32=0x0], &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000280), &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0xc) 22:58:33 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 22:58:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000540), 0x10, 0x0, 0x0) close(r0) 22:58:33 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 22:58:34 executing program 3: setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x76) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 22:58:34 executing program 0: setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x76) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 22:58:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000080), &(0x7f0000000240)=0x8) 22:58:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000280), &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000140), 0x8) 22:58:34 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup(r0) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x107, &(0x7f0000000280), &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000140)=0x8) 22:58:35 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000002540)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 22:58:35 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 22:58:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) dup2(r1, r0) getsockname(r0, 0x0, &(0x7f0000000180)) 22:58:35 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xfffffffffffffec3, 0x1c}, 0x1c) 22:58:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0x1c, 0x1c, 0x2}, 0x1c) 22:58:35 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x5866a6031bb12928) dup2(r0, r1) 22:58:36 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)=0x8) 22:58:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x80081270, 0x0) 22:58:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000800)={0x0, @in, 0x0, 0x0, 0x282}, 0x98) 22:58:36 executing program 1: r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 22:58:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x2}, 0x10) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000280), &(0x7f00000002c0)=0x18) 22:58:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 22:58:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)='J', 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x14}], 0x14}, 0x0) 22:58:37 executing program 0: 22:58:37 executing program 4: 22:58:37 executing program 1: 22:58:37 executing program 2: 22:58:37 executing program 5: 22:58:37 executing program 3: 22:58:37 executing program 4: 22:58:37 executing program 0: 22:58:38 executing program 1: 22:58:38 executing program 2: 22:58:38 executing program 5: 22:58:38 executing program 3: 22:58:38 executing program 0: 22:58:38 executing program 4: 22:58:38 executing program 1: 22:58:38 executing program 2: 22:58:38 executing program 5: 22:58:38 executing program 3: 22:58:39 executing program 0: 22:58:39 executing program 1: 22:58:39 executing program 4: 22:58:39 executing program 1: 22:58:39 executing program 4: 22:58:39 executing program 0: 22:58:40 executing program 2: 22:58:40 executing program 3: 22:58:40 executing program 5: 22:58:40 executing program 1: 22:58:40 executing program 0: 22:58:40 executing program 5: 22:58:40 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040), 0x66) 22:58:40 executing program 3: 22:58:40 executing program 4: 22:58:41 executing program 1: 22:58:41 executing program 0: 22:58:41 executing program 5: 22:58:41 executing program 3: 22:58:41 executing program 2: 22:58:41 executing program 4: 22:58:41 executing program 1: 22:58:41 executing program 0: 22:58:41 executing program 5: 22:58:42 executing program 2: 22:58:42 executing program 3: 22:58:42 executing program 4: 22:58:42 executing program 1: 22:58:42 executing program 5: 22:58:42 executing program 0: 22:58:42 executing program 2: 22:58:42 executing program 3: 22:58:42 executing program 4: 22:58:42 executing program 1: 22:58:43 executing program 5: 22:58:43 executing program 0: 22:58:43 executing program 2: 22:58:43 executing program 3: 22:58:43 executing program 4: 22:58:43 executing program 1: 22:58:43 executing program 5: 22:58:43 executing program 2: 22:58:43 executing program 0: 22:58:43 executing program 3: 22:58:44 executing program 4: 22:58:44 executing program 1: 22:58:44 executing program 5: 22:58:44 executing program 2: 22:58:44 executing program 0: 22:58:44 executing program 3: 22:58:44 executing program 4: 22:58:44 executing program 1: 22:58:44 executing program 5: 22:58:45 executing program 2: 22:58:45 executing program 3: 22:58:45 executing program 0: 22:58:45 executing program 5: 22:58:45 executing program 4: 22:58:45 executing program 1: 22:58:45 executing program 2: 22:58:45 executing program 3: 22:58:45 executing program 0: 22:58:46 executing program 4: 22:58:46 executing program 5: 22:58:46 executing program 1: 22:58:46 executing program 2: 22:58:46 executing program 3: 22:58:46 executing program 0: 22:58:46 executing program 1: 22:58:46 executing program 4: 22:58:46 executing program 5: 22:58:46 executing program 3: 22:58:46 executing program 2: 22:58:47 executing program 0: 22:58:47 executing program 1: 22:58:47 executing program 4: 22:58:47 executing program 5: 22:58:47 executing program 3: 22:58:47 executing program 2: 22:58:47 executing program 0: 22:58:47 executing program 5: 22:58:47 executing program 1: 22:58:48 executing program 4: 22:58:48 executing program 3: 22:58:48 executing program 2: 22:58:48 executing program 0: 22:58:48 executing program 5: 22:58:48 executing program 1: 22:58:48 executing program 4: 22:58:48 executing program 2: 22:58:48 executing program 3: 22:58:49 executing program 0: 22:58:49 executing program 1: 22:58:49 executing program 4: 22:58:49 executing program 5: 22:58:49 executing program 3: 22:58:49 executing program 2: 22:58:49 executing program 1: 22:58:49 executing program 0: 22:58:50 executing program 3: 22:58:50 executing program 4: 22:58:50 executing program 5: 22:58:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:58:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) 22:58:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000005ec0)) 22:58:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0xeb03, &(0x7f0000000240)=@raw=[@jmp, @call, @initr0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:50 executing program 0: 22:58:50 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000100), 0x4) 22:58:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x680280, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 22:58:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 22:58:51 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000ae00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 22:58:51 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="321d941f8e7372b2f351f1ea3c4366a35a76b437be13efa44105216cbc7c194c12d9629813d587390230813ca42c732c63b3786f0556c98acd9fc2f11a36bac27732f6dcf723f449dc78ddf9b43bec7e38b1907a225bf036fab60c90cbb99517644051521d65995600eb4830beea636f080a04c545ff469241f22d3033628d488aab277318e6550a4484f5", 0x8b}, {&(0x7f00000002c0)="cf06dc28aa3e7c8516015fbdcaf545ed18d253ee8478bd84e1069cd50c189932606dca79f9ba260fb89df55a8eecf0f01563959ab728bfda573380b26353998424683497deba7c7577ed2284d11661b35ef6a7e671382273d7891d97ce904e2d01bc1316d2fa8f538442a59b21421d0e51fa4c887455fe64f86b80d6cc20e920662c33f9bdb517ecd9f322b959577c57fabb56d82308bfd1db4d1c81eb672db79d154562be2f52bc06ba357b637333a1a0f0f3637c0493846cf3838847c5a2ed25ea857c9e61e8920957e9e99c56ff0ad1ba54974d3ad631acef726d7a2a", 0xde}, {&(0x7f0000000780)="488a803563fae18b1c06f2a418b2dac466f5a5cf087fba795a2c8c59ac7df2cfb062588b72d7ccbb5938273b02c03df99dc9e5d68728797b39841a6f1a3e4374254fcca5a15b96c5d421f8dd89b0353e89ef2998b2a89f566aa98121c301685e4bccf0735387c659f6ebe0f2cafea0697f2ebebb85afd7564281a38d705035ba406bdf47a22f21dc88b3a481cc904cbeaa82eddb709bf16698b10bd60440985b8f53644748c60ec3a7e597b5f08dd6f9565a5ac3fa7e805d6760eeff4a4c276425a28daaa195020a168dcda399c9f8fd4eb814d40c94355491aba4fe86cbf969577955ddcf00281226b88c843882a17957071a9c2cd45b45fca9dbd3d89a65ae2c3008cf0b4dc5d6edf593da36a660917321ed184838811b8e4d872e49442506271a6e14d55e494446f9ee7e74e337b547e259358296cb1698d21520ef3eacbc324e5a60f9e319af75ef90aa3bd3d35bd965a01fc307f5ecc6bf6a289c7414a54793f3efdeb1ee31975dd7b154258eb0e9f7f3648c3adcd19e7be1c8dea8cda746a8d8fd370ac6d9b6004b98d25e68070e2fef5705271027795dbfbc1bfef1ba88247ca80280538e5bf33ff8c7f555fcf02a0a8c07231d42445948eb4f74b23e2eed3814406ff66e7feb310560fdaa1d0c0b13c5cc156d8c28ae5b5ef1c6cab411658a0f635f1978fa2ccce71b941cf4b6dfedabdc34f89493fc85ac6e58e8ceac51c5d0b319ad4f68b50232502f9421050454118fdd2913f26fe0fb07ed4376d7d6df1d6b053e3c5009b0fa61ebe516fa8a9773a759cb3cc8cf40b4216208213bc381ba1d159f23ff816e6c20fa106610c99c94362b8f0821e369baf180341ce5599b0319a59211f2b86483da76387a9aec62fc6e982b485e24b7842f47f53f134282663b59f63609c5b6e3881ba26a702b7f6025b186ff5dd07066d716d28d56dbd591b29bece549713b496d513c7aa9b2bc2e50a1d6be38dc1403f92f54a1c8e19e5e13ce7c142d254b13e9f0de326ceca9bdc417c638ef2279a15596b8eb88eb52b6f4edf2f53fcc3027ee3e847536fe41fbaa55c6b1290603d127b4f0ac471a273671eaf7a0792bb2753a44513f290714bf4f337615af57b44d7e7794b9c392aff5a792e740a0bf1279c4ffeb922eebaaecb1a15ad0e8f50836c65b543c9050686673d06cf1f554547936c3db5f295660ae8e795a9cccda54470685a93c971999a7e2fc017dfdb5bd9f605212a83ed371e33b9bc0215e7ae6aec7007d5f950900375bb7dd71414ca22b6766fc3c216c7705fc066f8e081fe6a62135d7d4b9ca8b78443e60fbeeed7aab3aab71abf3f6fa9898a888b2a5b399d7bd81f6830d9da19adf3fd36d1b0f8e692988e03d99bc462b99ef9f1a8f0fed2abbb69724da45e9e1c88bf07c393bbb4bffbe9dc71a784257dd05156b53ff894b26e0f80d99b2a6437bfee321a569fecac77db1e1d652a72f598f2c3bfac21601eaec837f2d611b542f45a2f601e05c154b2994a0c4d7577b0b141e0feefb1d04408fb4fcf7b9fa0e4cca1954fcb4dc24cbe24f0a1c7efb459a6c6400ee7a00c2d11f9288b1ee2613c73cc8c352cf0da4779ba6ae41eb2b28840c0ff4ecddb0c58ca4c9e97e1ef0dde97ad8112a0f754899ad1777ea2c7ca79127f4a5418200c48e6f883800a326951a9c2a6e10778b06a0319be89e555fc2a4d44781df58a86c2c6ec757058efa133d2bb97b6b0937744df5fc916f709a10330a883192d293bdb01fc7f37f1b2281848f26a9e045f276465d21085059a60e924e8b4e4ca9a29361d24bf4a2ef0af5f3caeb5edd8e48f79c625aa2bf56e0f7e552bc1bfeb96cf8fa1b1f7ac274b1bbfed5a45a6046d500f2c91fef6cd61fe06cf57e92197a81b2ab04141d8c178d4c69fd0a5ddc1f230c42c504ebfb38b5a563127c425aff8603d9bc8e972544b46d2f920ddd2ba1f03b07235ebb8fc6ad76473e51771a071d8b1b0c556a40f0e1d2bb6c4cafb4fe5774c57736f7d5280aa17e434ac00633463ba3edeaa7c85393f077fe18eaf995fc368769cfb18e6051b40e7538f64965bf928c496e320237fc41bea55144369cf709bf3f16062a777235affe4c18f551b7ff74ca55929a6fa7f6c7107cca7e35fefa24ad5ce95ff6201f88f31e2ec8c6eb14ab1e31dad3dcd2ea4df2497a3bc755dc3ed37e3feb9c88a29d7b7d90127765057893e6684060f1c037b9c0d72b8d239681da59b836099f4aab9df033694d7090b789edf93555b8e76c5d71b7cdd5c5817049cb2f96ce6e6b527f695d5c666a49ec3bd29e9ea27c30a3473421ab58ca4d818a9d65eacd740dfd5ccd079f41a3da278aa38b1caa1bdcbbe9345258771c68b4b0ad1a41986cece7d97c3babd20398047a742db1d037576c97974774e257121df3f80725c3982e5cdbfe0765fa58cd5619f1809fb57419f1d7388ac55609362e33f8b01d2d60814dce9a3d22e76284ad882994241a545bb0870f77286b9951ac8c4240be1617391dbcb5be4d7ff98c69ace55c8c858c3bbbb2622ea654cd8c464606cf2f329e76be947428d2e334824a052a83cee5b0c6ce57f7e89a49ebb3fb752455d8da7024cabfeb52aabe4ad3b548ced9d4598a24d9d147d0795cc3b6eed8913e53db644a35f7abbe606f682754bc3d6e1fa0c362353dde47eca55d07ac47de92f57f9961835f6332db1851c569a10460d99b8872e2a1b72e4e744195a347790f623b8b87d2397b4dccda29c86cc9ce3931cee5d5eaf137585acfdf455d09656f6666759a6ae9daf247fbe630ceac8b1e4cd931c8c06ab929a855355ff1b4d480464d2bbb57424f5391e3e12543839d38a0fe001bed9a7d4e3c7a5c27fbe480febd2fbcd29efb4715aa6fa63d3f97330a9352068e3736a6af5349b680f5385d74bdde3a9ab0f4a9ac9365e759d6b47909072c745d1b10d9abc5c9edf3c1610b54fa401b60c41b70ed3a5249607d5007bec580d1383546896987a8b86e8111322dd0f5791318f7ff109765706ed520b3641a25c6b13d7f71e786b64ba6fad2fc290aa74360ddb3cdf0be52aad69a92af1ef3e63fd01a43378ebffeaed2a0c3593b6979e53310d3d5217bbf05f91e9140af641a23f7e544f04922925c9a1138f86407a03a3754534f94bfc518cc8130a70311e29718e29e0b864a114867ba6b1175ebc0e62e258e72596b4b305de99440f12b622ae6a48b95a7caae4b96d6f09dded10cebe7f569d629203f1260a16f1231cef486296a3642bcf70281c430379e58ce2c80636a363d0ba9ab170c99e7b9fd2931f72b71e87f6f029d9c158cce65973768adc22bb64efb92284e9a7ceaf6306e4f9bcbe7d4929858d3a3f5ecc090c6d5ddb9eef4eb04d6e98034221a676ebfb35c3034c67b26a66464f2b7b5dbf0e297b99b8445b1a844cbbb3896ac2556ca0ebb6d12b8d59c683aaa05a54bbfe887f9640b098f0595e24c0ad2641b6e9c2e94f49ebf0457a34e7d3f76f4d1b0d0938ac86458ef910351b88abab0574fa61805cb027075329a3b391ccdc4135fc29c83ab431a7845d1e69e9cd7b208bfcceb117433c9cfdcbcc0ceade1d4a463a4a22db7eafc2020d96281f477b85fa429cfadb6e2d5d82dc230f80085706907df7898438ff012442889b7de324f70bb56eb3100f541cd245fe660df0b08c06e68004a54ed4e6ec03c1152e4c3df982907059637849b5ca9048a76ee4f497ffce9b35f2b2139c72fe93d07ff10e28c20ca2418dc6bf1249a9a581f9f002a5b78db2c9dedf6e0296f27ba0b4bbdc96c2ee5f70f0b16b7951f5c6e0eb8affaf7b879500a2a1b322d28c2d6ba830a82f6527dae08ca9c4150196f1c8a057853754d9c6c230d07b6b604683ab4eeae4b148415ebb9507aa2d7607989080431b5825378b1bf482ce0234223598de4f26857c27eb683c27b5e5db0d390e54d6e777562fa3565f6a7449ca4fe3880d3a60065e51209bc50aecf401169fcf5de8f88f058093170e8ee372927c181f611cc07a0110bf05b305c718e1dca739b0046edbb823142ac182e1acf3f7dca32913cf49d00609362743b91da046807bf9d7b99cf3608d912811f790432d225ca894ef1b9912eb7a8e5548c6f09ebe13f89c3411a2b789951983fd62762a6440436ab9a121575055d951968c9a8de2a57a7614a98d1c61c5fbdcd416de31aef965c532be5eee8e8a0a5f60306c0c11aaa5d79f7438718538bc2b8912c55ef589dbf2893bbe40c4fc85342cd31ddaacc9ea7a664270467aca454d5bf537fa54544409bdddad81d876d2d5be4b5c0ab5e0393893d273f4a771a8fcc0b64f392209bb7b18ae612908f2903b5ab9c3ff37c78f6c777b036799cd221a89d6143622287af8ee6d897700efc7358636ac463fb9dc4d6df6663ae8e9b9f4ad5b66003690f73b34eac876d42b6dfe1fef78c004b781465e15741a38d4b4c705bb2b467eafc3656db3df906b68ff557f8a6c763cb2550f9b8f8980ac6fb37d666d09793a3bf72d834fd7016aa9946d90dfa874907230f3f6c097a15c05a4be3882806b9300e1a86f973a0d75c54e3582aeb726e91dde5a6d327cea24713c2dfbd32f0fdc919ba3f06170dab312ff7b4dd2cc7ae0ff79eea840c9710a93dbf346b3c5997b5185c7012930cfb77b7ba0c6adeb0edb3fdf43a9395532927b1885f880c789665e20d167f90a5ee5342b7d01d24d3101d25140b27d7827eb39d31ba6caf047aa86b2641dcfcc52132ed4cc380fedacd6b26b86510395049305728537ba58e1df1df902c2da2e419315117fda88689f0e8b67eea29b1a7bdd3395d247da3f5c4801f1e14cbc76a4b5fddf91cb16c1bb05cc88bbf4733462a769e7d2d802068485adcf1579ac9038965f658a865839a0b2fa4055f94b72fb3c2c2c760a94c78527c986004dc6d690e773496ddbe8c910d79ce89b356307c79eade745d5d5dbd98381a2cd7606456854a2d674e4fc71ed13c52ddfc593290a7fcc96ecedb3fd20bb245a339fd99819c6e3e5627fe141b83ee5d79a608e359295b3484fc794ef99f830f511f20817d3cc9cda78b6648ce9240c25c055906a9f87915fb48fd72142caddd4ea7c60be3d14707dffeec495ad1194f118b69e06371c586c20c17ffa41f12abc29640e956d8b65db20c093c50ed208469cd536dec5c34c11d22629c19aa8ca06808d13b4136e7d7ee09c0bd96723d77e796c40140061d8186977df4cf3d370c567198dfa45526e9f6e098448363e61eb3d1befd77912505412e5fc587041aa257540c1b257169a2a3c657354dc3ca90fe415b1e10f759c3a5f18f73f37b09b02565f14f363309e0356c0424c189bd8913e4cff86f1d818203ce1ee75ac191ae2b12f9ca493a4043a37bc86389da2ec2840f4277ae41f7b922df5004cd4c9209e3731aa8bbb67e3f8dafe7ecbc8b7d69b52447ee23c54f8bac64be564597acfb02621d66b2da2771c9d875c42123244bc7d2b45d1b8d0e063c4b3b45e10fea75bf231e75dcda2980932debc8ed571d06e6552b94137d893ebd3b1981d2b6cf2e9ae95ef85b409eeb913b4736ac36d0a0ab8fdf53b9f5d418915bb9c4373fdd63b9c3928a2372f46945069657c13a64f07167abe828d4ac4f3d728626627442764be073a217a9e23c03eab4e9b670ba988d8006b3d9f8aac7c621694dfacde2e8a4c908c56970d453df565eaa235043956f6c993879add1860db58c6c6d1b66afe1adaed282d513d92b6852b9f28a66970ebfc9287d0bfd08a34dc840b505728ec6617dac862576", 0x1000}, {&(0x7f0000001780)="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", 0xc60}], 0x4}, 0x0) 22:58:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x42, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0xeb03, &(0x7f0000000240)=@raw=[@jmp, @call, @initr0], &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:52 executing program 3: socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x1, 0x985, &(0x7f0000002180)=""/4112, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000280), 0xa8) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, &(0x7f00000005c0)=""/227, 0x0, 0x0, 0x80000000, r3}, 0x38) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0xe, 0x2000010e, &(0x7f0000000100)="a4dbae5a340ce56385b874bfe370", &(0x7f0000002040)=""/4096}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x0, 0x3, r5}, 0x14) 22:58:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1074, 0xffffffffffffffff, 0x2}, 0x40) 22:58:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x9, 0x1, &(0x7f0000000240)=@raw=[@jmp], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x8, 0x1, &(0x7f0000000240)=@raw=[@jmp], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:52 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000080)) 22:58:52 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xc, &(0x7f0000000240)=@framed={{}, [@ldst]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x33) 22:58:53 executing program 1: bpf$BPF_TASK_FD_QUERY(0xf, 0x0, 0x0) 22:58:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) 22:58:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x2, &(0x7f0000000240)=@raw=[@call, @func], &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:53 executing program 3: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2954, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:58:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x1, &(0x7f0000000240)=@raw=[@func], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth0_to_team\x00'}) 22:58:53 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000100), 0x4) 22:58:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006100000054000000000000009500004000000000ce371655974958c9c444d5b3a734f920fc7fb07d3b7ebb88204d9dab4a3962d62d0d9c98d00587fe9557ef0bd9846f5229568e12e54e0300000000000000687723d9859a32d534aec908a8e7dcb4880b05ad1a71a794fc8bd148b18541523f209d42f8716da5f48e8a4149de734450d3342d6aa4daa0e7f964cdac9a6a7ca89dda39b412ec5326368a21468124cd1ae43f9fda6b75a85a9d0dfb3dfa40443776e40b0b9ad5838759c691977dfa367c9058851841099c3a61a08d183d8484e4e71f6f4f3adc2a9535e28578f15374e1b593f140e6deb146cc98c3aabd031cdf10e4"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2000000, 0xe80, 0x0, &(0x7f00000001c0)="5cdd30c37f3e0a6633c9f7b988a8", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:58:54 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x7, 0xffffffffffffffff, 0x0) 22:58:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:58:54 executing program 1: bpf$OBJ_GET_PROG(0x11, &(0x7f0000000140)={0x0, 0x0, 0x4}, 0x10) 22:58:54 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x2010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xff, 0xff, 0x8, 0xc5, 0x0, 0x0, 0xa4a96, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x12408, 0x8, 0x3f, 0x5, 0x80000001, 0x3f, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f003f00, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000028c80), 0x8) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb8bb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r2, r2, 0xb, 0x2}, 0x14) bpf$LINK_DETACH(0x22, 0x0, 0x0) 22:58:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0x3fe, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c7"}]}}, &(0x7f0000000300)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 22:58:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000000000000000fcffff84000000360000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:58:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x1}]}}, &(0x7f00000003c0)=""/145, 0x26, 0x91, 0x1}, 0x20) 22:58:55 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000100), 0x4) 22:58:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x24}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c7"}]}}, &(0x7f0000000300)=""/4096, 0x5f5e0ff, 0x1000}, 0x20) 22:58:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:56 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) close(r0) close(r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = gettid() r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x10, 0x0}, 0x30) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0xffffffffffffff11) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 22:58:56 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)={@cgroup, 0xffffffffffffffff, 0x1b}, 0x10) [ 2195.920970][ T5050] syz-executor.5[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 22:58:56 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) 22:58:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 22:58:56 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000012d00)={&(0x7f0000010ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000012c40)=[{&(0x7f0000010b40)=""/4096, 0x1000}, {&(0x7f0000011b40)=""/4096, 0x1000}, {&(0x7f0000012b40)=""/12, 0xc}, {&(0x7f0000012b80)=""/183, 0xb7}], 0x4, &(0x7f0000012c80)=""/119, 0x77}, 0x2000) 22:58:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2195.929226][ T5050] syz-executor.5[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2196.576506][ T5061] can: request_module (can-proto-0) failed. [ 2196.686742][ T5061] can: request_module (can-proto-0) failed. 22:58:57 executing program 2: bpf$OBJ_GET_PROG(0x21, &(0x7f0000000140)={0x0, 0x0, 0x4}, 0x10) 22:58:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x7, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x20}, @call, @func, @initr0, @map_val], &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f00000002c0)=@raw=[@btf_id, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x55d55448d64eb03b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 22:58:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000bc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 22:58:57 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) close(r0) close(r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = gettid() r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x10, 0x0}, 0x30) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0xffffffffffffff11) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 22:58:57 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) close(r0) close(r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = gettid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x10, 0x0}, 0x30) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0xffffffffffffff11) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={0x0}, 0x10) perf_event_open(0x0, r2, 0x1, r4, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 22:58:58 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x531501, 0x0) 22:58:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0xc) 22:58:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x3, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x4}, @call, @exit], &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000017c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x1, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffff}], &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:59 executing program 5: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 22:58:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0xdb03, &(0x7f0000000240)=@raw=[@jmp, @call, @initr0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:59 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x2c, &(0x7f0000000100), 0x4) 22:58:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:58:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x2010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f003f00, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000028c80), 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xb8bb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r1, r1, 0xb, 0x2}, 0x14) bpf$LINK_DETACH(0x22, 0x0, 0x0) 22:58:59 executing program 4: bpf$BPF_TASK_FD_QUERY(0x16, 0x0, 0x0) 22:58:59 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x2d, &(0x7f0000000100), 0x4) 22:59:00 executing program 3: socketpair(0x25, 0x0, 0x0, &(0x7f0000000500)) 22:59:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a7c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x73}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x8d, &(0x7f0000000200)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:59:00 executing program 4: 22:59:00 executing program 1: 22:59:00 executing program 5: 22:59:00 executing program 3: 22:59:01 executing program 4: 22:59:01 executing program 0: 22:59:01 executing program 2: 22:59:01 executing program 1: 22:59:01 executing program 5: 22:59:01 executing program 3: 22:59:01 executing program 0: 22:59:01 executing program 4: 22:59:01 executing program 1: 22:59:01 executing program 2: 22:59:01 executing program 5: 22:59:02 executing program 3: 22:59:02 executing program 0: 22:59:02 executing program 4: 22:59:02 executing program 1: 22:59:02 executing program 5: 22:59:02 executing program 2: 22:59:02 executing program 3: 22:59:02 executing program 0: 22:59:02 executing program 4: 22:59:03 executing program 1: 22:59:03 executing program 5: 22:59:03 executing program 2: 22:59:03 executing program 0: 22:59:03 executing program 3: 22:59:03 executing program 4: 22:59:03 executing program 1: 22:59:03 executing program 5: 22:59:03 executing program 2: 22:59:03 executing program 0: 22:59:04 executing program 3: 22:59:04 executing program 4: 22:59:04 executing program 1: 22:59:04 executing program 2: 22:59:04 executing program 5: 22:59:04 executing program 3: 22:59:04 executing program 0: 22:59:04 executing program 4: 22:59:04 executing program 1: 22:59:04 executing program 2: 22:59:04 executing program 5: 22:59:05 executing program 3: 22:59:05 executing program 4: 22:59:05 executing program 0: 22:59:05 executing program 1: 22:59:05 executing program 2: 22:59:05 executing program 5: 22:59:05 executing program 3: 22:59:05 executing program 0: 22:59:05 executing program 4: 22:59:06 executing program 2: 22:59:06 executing program 5: 22:59:06 executing program 1: 22:59:06 executing program 4: 22:59:06 executing program 3: 22:59:06 executing program 0: 22:59:06 executing program 2: 22:59:06 executing program 5: 22:59:06 executing program 1: 22:59:06 executing program 4: 22:59:07 executing program 0: 22:59:07 executing program 3: 22:59:07 executing program 2: 22:59:07 executing program 5: 22:59:07 executing program 1: 22:59:07 executing program 4: 22:59:07 executing program 3: 22:59:07 executing program 0: 22:59:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:59:08 executing program 5: socket(0x23, 0x0, 0x579) 22:59:08 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420100, 0x0) 22:59:08 executing program 4: syz_io_uring_setup(0x5c79, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 22:59:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002440)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:59:08 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000240)) 22:59:08 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='c', &(0x7f00000001c0)}, 0x48) 22:59:08 executing program 1: bpf$LINK_GET_FD_BY_ID(0x17, 0x0, 0x0) 22:59:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:59:08 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x8) 22:59:09 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="0495c6537b244eac54be059df405d58331cbd8c164ca226c03d9de498854b86996e7ff7ac463b747fa755ea2fcaf5255378f838231ccf05be5b7945fde5ad729bdb31ecf934f4dc8cb177b536a2f60bb570bc6cceab2a071836b61c3a740061275bef3ed9b465babf8833a2258bbb5631e", 0x71, 0x1ff}], 0x800810, &(0x7f00000002c0)={[{@localcaching='localcaching'}, {@meta='meta'}, {@upgrade='upgrade'}, {@suiddir='suiddir'}, {@locktable={'locktable', 0x3d, '\xde`N\xbe\xb3\xd9D\xd9\x8b\xc2l\x11k\x91\xebn\xa7\x10l5\x88\x88\xeb[i\xf9\xdc\\X\x85\xf6y\xee{{\xf7\xa8\xae\xaa\xac\x1a\xfc\x12\xff\xa7\xc5\x04+=x\xd8U`\x983\xe3C\xa0\v\x8f\xce\'\a~7\"\xac\\\xd86\x13q\xc5\xafUF\xea\x8f\x8b\xec I\xac\xae\f\x8c1\xd7\xe6\xe9\x9a\x04\xd9\xc4-\xef\x83\xf8\xf3\x83}iM\xfb\xc0)Kl\x8a\f\xc5n1\xdeD\x8a\xb6\xfemY\x12\x0e\xd2\x1e\xccJ\xdf\x8eo$\x10\x87\xd0\x19\x95e\x89M\x98\xdd\xa1FU?\x1d\xd9&\x1e<\x15O\xf9\xbc\xf4\xe6\x00\x00\x00\x00'}}, {@nobarrier='nobarrier'}, {@data_writeback='data=writeback'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dlm-control\x00'}}]}) 22:59:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:59:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000280)) 22:59:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5414, 0x0) 22:59:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 22:59:09 executing program 4: socketpair(0x28, 0x0, 0x8c, &(0x7f00000017c0)) [ 2209.234278][ T5244] attempt to access beyond end of device [ 2209.240359][ T5244] loop3: rw=4096, want=136, limit=1 [ 2209.245804][ T5244] gfs2: error 10 reading superblock 22:59:09 executing program 0: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:59:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 22:59:10 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x6) 22:59:10 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000040)={'vcan0\x00'}) 22:59:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40101283, 0x0) 22:59:10 executing program 4: syz_io_uring_setup(0x44b8, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 22:59:10 executing program 0: r0 = socket(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x28, 0x10, 0x0, 0x0) 22:59:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="060000003507000081"]) 22:59:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f00000001c0)=""/214, 0xd6) 22:59:10 executing program 5: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 22:59:11 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000001800)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 22:59:11 executing program 4: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)={[{@lockproto_nolock='lockproto=lock_nolock'}]}) 22:59:11 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000840)={0x0, &(0x7f00000007c0)="031843b2f80e8ba48e92cedc93e7171d74841f1874abf341fc6535c3076ceabb981ab1550fa048608be93c052a4f4ec61b0310bd47c4a3ae84acfd61c27501f2a9", 0x41}) 22:59:11 executing program 3: r0 = socket(0x23, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000122) 22:59:11 executing program 1: syz_emit_ethernet(0xf15, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0x0, 0x0, 'V', "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"}}}}}, &(0x7f0000001040)={0x1, 0x4, [0x3aa, 0x2bd, 0xe20, 0xf7f]}) 22:59:11 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2211.393206][ T5289] gfs2: not a GFS2 filesystem [ 2211.533187][ T5289] gfs2: not a GFS2 filesystem 22:59:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) 22:59:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x5, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) 22:59:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x540f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "1a54cdcee8df32dfec93c9531258851313c3b9"}) 22:59:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 22:59:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 22:59:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x127f, 0x0) 22:59:12 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x1268, &(0x7f0000000040)) 22:59:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x6, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='#\x00') 22:59:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000001c0)) 22:59:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000680)) 22:59:13 executing program 1: syz_mount_image$qnx6(&(0x7f00000021c0)='qnx6\x00', &(0x7f0000002200)='./file0\x00', 0x0, 0x0, &(0x7f00000035c0), 0x0, &(0x7f0000003680)={[{}], [{@appraise_type='appraise_type=imasig'}]}) 22:59:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0xc) 22:59:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000003c0)={0x3c0}) 22:59:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/4096, 0x5f5e0ff, 0x1000}, 0x20) 22:59:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x0, 0x8001, 0x4, {0x3, @pix_mp}}) 22:59:13 executing program 4: remap_file_pages(&(0x7f0000f7d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0) 22:59:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8947, &(0x7f0000000040)={'vcan0\x00'}) 22:59:13 executing program 1: setresuid(0xee00, 0xee01, 0xee00) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(r0, 0x0, 0xee00) 22:59:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 22:59:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x2}]}}, &(0x7f0000000240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 2213.844124][ T5341] mmap: syz-executor.4 (5341) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 22:59:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fe3b53a9766dc94) 22:59:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x29, 0x1, 0x0, 0x0) 22:59:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 22:59:14 executing program 1: socketpair(0x1d, 0x0, 0xfffffffa, &(0x7f0000000040)) 22:59:14 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 22:59:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x200) 22:59:15 executing program 5: syz_io_uring_setup(0x463e, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0xd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x563, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x30d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 22:59:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x121702) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x541b, 0x0) 22:59:15 executing program 4: r0 = socket(0x18, 0x0, 0x1) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 22:59:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000740)=@unspec, 0xc) 22:59:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x80805659, 0x0) 22:59:15 executing program 2: syz_open_dev$ndb(&(0x7f00000007c0)='/dev/nbd#\x00', 0x0, 0x0) 22:59:15 executing program 4: r0 = io_uring_setup(0x2758, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 22:59:15 executing program 5: r0 = getuid() syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000080)="0e1ad3f978019e9a4e9c5b33314bae639ac1613577b816082322a6ae7976adbe237fa33f42c7b4f72ada3b06ebe0c1435ef35556af8dde01e648e9cacc8e13ab83f5e375cb86a21826604949c87ec7154dbd0bae2141f4b1b1d2eefbef3c03b43f1098e6f33ad91b06ab6faffb1a2c671897cb193f1326e4389592ba03600418a34a", 0x82, 0x80000000}, {0x0, 0x0, 0xf8e}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x7fff}, {&(0x7f0000000580)="c44f046b", 0x4}, {0x0, 0x0, 0xbf}, {&(0x7f00000006c0)="30197e2049c99b2ff437d5b1564542ba2be4ee5be2250ff1d31bba6e3a69b877bcd1501d339a315b4fb80a87a691a4cef359f082d839adf06b265162395a4d8fc227088c67b758e26dcbead5c1e456f4dc7212ba9b6e66e6d25225f32e088a6628b168259faa41930d8bd6f8ff9e827d771530c8f00a7b569704b3ef509722368d162e72fbecbfef1f00b11c4dc6fb4f31d5493e786631426cb3738f90bbed75c0a44bc7e578e7876ef6eeca3584eefdcb73268c02eafcabc4d06523a424cfdff715fef6b39af5d78983cee9dfe6f48c6a5587a39f2a05063f15516eeb8b82d687e6d3c024780c77e9630a4f9527", 0xee}], 0x0, &(0x7f00000008c0)={[{@norecovery='norecovery'}, {@nobarrier='nobarrier'}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '!{/}@.&(/'}}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, '$)}*]\'.\'[\\:^('}}, {@euid_lt={'euid<', r0}}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000a80)={0x0, &(0x7f0000000980)=""/237}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000ac0)={0x0, 0x26}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/rfkill\x00', 0x3b1000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84040, 0x0) 22:59:16 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x123141, 0x0) 22:59:16 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x7}) 22:59:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0x3, 0x2}, 0x40) 22:59:16 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x11, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='#\x00') [ 2216.059389][ T5398] NILFS (loop5): couldn't find nilfs on the device [ 2216.166733][ T5398] NILFS (loop5): couldn't find nilfs on the device 22:59:16 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 22:59:16 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f00000002c0), 0x4) 22:59:16 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x0, "50185bebf49295b59578e27873dc054f75434f5b4e5145921d6d15ab2d71f057"}) 22:59:16 executing program 5: r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 22:59:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000080)={'vcan0\x00'}) 22:59:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002440)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002500)={&(0x7f0000002400), 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}}, 0x0) 22:59:17 executing program 1: setresuid(0xee00, 0xee01, 0xee00) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 22:59:17 executing program 4: bpf$MAP_GET_NEXT_KEY(0xa, 0x0, 0x0) 22:59:17 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xcb, 0x181040) 22:59:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000640)=0x4) 22:59:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x17, 0x0, &(0x7f00000008c0)) 22:59:17 executing program 4: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcba3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:59:17 executing program 0: memfd_create(&(0x7f0000000000)='{((\xde-.$\x00', 0x2) 22:59:18 executing program 3: r0 = socket(0x1, 0x1, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) 22:59:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7d, 0x0, 0x0) 22:59:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) 22:59:18 executing program 5: r0 = io_uring_setup(0x82, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) 22:59:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', 0x0}) 22:59:18 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)) 22:59:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f00000008c0)) 22:59:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8919, &(0x7f0000000040)={'vcan0\x00'}) 22:59:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00 \x00'}, 0x0, 0x0, @userptr}) 22:59:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xf2b8baa84415dc4f, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 22:59:19 executing program 0: clock_adjtime(0x0, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8dfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 22:59:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x2, 0x2}, 0xe) 22:59:19 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a8, 0x0) 22:59:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x77, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}], 0x1c) 22:59:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x201, 0x4}}, @var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001240)=""/4108, 0x5e, 0x100c, 0x1}, 0x20) 22:59:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) 22:59:19 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x29, 0x4d, 0x0, 0x0) 22:59:19 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x29, 0x1, 0x0, 0x300) 22:59:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') 22:59:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:59:20 executing program 3: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0xfffffe94) 22:59:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x82, &(0x7f0000000000)={0x0, 0xf42e, 0x8, 0x0, 0x35, 0x0, r1}) r3 = socket$xdp(0x2c, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r0, r3, 0xffffffffffffffff], 0x3) 22:59:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f40)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="49470367b26e0021", 0x8, 0x0, &(0x7f0000000300)={0x11, 0x8864, r2, 0x1, 0x0, 0x6, @random="9e067c31fd79"}, 0x14) 22:59:20 executing program 1: setresuid(0xee00, 0xee01, 0xee00) setresuid(0x0, 0x0, 0xee00) 22:59:20 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x61) 22:59:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2202, 0x0) 22:59:20 executing program 3: fanotify_init(0x2, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) 22:59:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 22:59:21 executing program 0: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 22:59:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2285, 0x0) 22:59:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 22:59:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f00000001c0)={0x0, 0x0}) 22:59:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc6, &(0x7f0000000100)=""/198, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:59:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x1, &(0x7f0000001980)=@raw=[@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:59:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5414, &(0x7f0000000180)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "1a54cdcee8df32dfec93c9531258851313c3b9"}) 22:59:21 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x0, 0x12, r0, 0x0) 22:59:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000040)={'vcan0\x00'}) 22:59:22 executing program 5: set_robust_list(&(0x7f0000000640), 0x18) 22:59:22 executing program 3: syz_io_uring_setup(0x1b63, &(0x7f0000000040), &(0x7f0000003000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 22:59:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x14, 0x0, &(0x7f00000008c0)) 22:59:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x299}, 0x14) 22:59:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000580)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'nr0\x00'}) 22:59:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000480)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)}) 22:59:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x16, 0x0, 0x0) 22:59:23 executing program 4: syz_io_uring_setup(0x463e, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x563, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 22:59:23 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x14}, 0x10) 22:59:23 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "efd12738e67401bc89048c6c87fb1b4f43f7538533b1e274e9b3a375323921787af265267ee27205dc33a046e2ffc219944b92550d747b3f5c247631064db7"}, 0x60) 22:59:23 executing program 0: rt_sigaction(0x13, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 22:59:24 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 22:59:24 executing program 1: r0 = socket$inet6(0x18, 0x9001, 0x0) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x1a8}, 0x0) 22:59:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001580)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 22:59:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockname(r0, 0x0, 0x0) 22:59:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x0) 22:59:24 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4}) 22:59:24 executing program 5: r0 = socket$inet6(0x18, 0x9001, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000002540)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0}, 0x0) 22:59:24 executing program 1: 22:59:24 executing program 2: 22:59:25 executing program 0: 22:59:25 executing program 3: 22:59:25 executing program 4: 22:59:25 executing program 5: 22:59:25 executing program 1: 22:59:25 executing program 2: 22:59:25 executing program 3: 22:59:25 executing program 0: 22:59:26 executing program 4: 22:59:26 executing program 5: 22:59:26 executing program 1: 22:59:26 executing program 2: 22:59:26 executing program 4: 22:59:26 executing program 3: 22:59:26 executing program 0: 22:59:26 executing program 5: 22:59:26 executing program 1: 22:59:26 executing program 2: 22:59:27 executing program 4: 22:59:27 executing program 3: 22:59:27 executing program 0: 22:59:27 executing program 5: 22:59:27 executing program 1: 22:59:27 executing program 2: 22:59:27 executing program 3: 22:59:27 executing program 4: 22:59:27 executing program 0: 22:59:27 executing program 5: 22:59:28 executing program 1: 22:59:28 executing program 2: 22:59:28 executing program 3: 22:59:28 executing program 0: 22:59:28 executing program 5: 22:59:28 executing program 4: 22:59:29 executing program 1: 22:59:29 executing program 2: 22:59:29 executing program 3: 22:59:29 executing program 0: 22:59:29 executing program 5: 22:59:29 executing program 4: 22:59:29 executing program 2: 22:59:29 executing program 3: 22:59:29 executing program 1: 22:59:29 executing program 4: 22:59:29 executing program 5: 22:59:29 executing program 0: 22:59:30 executing program 2: 22:59:30 executing program 1: 22:59:30 executing program 4: 22:59:30 executing program 3: 22:59:30 executing program 0: 22:59:30 executing program 5: 22:59:30 executing program 2: 22:59:30 executing program 3: 22:59:30 executing program 1: 22:59:30 executing program 4: 22:59:31 executing program 5: 22:59:31 executing program 0: 22:59:31 executing program 3: 22:59:31 executing program 2: 22:59:31 executing program 1: 22:59:31 executing program 4: 22:59:31 executing program 5: 22:59:31 executing program 0: 22:59:32 executing program 3: 22:59:32 executing program 2: 22:59:32 executing program 1: 22:59:32 executing program 4: 22:59:32 executing program 5: 22:59:32 executing program 0: 22:59:32 executing program 2: 22:59:32 executing program 3: 22:59:33 executing program 4: 22:59:33 executing program 1: 22:59:33 executing program 5: 22:59:33 executing program 0: 22:59:33 executing program 2: 22:59:33 executing program 3: 22:59:33 executing program 4: 22:59:33 executing program 5: 22:59:33 executing program 1: 22:59:34 executing program 0: 22:59:34 executing program 2: 22:59:34 executing program 3: 22:59:34 executing program 1: 22:59:34 executing program 4: 22:59:34 executing program 5: 22:59:34 executing program 0: 22:59:35 executing program 3: 22:59:35 executing program 2: 22:59:35 executing program 4: 22:59:35 executing program 1: 22:59:35 executing program 5: 22:59:35 executing program 0: 22:59:35 executing program 3: 22:59:35 executing program 2: 22:59:36 executing program 4: 22:59:36 executing program 1: 22:59:36 executing program 5: 22:59:36 executing program 0: 22:59:36 executing program 3: 22:59:36 executing program 2: 22:59:36 executing program 1: 22:59:36 executing program 4: 22:59:37 executing program 5: 22:59:37 executing program 0: 22:59:37 executing program 2: 22:59:37 executing program 3: 22:59:37 executing program 1: 22:59:37 executing program 4: 22:59:37 executing program 5: 22:59:38 executing program 0: 22:59:38 executing program 3: 22:59:38 executing program 2: 22:59:38 executing program 1: 22:59:38 executing program 4: 22:59:38 executing program 5: 22:59:38 executing program 3: 22:59:38 executing program 2: 22:59:38 executing program 0: 22:59:38 executing program 1: 22:59:38 executing program 4: 22:59:39 executing program 5: 22:59:39 executing program 3: 22:59:39 executing program 2: 22:59:39 executing program 0: 22:59:39 executing program 4: 22:59:39 executing program 5: 22:59:39 executing program 1: 22:59:39 executing program 3: 22:59:39 executing program 2: 22:59:39 executing program 0: 22:59:40 executing program 4: 22:59:40 executing program 1: 22:59:40 executing program 5: 22:59:40 executing program 3: 22:59:40 executing program 2: 22:59:40 executing program 0: 22:59:40 executing program 4: 22:59:40 executing program 5: 22:59:40 executing program 1: 22:59:40 executing program 3: 22:59:41 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200002, 0x0) 22:59:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:59:41 executing program 5: bpf$PROG_LOAD(0xd, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:59:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) fcntl$getflags(r0, 0x408) 22:59:41 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, 0x0) 22:59:41 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) connect$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a9d830fb0de91e980034e1675ad99883d45df37c19aeb6dd425788f08ebece0ce18750f43f3ff2bc7d25a9934f37a372561e4c051591aa3623ed8b4636a4a7"}, 0x60) 22:59:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:59:41 executing program 0: bpf$PROG_LOAD(0x8, 0x0, 0x0) 22:59:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x3cb5, &(0x7f0000000000)={0x0, 0x0, 0x10}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) 22:59:42 executing program 4: bpf$PROG_LOAD(0x1e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:59:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x35a}, 0x40) 22:59:42 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x1901) 22:59:42 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)) 22:59:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000003013b67"], 0x1104}], 0x1, 0x0, 0x0, 0x20004004}, 0x0) read(r0, &(0x7f0000000040)=""/224, 0xe0) 22:59:42 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{}, 'port0\x00'}) 22:59:43 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800)='/dev/snd/seq\x00', 0x383100) finit_module(r0, 0x0, 0x0) 22:59:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800)='/dev/snd/seq\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 22:59:43 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) [ 2242.744196][ T5800] netlink: 1008 bytes leftover after parsing attributes in process `syz-executor.0'. 22:59:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc) [ 2242.993818][ T5800] netlink: 1008 bytes leftover after parsing attributes in process `syz-executor.0'. 22:59:43 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)) 22:59:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 22:59:43 executing program 4: bpf$PROG_LOAD(0x1c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:59:43 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x86842, 0x0) 22:59:44 executing program 2: socket(0x1e, 0x0, 0x6) 22:59:44 executing program 4: 22:59:44 executing program 1: 22:59:44 executing program 5: 22:59:44 executing program 0: 22:59:44 executing program 3: 22:59:45 executing program 2: 22:59:45 executing program 3: 22:59:45 executing program 5: 22:59:45 executing program 4: 22:59:45 executing program 0: 22:59:45 executing program 1: 22:59:45 executing program 2: 22:59:45 executing program 3: 22:59:45 executing program 4: 22:59:45 executing program 5: 22:59:45 executing program 0: 22:59:46 executing program 1: 22:59:46 executing program 2: 22:59:46 executing program 3: 22:59:46 executing program 4: 22:59:46 executing program 5: 22:59:46 executing program 1: 22:59:46 executing program 0: 22:59:46 executing program 2: 22:59:46 executing program 3: 22:59:47 executing program 4: 22:59:47 executing program 1: 22:59:47 executing program 5: 22:59:47 executing program 0: 22:59:47 executing program 3: 22:59:47 executing program 2: 22:59:47 executing program 4: 22:59:47 executing program 1: 22:59:47 executing program 5: 22:59:47 executing program 0: 22:59:48 executing program 2: 22:59:48 executing program 3: syz_mount_image$iso9660(&(0x7f0000000b40)='iso9660\x00', &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)) 22:59:48 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4000, 0x0) 22:59:48 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x57) 22:59:48 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40001, 0x0) 22:59:48 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_NAT_SRC={0xb8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20080081) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000280)={0x964, 0x1, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x4f}, 0x1f, 0xff, 0x8, 0x5, 0x1, 'syz1\x00', "f6c95c912d3b31f19d00f8e4b0f9a898680790f171f5f6b4b712e3440abd7903", "7b3ce07ca8e5bce335163c6171b833a13d03443173ee561c5c61299268bf5e01", [{0x1, 0x100, {0x1, 0x2099a478}}, {0x1, 0x1b0, {0x1, 0x3}}, {0x9, 0x7fff, {0x0, 0x8000}}, {0x39cc, 0x1, {0x3, 0x1}}, {0x1, 0x0, {0x3, 0x8e1e}}, {0x5, 0x9, {0x0, 0x4}}, {0x6, 0x8000, {0x2}}, {0x9, 0x0, {0x3, 0x401}}, {0x1, 0x5, {0x0, 0x2}}, {0x3, 0x4, {0x3, 0x7f}}, {0xc1e0, 0x5, {0x1, 0x800}}, {0x7, 0x1, {0x0, 0x5}}, {0x0, 0x3, {0x3, 0x10001}}, {0xff24, 0xff, {0x2, 0x8000}}, {0x9, 0x0, {0x0, 0xffffffff}}, {0x1ff, 0x1, {0x0, 0xffffffff}}, {0x4, 0x466, {0x1, 0xc2c0}}, {0x2, 0x7fff, {0x2, 0xbf03}}, {0x0, 0x1, {0x0, 0x6}}, {0x400, 0x6, {0xe4b0a5f4103475d4, 0x8}}, {0x3, 0xfffb, {0x3, 0xfff}}, {0x400, 0x1f, {0x2, 0x6}}, {0x7, 0x9d3, {0x0, 0x5a44}}, {0x5, 0x80, {0x0, 0x5}}, {0x7, 0x1, {0x1, 0x1f}}, {0x9, 0xffff, {0x1, 0x4}}, {0x7fff, 0x3, {0x1, 0xffff}}, {0x5, 0x7, {0x3, 0xa48}}, {0x400, 0x101, {0x0, 0x3506}}, {0x7f, 0x9, {0x2, 0x1000}}, {0x3, 0x9, {0x2, 0xffffc0d4}}, {0x200, 0xbf22, {0x3, 0x5}}, {0xd99, 0x1}, {0x3, 0x0, {0x2, 0x1}}, {0x1, 0x3, {0x1, 0x3}}, {0x2, 0x2, {0x3, 0x3}}, {0x50, 0x9, {0x1, 0x2}}, {0x1ff, 0x2, {0x1, 0x38}}, {0xffff, 0x2, {0x0, 0x8}}, {0x4, 0x20, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x6, 0xfe, 0x1, 0xa8f, 0x7, 'syz0\x00', "6cf720606884c7d58719ce05aea9b2e39369a196ecace911d4109b9f6740a9db", "410b760ae29845151bcffa991be44771af7c80cd7c22a92915a455e2bee1c0fb", [{0x8d, 0xf73, {0x2, 0x5}}, {0x2, 0xc00, {0x3, 0x6}}, {0x3, 0x2f, {0x0, 0xea}}, {0x3, 0x5, {0x3, 0x5}}, {0x200, 0x2, {0x3, 0xfffffffb}}, {0x7, 0x7fff, {0x2, 0x8000}}, {0x6, 0x8000, {0x0, 0xfffffffb}}, {0x3, 0x9, {0x1, 0x3f}}, {0x3, 0xb4, {0x1, 0x2}}, {0x1000, 0x5, {0x0, 0x401}}, {0x40, 0x9, {0x1, 0x1f}}, {0x6, 0xc55f, {0x3}}, {0x8, 0x3ff, {0x2, 0xd20a}}, {0x760, 0x7ff, {0x0, 0x10000}}, {0x7ff, 0x7, {0x1, 0xad}}, {0x7687, 0x5, {0x0, 0xe24}}, {0x8001, 0x1, {0x3, 0xff}}, {0x2, 0x8, {0x0, 0x81}}, {0x4, 0x2, {0xad171403d147e907, 0x10001}}, {0xd5, 0x400, {0x1, 0x400}}, {0x8c89, 0x0, {0x2, 0xf6}}, {0xf801, 0xf001, {0x3, 0x401}}, {0x2, 0x8000, {0x3, 0x198c}}, {0x7fff, 0x7fff, {0x2, 0x400}}, {0x7fff, 0xfff, {0x1, 0x200}}, {0x9, 0x4c, {0x0, 0x3}}, {0x1, 0x9, {0x2, 0xc69}}, {0x3ff, 0x1000, {0x1, 0x2}}, {0x1, 0xffff, {0x3, 0xffff}}, {0x9, 0x2f7, {0xcd6efc742ebe1d56, 0x5}}, {0x7, 0x5, {0x2, 0x8}}, {0xc, 0x1}, {0x80, 0xba8c, {0x0, 0x400}}, {0x80, 0xff, {0x1, 0x9}}, {0x1f, 0x7, {0x2, 0x5}}, {0x6, 0x3f, {0x1, 0x4}}, {0x6, 0xffff, {0x2, 0x4}}, {0x8001, 0x7f, {0x2, 0x9}}, {0x7, 0x5fb, {0x1, 0x8}}, {0x10b7, 0x1, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x3, 0xccb}, 0x1, 0xf, 0x401, 0x4, 0x14, 'syz1\x00', "9e6cc5f36e14d92b633f1aa4112563c6e0d2e7c9db905e83da18747762efc321", "05aa9a4faf2b8e444d2ed71911afd04b8c139c01cc3e8dc208f18d0fee0aa884", [{0x1ff, 0xff00, {0x2, 0x80000001}}, {0x9, 0xff, {0x0, 0x9}}, {0xce6f, 0x1, {0x1, 0x7ff}}, {0x800, 0x3, {0x2, 0x8}}, {0x3, 0x0, {0x0, 0x33}}, {0x9, 0xfff, {0x3, 0xfffffffd}}, {0x5, 0x20, {0x3, 0x3}}, {0xfff9, 0x800, {0x1, 0x7}}, {0xfff7, 0x101, {0x3, 0x4}}, {0x7f, 0x0, {0x0, 0x5}}, {0x400, 0x400, {0x3, 0x1f}}, {0x7200, 0xff6c, {0x3, 0x5ddfe099}}, {0x80, 0x6, {0x3, 0x401}}, {0x6, 0x3, {0x3, 0x9}}, {0x2, 0x2, {0x2, 0x8}}, {0x4, 0x401, {0x0, 0xffffffff}}, {0x9d8, 0x101, {0x0, 0x800}}, {0x1, 0x0, {0x2, 0x2}}, {0xd84, 0x1, {0x1, 0x10001}}, {0x9, 0x7, {0x0, 0x9}}, {0x0, 0x200, {0x0, 0x3ff}}, {0x1, 0x7fff, {0x2, 0x3}}, {0x0, 0x1, {0x3}}, {0x7, 0x0, {0xb66b83634e764571, 0x4}}, {0x4, 0x4, {0x1, 0x800}}, {0x1f, 0x0, {0x3, 0x4}}, {0x1, 0xa1, {0x2, 0x7}}, {0x100, 0x1, {0x1, 0x7}}, {0x9, 0x4, {0x2, 0x8}}, {0x2b, 0x0, {0x0, 0xa6d}}, {0x8001, 0xcf52, {0x0, 0x2}}, {0x2b62, 0x6, {0x1, 0x1}}, {0x7, 0x3, {0x2, 0x3}}, {0xdc, 0x20, {0x0, 0x5}}, {0xbd, 0x2, {0x2}}, {0x6, 0x3ff, {0x2, 0x6}}, {0x7, 0xff, {0x2, 0x90f}}, {0x2, 0x9, {0x0, 0x8001}}, {0x478, 0x6, {0x3}}, {0xf9, 0x7, {0x1, 0x89ed}}]}}}, {{0x254, 0x1, {{0x1, 0x2e1}, 0x9, 0x4, 0x7, 0x3, 0x12, 'syz1\x00', "2b806d7f2f32718dfeb4f2cddf3f4d7dc259df20929bb7fb97e755e8f0875454", "482f257a87df35300b921bd0b866e43f227039dd57d86907161c6b1fba4d6354", [{0x5, 0x4, {0x0, 0xcd}}, {0xffff, 0x200, {0x2, 0x1000000}}, {0xea, 0x0, {0x2, 0x4}}, {0xffff, 0x8, {0x2, 0x2}}, {0x80, 0x101, {0x1, 0x8}}, {0x0, 0x0, {0x0, 0xffffff80}}, {0xe1b, 0x25c, {0x3, 0x7}}, {0x1, 0x9d, {0x3, 0xffffffff}}, {0x1, 0xb294}, {0x200, 0xfb6, {0x0, 0x6}}, {0x4, 0x8d74, {0x3, 0x1}}, {0x0, 0x100, {0x3, 0x81}}, {0x1ff, 0x4, {0x2, 0x100}}, {0x401, 0x6, {0x1, 0x8}}, {0x8, 0x3, {0x3, 0x9}}, {0x1, 0x8, {0x1, 0x100}}, {0x9, 0x845f, {0x0, 0x8}}, {0x6, 0x1, {0x1, 0x94}}, {0x4, 0x67ba, {0x0, 0x3}}, {0x6, 0x8, {0x3, 0x2}}, {0x3ff, 0x1, {0x3, 0x95}}, {0x800, 0x4, {0x3, 0x4}}, {0x0, 0x7fff, {0x2, 0x9}}, {0xf32, 0x3, {0x2, 0x4}}, {0xffff, 0x3ff, {0x1, 0x9}}, {0x40, 0x6, {0x0, 0x40}}, {0x6276, 0x9, {0x1}}, {0x85a, 0x4, {0x1, 0x1}}, {0xf39, 0x7fff, {0x2, 0xfffffffd}}, {0x8, 0x8, {0x1, 0x7fff}}, {0xff01, 0x1, {0x0, 0x609}}, {0x40, 0x80, {0x0, 0x8}}, {0x5, 0xe1e, {0x0, 0x9}}, {0x800, 0xe2c8, {0x1, 0x5}}, {0x8, 0x0, {0x2, 0x4}}, {0x1f, 0x875f, {0x3, 0x5}}, {0x6, 0x8, {0xc18920813168fbf0, 0xfc9}}, {0xff81, 0x551, {0x2, 0x8}}, {0xf5, 0x20, {0x0, 0x5c1c}}, {0x5, 0x20, {0x2}}]}}}]}, 0x964}}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0)='nl80211\x00') sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040081) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1b5191dbf9668b8a}, 0x40010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x40, 0x1f, 0x2, @private2={0xfc, 0x2, [], 0x1}, @private1, 0x1, 0x40, 0x4, 0x2}}) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', &(0x7f0000001080)={{r2, r3/1000+60000}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, 0x13, 0xa, 0x502, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20050804}, 0x4000040) syz_mount_image$hfsplus(&(0x7f0000001240)='hfsplus\x00', &(0x7f0000001280)='./file0\x00', 0x670, 0x6, &(0x7f0000002500)=[{&(0x7f00000012c0)="7f69daed6924e4cce6c2d817571978ff5adbbc95470740e2ff4f82a06119b14439872d23345ffb70869fa03c61909355b4c64adcd9feec4a5c62abb2599c9a2f90073400166314c490a4b38ce327ceebac1bdb29462f753fa07f828461947d610b82aab3c71f17bd7840691217403efa3202fe7aa1062f4b8245203f969b1a4209986eb9b434e6c8ed63afd26af5932a2197", 0x92, 0x8}, {&(0x7f0000001380)="1497a5f177af2e1f8a50fdf84e1361dea394f53ee69e1e7759d3c073293e8daed8de88ce899cbd38cc1286c922438a1ea2b2120dd405c2bd75fefd676fb89736839be7df462b9b3d21735e4cf26537", 0x4f, 0x7}, {&(0x7f0000001400)="b364d446a1a3726a", 0x8, 0x10001}, {&(0x7f0000001440)="46bd3ba5d8256b0ed9d9a47cd47c1781004e512fbfdeeb461e7ba8ac14836365ad13304fa4bf392133930b4b5158bd997c57175b581ad9e565227be4b732ea0ed8d0443f1a790ebd49eb1ef73416f879971d9b671ceff4c006b7715385085ab9306c556dbc306b9bee4229c2b17a0f967fab2a712eb5bc20fabecae5a3c979", 0x7f, 0x9}, {&(0x7f00000014c0)="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", 0x1000, 0x615}, {&(0x7f00000024c0)="88a63b6274da7d89764aab4bfc27ed48ec4c5e89720853677ebf4b2a029c0aad8591832f83bd93c290", 0x29, 0x36d}], 0x8004, &(0x7f00000025c0)={[{@type={'type', 0x3d, "6b9428e0"}}, {@creator={'creator', 0x3d, "dce77cce"}}, {@uid={'uid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x8000}}, {@session={'session', 0x3d, 0x5}}], [{@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@seclabel='seclabel'}]}) 22:59:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2248.682575][ T5868] ISOFS: Unable to identify CD-ROM format. [ 2248.839417][ T5877] hfsplus: unable to parse mount options 22:59:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)) 22:59:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) [ 2249.018141][ T5885] hfsplus: unable to parse mount options 22:59:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 22:59:49 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x0) [ 2249.231145][ T5868] ISOFS: Unable to identify CD-ROM format. 22:59:49 executing program 2: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1) 22:59:49 executing program 3: pipe2(&(0x7f0000005ac0), 0x80800) 22:59:49 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x260900, 0x0) 22:59:50 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000680)='mptcp_pm\x00') 22:59:50 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x181800, 0x0) 22:59:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/151, 0x158, 0x97, 0x2001}, 0x20) 22:59:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801}, 0x14}}, 0x0) 22:59:50 executing program 5: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 22:59:50 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)='fuse\x00', 0x0, 0x0) 22:59:50 executing program 0: syz_emit_ethernet(0x14, &(0x7f0000000140)={@random="76daeddad0d2", @random="a5dbb21d3e0d", @val={@void}, {@mpls_uc={0x8847, {[], @generic="8103"}}}}, 0x0) 22:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x5, [@volatile, @var, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xe5}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 22:59:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0818"], 0x88}}, 0x0) 22:59:51 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0xfffffffffffffed8) 22:59:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 22:59:51 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) 22:59:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x440000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x2, 0xb, 0x3, 0x14, 0x8]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="d5febf", @ANYRES16=r5, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="00b9fcde", @ANYRES32=r9, @ANYRES32, @ANYRESDEC, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1f367c3f1a37ce772a08a9d6739e88ffb23f6e172db876d4399d45222b24129000000", @ANYRES64=r10, @ANYRESDEC], 0x70}}, 0x20000001) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x26c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "2e8dfb625da54aa32ba9799af0b5d3476fdc36ba2a4533335e31a5b5d6c05ed6866097899fd08f5155f945124ea8bd381731e95ae56003aa2fcc91fc2a1296b8b8935bf013474f7d5025bfd50d435ec4abc29932f9288e8827adab78b2356d66d897a85d9b92a805bafd041f4d267ee1a8bc4206f1b979f8bed9fbe648dabb5580fe39232f1685808fb52f6a3ff4ac3b6e6af113e000512e8c6152d3ca05bfde852715e3d4ae4e8e07d15c87437c6ec701b9eb2e9bb9ed87025c6ec6"}, @ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "5bf064f7003d0a208f5609269261cdab60a2d34e1d1bff2b4e1e21654d5f80015a0eb4265381352f7d99595278a9a3c9f07160c17828e451f65115830db67e1487551144869dcebfd1d9ba71689f849b7437bac462b893cffdc7fdf0c29d74e2091e032536ed1db710880aadebf5ab780aeaf7dc3997c7b9136f890a0c00cd61a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "66faa9fa50f579e1d8fa36a9d2e7b821344563f7ae4686ce0755511d5d94fc1155ddd7e244b2bfe21a849529d578b877942653a0ff8578bbcdea1b100badda7d01dabaebcb5e175482dbfc468ef8548ef022e7b692ebe336805ecd3f"}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x64008010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x20}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40020}, 0x4000040) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="000000fd81020000", 0x8) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r12, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x0) 22:59:51 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_mount_image$iso9660(&(0x7f0000000b40)='iso9660\x00', 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)) syz_mount_image$hfsplus(0x0, &(0x7f0000000d80)='./file0\x00', 0x0, 0x7, &(0x7f0000001280)=[{&(0x7f0000000dc0), 0x0, 0x7}, {&(0x7f0000000e00)='^', 0x1}, {&(0x7f0000000f00), 0x0, 0x44}, {&(0x7f0000000fc0), 0x0, 0x2}, {&(0x7f00000010c0), 0x0, 0xc9}, {0x0, 0x0, 0x400}, {&(0x7f0000001240)="3515b79459710d7895bf4a7eaf2de75a8a4dc06fc4357b7a748b4d", 0x1b, 0x8}], 0x10022, 0x0) 22:59:51 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 22:59:51 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x260900, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x0) 22:59:52 executing program 5: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000005440)={0x0, 0x0, &(0x7f0000005400)={&(0x7f00000053c0)={0x14, 0x13, 0xa, 0x301}, 0x14}}, 0x0) 22:59:52 executing program 2: 22:59:52 executing program 0: 22:59:52 executing program 2: 22:59:52 executing program 1: 22:59:52 executing program 4: 22:59:52 executing program 3: 22:59:52 executing program 5: 22:59:52 executing program 0: 22:59:52 executing program 2: 22:59:53 executing program 1: 22:59:53 executing program 3: 22:59:53 executing program 4: 22:59:53 executing program 5: 22:59:53 executing program 0: 22:59:53 executing program 2: 22:59:53 executing program 1: 22:59:53 executing program 4: 22:59:53 executing program 3: 22:59:54 executing program 5: 22:59:54 executing program 2: 22:59:54 executing program 0: 22:59:54 executing program 1: 22:59:54 executing program 4: 22:59:54 executing program 3: 22:59:54 executing program 2: 22:59:54 executing program 5: 22:59:54 executing program 0: 22:59:54 executing program 1: 22:59:55 executing program 4: 22:59:55 executing program 3: 22:59:55 executing program 5: 22:59:55 executing program 2: 22:59:55 executing program 0: 22:59:55 executing program 1: 22:59:55 executing program 3: 22:59:55 executing program 4: 22:59:55 executing program 5: 22:59:56 executing program 2: 22:59:56 executing program 0: 22:59:56 executing program 3: 22:59:56 executing program 1: 22:59:56 executing program 4: 22:59:56 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 22:59:56 executing program 2: write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 22:59:56 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}) 22:59:56 executing program 0: pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x0) 22:59:56 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 22:59:56 executing program 4: clock_gettime(0xb3e9f2b49ef08633, 0x0) 22:59:57 executing program 2: clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340), &(0x7f0000000380)={0xfffffffffffffffc}, &(0x7f00000003c0), &(0x7f0000000440)={0x0, r0+10000000}, 0x0) [ 2256.875277][ T2976] usb 6-1: new high-speed USB device number 14 using dummy_hcd 22:59:57 executing program 0: clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)={0x0, r0+10000000}, 0x0) [ 2257.115265][ T2976] usb 6-1: Using ep0 maxpacket: 32 [ 2257.120760][ T3707] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2257.236553][ T2976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.247813][ T2976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2257.258012][ T2976] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2257.268114][ T2976] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 22:59:57 executing program 3: add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="eb", 0x1, 0xffffffffffffffff) [ 2257.278135][ T2976] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2257.288421][ T2976] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 22:59:57 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) 22:59:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000002280)={0x8001}) [ 2257.436177][ T3707] usb 2-1: Using ep0 maxpacket: 32 [ 2257.627470][ T2976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2257.636958][ T2976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.645502][ T2976] usb 6-1: Product: syz [ 2257.649831][ T2976] usb 6-1: Manufacturer: syz [ 2257.654635][ T2976] usb 6-1: SerialNumber: syz [ 2257.665842][ T3707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.677025][ T3707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2257.687176][ T3707] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2257.697525][ T3707] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2257.707583][ T3707] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2257.717467][ T3707] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2257.986647][ T3707] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2257.996191][ T3707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.004710][ T3707] usb 2-1: Product: syz [ 2258.009297][ T3707] usb 2-1: Manufacturer: syz [ 2258.014036][ T3707] usb 2-1: SerialNumber: syz 22:59:58 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) [ 2258.128864][ T2976] cdc_ncm 6-1:1.0: bind() failure [ 2258.143243][ T2976] cdc_ncm 6-1:1.1: bind() failure [ 2258.289756][ T2976] usb 6-1: USB disconnect, device number 14 [ 2258.485607][ T3707] cdc_ncm 2-1:1.0: bind() failure [ 2258.512419][ T3707] cdc_ncm 2-1:1.1: bind() failure [ 2258.590315][ T3707] usb 2-1: USB disconnect, device number 10 [ 2258.896184][ T2976] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2259.155529][ T2976] usb 6-1: Using ep0 maxpacket: 32 [ 2259.265630][ T3707] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2259.315360][ T2976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.326753][ T2976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.337230][ T2976] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2259.347354][ T2976] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2259.357357][ T2976] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2259.367282][ T2976] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2259.639669][ T3707] usb 2-1: Using ep0 maxpacket: 32 23:00:00 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) 23:00:00 executing program 3: clock_gettime(0x0, &(0x7f0000000400)) [ 2259.866684][ T3707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.877930][ T3707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.888397][ T3707] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2259.898563][ T3707] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2259.908676][ T3707] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2259.918636][ T3707] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2259.929426][ T2976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2259.938908][ T2976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.088601][ T2976] usb 6-1: can't set config #1, error -71 [ 2260.147152][ T2976] usb 6-1: USB disconnect, device number 15 23:00:00 executing program 1: pselect6(0x40, &(0x7f0000000340), &(0x7f0000000380), 0x0, &(0x7f0000000440), 0x0) 23:00:00 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) 23:00:00 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') 23:00:00 executing program 4: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0}) 23:00:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000006c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000700)=""/225) 23:00:00 executing program 2: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2082) [ 2260.445303][ T3707] usb 2-1: string descriptor 0 read error: -71 [ 2260.451797][ T3707] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2260.461610][ T3707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.595996][ T3707] usb 2-1: can't set config #1, error -71 [ 2260.639202][ T3707] usb 2-1: USB disconnect, device number 11 23:00:01 executing program 0: syz_open_dev$evdev(&(0x7f00000012c0)='/dev/input/event#\x00', 0x4, 0x0) 23:00:01 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 23:00:01 executing program 1: syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x0, 0x529100) 23:00:01 executing program 3: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x109800) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xc5}}}}}]}}]}}, 0x0) 23:00:01 executing program 2: 23:00:01 executing program 0: 23:00:01 executing program 5: 23:00:02 executing program 1: [ 2261.625423][ T3707] usb 5-1: new high-speed USB device number 11 using dummy_hcd 23:00:02 executing program 2: [ 2261.705394][T23831] usb 4-1: new high-speed USB device number 15 using dummy_hcd 23:00:02 executing program 0: [ 2261.875310][ T3707] usb 5-1: Using ep0 maxpacket: 32 [ 2261.955555][T23831] usb 4-1: Using ep0 maxpacket: 32 [ 2262.017362][ T3707] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 23:00:02 executing program 1: [ 2262.085577][T23831] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 23:00:02 executing program 5: 23:00:02 executing program 2: [ 2262.337036][T23831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2262.346482][T23831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.354643][T23831] usb 4-1: Product: syz [ 2262.359367][T23831] usb 4-1: Manufacturer: syz [ 2262.364119][T23831] usb 4-1: SerialNumber: syz [ 2262.396146][ T3707] usb 5-1: string descriptor 0 read error: -22 [ 2262.402665][ T3707] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2262.412410][ T3707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.541927][ T3707] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2262.563172][T23831] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2262.744211][T23831] usb 5-1: USB disconnect, device number 11 [ 2262.769253][ T3707] usb 4-1: USB disconnect, device number 15 [ 2263.549521][T22097] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2263.561702][ T3707] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2263.819148][ T3707] usb 4-1: Using ep0 maxpacket: 32 [ 2263.824676][T22097] usb 5-1: Using ep0 maxpacket: 32 [ 2263.947668][T22097] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2263.962111][ T3707] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2264.146398][ T3707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2264.155800][ T3707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.163950][ T3707] usb 4-1: Product: syz [ 2264.168750][ T3707] usb 4-1: Manufacturer: syz [ 2264.173496][ T3707] usb 4-1: SerialNumber: syz 23:00:04 executing program 4: 23:00:04 executing program 1: [ 2264.269279][T22097] usb 5-1: string descriptor 0 read error: -71 [ 2264.276024][T22097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2264.285539][T22097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.322010][ T3707] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 2264.445607][T22097] usb 5-1: can't set config #1, error -71 [ 2264.468283][T22097] usb 5-1: USB disconnect, device number 12 [ 2264.492908][ T3707] usb 4-1: USB disconnect, device number 16 23:00:04 executing program 3: 23:00:04 executing program 0: 23:00:04 executing program 2: 23:00:04 executing program 5: 23:00:05 executing program 1: 23:00:05 executing program 4: 23:00:05 executing program 5: 23:00:05 executing program 2: 23:00:05 executing program 0: 23:00:05 executing program 3: 23:00:05 executing program 4: 23:00:05 executing program 1: 23:00:05 executing program 0: 23:00:05 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:06 executing program 2: io_setup(0x3c, &(0x7f0000000000)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}]) 23:00:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5452, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:06 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 23:00:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000140)) 23:00:06 executing program 1: 23:00:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8970, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:06 executing program 2: socketpair(0x18, 0x0, 0x0, &(0x7f00000010c0)) 23:00:06 executing program 3: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:00:06 executing program 4: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000002840)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0xfe}]) 23:00:07 executing program 1: accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000051c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 23:00:07 executing program 5: io_setup(0x2, &(0x7f00000026c0)=0x0) io_pgetevents(r0, 0x1, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000002840)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 23:00:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:00:07 executing program 2: r0 = gettid() rt_sigqueueinfo(r0, 0x12, &(0x7f00000015c0)={0x0, 0x0, 0xcac8}) 23:00:07 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/nvram\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 23:00:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) 23:00:07 executing program 4: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000002840)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 23:00:07 executing program 0: io_setup(0x2, &(0x7f0000000300)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:00:07 executing program 5: io_setup(0x2, &(0x7f00000026c0)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}) 23:00:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001040)={'vcan0\x00'}) 23:00:08 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/nvram\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) 23:00:08 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:08 executing program 2: r0 = gettid() rt_sigqueueinfo(r0, 0x12, &(0x7f00000015c0)) 23:00:08 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x3c00, 0x800, 0x0, 0x300, 0x0, 0x5, 0x0, 0x2, {0x6}, {0x80000001}, {0x0, 0x0, 0x1}, {}, 0x0, 0x100, 0xfffffffd, 0x7, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x3}) 23:00:08 executing program 3: io_setup(0x0, &(0x7f00000026c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x10071, 0xffffffffffffffff, 0x0) 23:00:08 executing program 0: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}]) [ 2268.741328][ T6216] veth1_to_bridge: mtu less than device minimum [ 2268.812890][ T6220] veth1_to_bridge: mtu less than device minimum 23:00:09 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000140)={0x22}) 23:00:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8911, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:09 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f00000051c0)='/dev/dsp\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 23:00:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:09 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5421, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x3c00, 0x960, 0x0, 0x0, 0x80, 0x0, 0x8}) 23:00:09 executing program 2: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000002840)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 23:00:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89a1, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:10 executing program 3: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000011c0)=[&(0x7f0000001000)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x1}]) 23:00:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x11, 0x87, 0x0, 0x0) 23:00:10 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0xcac8}) 23:00:10 executing program 1: io_setup(0x2, &(0x7f0000000000)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000001980)=[{}], &(0x7f0000001ac0)={0x0, 0x989680}) 23:00:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 23:00:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:10 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10071, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 23:00:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8903, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mmap$fb(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x2010, r0, 0x0) 23:00:11 executing program 1: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 23:00:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000001080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r1}}, 0x30) 23:00:11 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8906, 0x0) 23:00:11 executing program 5: io_setup(0x2, &(0x7f00000026c0)=0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 23:00:11 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x2, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:11 executing program 0: 23:00:12 executing program 1: 23:00:12 executing program 5: 23:00:12 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8913, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:12 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8924, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8946, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 23:00:12 executing program 0: 23:00:12 executing program 5: 23:00:12 executing program 1: 23:00:12 executing program 4: 23:00:13 executing program 3: 23:00:13 executing program 0: 23:00:13 executing program 2: 23:00:13 executing program 5: 23:00:13 executing program 4: 23:00:13 executing program 1: 23:00:13 executing program 3: 23:00:13 executing program 0: 23:00:13 executing program 5: 23:00:13 executing program 2: 23:00:14 executing program 0: 23:00:14 executing program 4: 23:00:14 executing program 1: 23:00:14 executing program 3: 23:00:14 executing program 5: 23:00:14 executing program 2: 23:00:15 executing program 1: 23:00:15 executing program 0: 23:00:15 executing program 3: 23:00:15 executing program 5: 23:00:15 executing program 4: 23:00:15 executing program 2: 23:00:15 executing program 1: 23:00:15 executing program 3: 23:00:15 executing program 0: 23:00:15 executing program 5: 23:00:15 executing program 4: 23:00:15 executing program 2: 23:00:16 executing program 5: 23:00:16 executing program 0: 23:00:16 executing program 3: 23:00:16 executing program 1: 23:00:16 executing program 4: 23:00:16 executing program 2: 23:00:16 executing program 5: 23:00:16 executing program 0: 23:00:16 executing program 1: 23:00:17 executing program 3: 23:00:17 executing program 2: 23:00:17 executing program 4: 23:00:17 executing program 0: 23:00:17 executing program 5: 23:00:17 executing program 1: 23:00:17 executing program 3: 23:00:17 executing program 2: 23:00:17 executing program 4: 23:00:18 executing program 5: 23:00:18 executing program 3: 23:00:18 executing program 1: 23:00:18 executing program 0: 23:00:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000003140)={0x9}, 0x4) 23:00:18 executing program 2: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000040), 0x0) 23:00:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 23:00:18 executing program 3: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/251) 23:00:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b87079d946ac91e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:00:18 executing program 0: io_setup(0xd0e, &(0x7f0000000080)=0x0) io_setup(0x2, &(0x7f0000000000)) io_destroy(r0) 23:00:19 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18}, 0x18}}, 0x0) 23:00:19 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) timer_delete(0x0) read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/146, 0x92) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10000008) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) r0 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='./cgroup/syz0\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 23:00:19 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4800) 23:00:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 23:00:19 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) 23:00:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000300)=0xffffff7e) 23:00:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="03", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 23:00:19 executing program 3: r0 = semget(0x0, 0x1, 0x224) semctl$IPC_RMID(r0, 0x0, 0x0) 23:00:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 23:00:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000480)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f2"], 0x8, 0x0) 23:00:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0), 0x40) 23:00:20 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x1e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:00:20 executing program 3: io_setup(0xfffffffa, &(0x7f0000001dc0)) 23:00:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 23:00:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 23:00:21 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 23:00:21 executing program 0: socketpair(0x1, 0x0, 0xffff7ffd, 0x0) 23:00:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000044) 23:00:21 executing program 5: timer_create(0xc47ec216ae02a83e, &(0x7f0000000000)={0x0, 0x41, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) 23:00:21 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:21 executing program 4: fanotify_mark(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:00:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 23:00:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3b00000002"]}) 23:00:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 23:00:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) 23:00:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 23:00:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x4) 23:00:22 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r2 = creat(0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r1, 0x8, 0x0, 0x8000) 23:00:22 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000340)) timer_delete(0x0) 23:00:22 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/4096, &(0x7f0000000100)=0x1000) 23:00:23 executing program 4: add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 23:00:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000000)) 23:00:23 executing program 3: select(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x2710}) 23:00:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$P9_RLOPEN(r1, &(0x7f0000000100)={0x18}, 0x18) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="fc76"], 0x50) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2283.150180][ T6462] IPVS: length: 4096 != 24 [ 2283.207906][ T6465] IPVS: length: 4096 != 24 23:00:23 executing program 1: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private2}) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 23:00:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}}, 0x0) 23:00:24 executing program 0: r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0xff1a]) 23:00:24 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:24 executing program 3: io_setup(0x10004, &(0x7f0000000000)) 23:00:24 executing program 1: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 23:00:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 23:00:24 executing program 3: pipe(&(0x7f0000001480)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) 23:00:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), 0x4) 23:00:25 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="06030b0016"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0xc415, 0x0) 23:00:25 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x1) sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f0000000000)=@vsock, 0x80, 0x0}, 0x0) 23:00:25 executing program 0: fanotify_mark(0xffffffffffffffff, 0x71, 0x800103a, 0xffffffffffffffff, 0x0) 23:00:25 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) 23:00:25 executing program 3: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x40032, 0xffffffffffffffff, 0x0) pause() r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000210000004600010707000014190001000d00000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) fremovexattr(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 23:00:25 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace(0x4208, r0) 23:00:25 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x2}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {0x2, 0x1, 0x2}]}]}}, 0x0, 0x4a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:00:26 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace(0x4208, r0) 23:00:26 executing program 4: pipe2$9p(0x0, 0x1c6000) 23:00:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000), 0x1) 23:00:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000), 0x4) 23:00:26 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf={0x28, &(0x7f00000001c0)="d77ef39a5aed22cd20562c3a9667c84b30aaf6ed23566146de1f1fea801f45bc44be5d9a61aab43e"}) 23:00:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {}, 0x134}) 23:00:26 executing program 1: semget(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/235) 23:00:26 executing program 4: shmget$private(0x0, 0x3000, 0x9dcf03f3fd3e532b, &(0x7f0000ffa000/0x3000)=nil) 23:00:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000002500)={&(0x7f0000000100)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0x65, 0x3, "634c5ffa391be654a43d0b15767da1448ace8521e0cb3ccfb01d2638d0f02cf3e1e3705c31dc9ab45156f7fc31e2f20cc726b2dc4654f3815b2b9414e48ed4f90e628af11c1dfe32e951dbe04bb073977560bab5e0139e486d7d721940e1534178"}, @ETHTOOL_A_WOL_MODES={0x111c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x1001, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "ce"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0xe1, 0x3, "ed53000cd000bdd1ec2b8a3e880d0acd715ff5272201d41b06428ad0528a8393d705e105172243e2955b24be03fc68b812ab311884c68d8375c136e729405bd27c24b8d8c0afa02ff30c531e3fd0d6f0159dec6dc02901628c912966ab46ddd1601ab6ed164df766575c7ed947b9f2f378c88b9a0d89b9fe8cda29b77615d425a70ec24580eb03ae12dfcccda01e28a9c2e6760d8c3a96321fd3531fb4da5ad3c3cd892ede6d86d1761ec66ff59b638fe54add8985c904315be637f2bfe0a4ac28bb977a48717525452002ae7070b1fba6d2b3d14bcc74cc72c3d8ad4d"}, @ETHTOOL_A_WOL_SOPASS={0xc1, 0x3, "8ef6d7168826526d32f7f810b5e5c980f43053e06f174679519c5d8b027b5a7a9bb6ee83d89ce4ace7f270283456fe3072a791f5d644ab10293ada5bd04424539036268ae55f8411e94583530f23749e8632e1adf92642f68c010f8dd7d0e78d7569b0f6308a6db7f4d1a8c9adfb7df21a916b4be82d4bf64360a8dd3a84da39c09d1a8be3a791b55868763c510e946335a3774deef66b3830f11b05ac655d14307d264967983b10d662361959ec9b2b1cbe8fa333deee2db617244e05"}, @ETHTOOL_A_WOL_MODES={0xb84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "330d8048ffc9b4211208d691d3621060c80f87857c556db7235e6badc33c11ea2cfa396224df8944dd3e09a4b58a2b0fb8e8eb0528410913d4d4b97449aa66fe686ee3e13bb08ffeea5d691e72a8ac02f85a878c62"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xb11, 0x5, "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"}]}]}, 0x1ec4}}, 0x0) 23:00:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001500b59500000000002000000a000000", @ANYRES32, @ANYBLOB="080008001f536bae140002"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 23:00:27 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) 23:00:27 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace(0x4208, r0) 23:00:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000180)) 23:00:27 executing program 4: r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) 23:00:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x7fffffff, 0x4) 23:00:27 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2}}) 23:00:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000100)=""/84, 0x54) 23:00:28 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 23:00:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x9, 0x4) 23:00:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1002, 0x4) 23:00:28 executing program 5: getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000011c0)) 23:00:28 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:28 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 23:00:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 23:00:28 executing program 4: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 23:00:28 executing program 0: getrusage(0x0, &(0x7f0000002680)) 23:00:28 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:28 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', 'threaded\x00'}, 0xe) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x24}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) 23:00:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000180)=[{}], 0x0}, &(0x7f0000000300)=0x78) 23:00:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:00:29 executing program 0: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffd7) 23:00:29 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x100, 0xff, 0x0) 23:00:29 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3c) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 23:00:30 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:30 executing program 1: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xe2851868e0a42c0e) 23:00:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') 23:00:30 executing program 4: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x541080) 23:00:30 executing program 3: io_setup(0x7, &(0x7f0000000580)) 23:00:30 executing program 1: r0 = gettid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000180)=[0x5], 0x0, 0x0) 23:00:32 executing program 5: request_key(&(0x7f0000000100)='logon\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='[\x00', 0xfffffffffffffffe) 23:00:32 executing program 0: timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000100)) 23:00:32 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:32 executing program 4: r0 = getpgid(0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) 23:00:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) 23:00:32 executing program 1: r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) [ 2292.352713][ T6641] ptrace attach of "/root/syz-executor.2"[6636] was attempted by "/root/syz-executor.2"[6641] 23:00:32 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:33 executing program 4: add_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 23:00:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000010c0)) 23:00:33 executing program 0: r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmdt(r0) 23:00:33 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x0, 0x2710}) 23:00:33 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:33 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x171202, 0x0) 23:00:33 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) 23:00:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000580)='msdos\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000d00)) 23:00:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x541d, 0x0) 23:00:33 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 23:00:33 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000819) 23:00:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 23:00:34 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) 23:00:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 23:00:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000000000000) 23:00:34 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) 23:00:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x5416, 0x0) 23:00:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0xfaff, 0x0, 0x12, r0, 0x0) 23:00:34 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:34 executing program 3: 23:00:34 executing program 1: 23:00:35 executing program 4: 23:00:35 executing program 0: 23:00:35 executing program 5: 23:00:35 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:35 executing program 3: 23:00:35 executing program 1: 23:00:35 executing program 4: 23:00:35 executing program 3: 23:00:36 executing program 0: 23:00:36 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:36 executing program 5: 23:00:36 executing program 1: 23:00:36 executing program 4: 23:00:36 executing program 0: 23:00:36 executing program 3: 23:00:36 executing program 5: 23:00:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:36 executing program 1: 23:00:37 executing program 4: 23:00:37 executing program 0: 23:00:37 executing program 3: 23:00:37 executing program 5: 23:00:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:37 executing program 1: 23:00:37 executing program 0: 23:00:37 executing program 5: 23:00:37 executing program 4: 23:00:37 executing program 3: 23:00:38 executing program 0: 23:00:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:38 executing program 1: 23:00:38 executing program 3: 23:00:38 executing program 5: 23:00:38 executing program 4: 23:00:38 executing program 0: 23:00:38 executing program 1: 23:00:38 executing program 5: 23:00:38 executing program 3: 23:00:38 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:38 executing program 4: 23:00:39 executing program 0: 23:00:39 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:39 executing program 5: 23:00:39 executing program 1: 23:00:39 executing program 3: 23:00:39 executing program 4: 23:00:39 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:39 executing program 0: 23:00:39 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:39 executing program 5: 23:00:40 executing program 1: 23:00:40 executing program 4: 23:00:40 executing program 3: 23:00:40 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:40 executing program 0: 23:00:40 executing program 5: 23:00:40 executing program 1: 23:00:40 executing program 4: 23:00:40 executing program 3: [ 2300.409071][ T6786] ptrace attach of "/root/syz-executor.2"[6784] was attempted by "/root/syz-executor.2"[6786] 23:00:40 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:41 executing program 0: 23:00:41 executing program 5: 23:00:41 executing program 1: 23:00:41 executing program 4: 23:00:41 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) [ 2300.912933][ T6795] ptrace attach of "/root/syz-executor.2"[6793] was attempted by "/root/syz-executor.2"[6795] 23:00:41 executing program 3: 23:00:41 executing program 0: 23:00:41 executing program 5: 23:00:41 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) [ 2301.397672][ T6804] ptrace attach of "/root/syz-executor.2"[6802] was attempted by "/root/syz-executor.2"[6804] 23:00:41 executing program 4: 23:00:41 executing program 1: 23:00:42 executing program 3: 23:00:42 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:42 executing program 0: 23:00:42 executing program 5: 23:00:42 executing program 4: 23:00:42 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, 0x0) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:42 executing program 1: 23:00:42 executing program 3: 23:00:43 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, 0x0) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:43 executing program 4: 23:00:43 executing program 3: 23:00:43 executing program 0: 23:00:43 executing program 1: 23:00:43 executing program 5: 23:00:43 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, 0x0) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:43 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0xffffffffffffffff, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:43 executing program 4: 23:00:43 executing program 5: 23:00:43 executing program 3: 23:00:44 executing program 1: 23:00:44 executing program 0: 23:00:44 executing program 4: 23:00:44 executing program 5: 23:00:44 executing program 1: 23:00:44 executing program 3: 23:00:44 executing program 0: 23:00:44 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0xffffffffffffffff, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:45 executing program 4: 23:00:45 executing program 5: 23:00:45 executing program 0: 23:00:45 executing program 3: 23:00:45 executing program 1: 23:00:45 executing program 5: 23:00:46 executing program 4: 23:00:46 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0xffffffffffffffff, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:46 executing program 1: 23:00:46 executing program 0: 23:00:46 executing program 3: r0 = inotify_init1(0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 23:00:46 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 23:00:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$packet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 23:00:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x2f7) 23:00:46 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) tee(0xffffffffffffffff, r0, 0x0, 0x8) 23:00:47 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 23:00:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 23:00:47 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:00:47 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'syz_tun\x00'}) 23:00:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMBIC(r1, 0x540b, 0x0) 23:00:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:00:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x5452, &(0x7f0000000080)) [ 2307.573459][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:00:48 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 23:00:48 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400, 0x0) 23:00:48 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a387030a09d027cb39edbae50a67b366d5472b"}) 23:00:48 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:48 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100), 0x4) 23:00:49 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x29, 0x2, 0x0, 0xfd91) 23:00:49 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 23:00:49 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) 23:00:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 23:00:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:00:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) 23:00:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RFSYNC(r2, 0x0, 0x0) r3 = dup3(r2, r0, 0x0) write$P9_RLCREATE(r3, 0x0, 0x0) 23:00:50 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1c3a41, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 23:00:50 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r0, &(0x7f00000012c0), 0x0) 23:00:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8980, 0x0) 23:00:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20000928) 23:00:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8903, &(0x7f00000003c0)) 23:00:50 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) [ 2310.267087][ T6958] ptrace attach of "/root/syz-executor.2"[6956] was attempted by "/root/syz-executor.2"[6958] 23:00:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0xc004005) 23:00:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 23:00:51 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 23:00:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x5451, 0x0) 23:00:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 23:00:51 executing program 4: r0 = socket(0x11, 0xa, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) 23:00:51 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 23:00:51 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 23:00:51 executing program 5: 23:00:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) 23:00:52 executing program 4: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\txg0', @ANYRES16, @ANYBLOB="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"], 0x284}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000700)=0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 23:00:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockopt$SO_COOKIE(r1, 0x1, 0x2b, 0x0, &(0x7f0000000080)) 23:00:52 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x10980, 0x0) 23:00:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0x5421, 0x748000) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0x541b, 0x960000) 23:00:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 23:00:53 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x5, 0x0, 0x0) 23:00:53 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) ptrace(0x4208, r0) 23:00:53 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x10001, 0x4) 23:00:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 23:00:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd25}, 0x14}}, 0x0) [ 2313.153404][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:00:53 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(r1, &(0x7f00000001c0), 0x1c) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) dup2(r3, r0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x36, 0x0, 0x0) 23:00:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:00:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000940), 0x4) 23:00:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:00:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x6000000) 23:00:54 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) ptrace(0x4208, r0) 23:00:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 23:00:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 23:00:54 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x2, &(0x7f0000000400)) 23:00:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 23:00:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r0, r1) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 23:00:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000240), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:00:55 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x42000, 0x0) 23:00:55 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) ptrace(0x4208, r0) 23:00:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 23:00:55 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x8000) 23:00:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44084) 23:00:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 23:00:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:00:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:00:56 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0xffffffffffffffff, r0) 23:00:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 23:00:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000001e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001ec0)=0x2) dup3(r0, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname(r2, &(0x7f0000001e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001ec0)=0x80) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) 23:00:57 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) flistxattr(r0, 0x0, 0x94ec34cbe2315b19) 23:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 23:00:57 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f00000019c0)='batadv_slave_0\x00') 23:00:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:00:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:00:57 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0xffffffffffffffff, r0) 23:00:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000075c0)={0x0, 0x0, &(0x7f0000007580)={&(0x7f0000006ec0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 23:00:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002500)='/dev/vcs\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000840) 23:00:58 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002300)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:00:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:00:58 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101442, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 23:00:58 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x10124, 0x0, 0x58) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) 23:00:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xfffffc4f}}, 0x0) 23:00:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000005b00)={0x0}}, 0x0) 23:00:59 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0xffffffffffffffff, r0) 23:00:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x1f6) dup2(r0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) getpeername(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x8, 0xfffffffffffffffe, &(0x7f0000000100)) 23:00:59 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) getpeername(r0, 0x0, &(0x7f0000000100)) 23:00:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 23:00:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:00:59 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001000)) 23:00:59 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 23:00:59 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:01:00 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:01:00 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) 23:01:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) memfd_create(&(0x7f0000000280)='bdev]vmnet1\x00', 0x0) write$9p(r0, 0x0, 0x0) 23:01:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='{vmnet1posix_acl_access@mime_type\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 23:01:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getflags(r0, 0x3) [ 2320.573647][ T7168] not chained 1070000 origins [ 2320.574932][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2320.574932][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2320.574932][ T7168] Call Trace: [ 2320.574932][ T7168] dump_stack+0x21c/0x280 [ 2320.602638][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2320.602638][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2320.602638][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2320.602638][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2320.602638][ T7168] ? _copy_from_user+0x201/0x310 [ 2320.602638][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2320.602638][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.602638][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.602638][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.602638][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.602638][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2320.602638][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2320.602638][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2320.602638][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2320.674935][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] RIP: 0023:0xf7fc7549 [ 2320.674935][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2320.674935][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2320.674935][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2320.674935][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2320.674935][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2320.674935][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2320.674935][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Uninit was stored to memory at: [ 2320.674935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2320.674935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2320.674935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2320.674935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2320.674935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2320.674935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2320.674935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.674935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.674935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2320.674935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2320.674935][ T7168] do_SYSENTER_32+0x73/0x90 23:01:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101001, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 23:01:01 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) [ 2320.674935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.674935][ T7168] [ 2320.674935][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2320.674935][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2320.674935][ T7168] do_recvmmsg+0xc2/0x22e0 23:01:01 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) [ 2321.866461][ T7168] not chained 1080000 origins [ 2321.871172][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2321.874840][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.874840][ T7168] Call Trace: [ 2321.874840][ T7168] dump_stack+0x21c/0x280 [ 2321.897578][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2321.897578][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2321.897578][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2321.897578][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.897578][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2321.897578][ T7168] ? _copy_from_user+0x201/0x310 [ 2321.897578][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2321.897578][ T7168] __msan_chain_origin+0x57/0xa0 [ 2321.897578][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2321.897578][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2321.897578][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2321.955068][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.955068][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2321.955068][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2321.955068][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2321.955068][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.955068][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2321.955068][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.955068][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.955068][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2321.955068][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2321.955068][ T7168] do_SYSENTER_32+0x73/0x90 [ 2321.955068][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.955068][ T7168] RIP: 0023:0xf7fc7549 [ 2321.955068][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2322.031082][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2322.031082][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2322.031082][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2322.031082][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2322.031082][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2322.031082][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2322.031082][ T7168] Uninit was stored to memory at: [ 2322.031082][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.031082][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.105040][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.105040][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.115003][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.115003][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.115003][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.115003][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.115003][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.115003][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.115003][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.115003][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.115003][ T7168] [ 2322.115003][ T7168] Uninit was stored to memory at: [ 2322.115003][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.115003][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.115003][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.115003][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.115003][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.115003][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.115003][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.115003][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.115003][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.115003][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.115003][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.115003][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.115003][ T7168] [ 2322.115003][ T7168] Uninit was stored to memory at: [ 2322.115003][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.115003][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.115003][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.115003][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.115003][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.115003][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.115003][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.115003][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.115003][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.115003][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.115003][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.115003][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.115003][ T7168] [ 2322.115003][ T7168] Uninit was stored to memory at: [ 2322.115003][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.115003][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.115003][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.115003][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.115003][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.115003][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.115003][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.115003][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.115003][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.115003][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.115003][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.115003][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.115003][ T7168] [ 2322.115003][ T7168] Uninit was stored to memory at: [ 2322.374958][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.374958][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.374958][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.374958][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.374958][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.374958][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.374958][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.374958][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.374958][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.374958][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.374958][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.374958][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.374958][ T7168] [ 2322.374958][ T7168] Uninit was stored to memory at: [ 2322.445032][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.445032][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.445032][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.445032][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.445032][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.445032][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.445032][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.445032][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.445032][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.445032][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.445032][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.445032][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.445032][ T7168] [ 2322.445032][ T7168] Uninit was stored to memory at: [ 2322.445032][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2322.445032][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.445032][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.445032][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.445032][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.445032][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2322.445032][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.445032][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.445032][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2322.445032][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2322.445032][ T7168] do_SYSENTER_32+0x73/0x90 [ 2322.445032][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.445032][ T7168] [ 2322.445032][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2322.445032][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2322.445032][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2322.980273][ T7168] not chained 1090000 origins [ 2322.984849][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2322.984849][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.984849][ T7168] Call Trace: [ 2322.984849][ T7168] dump_stack+0x21c/0x280 [ 2322.984849][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2322.984849][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2322.984849][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2322.984849][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2322.984849][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2322.984849][ T7168] ? _copy_from_user+0x201/0x310 [ 2322.984849][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2322.984849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2322.984849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2322.984849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2322.984849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2322.984849][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2322.984849][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2323.079337][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2323.079337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.079337][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.079337][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2323.079337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.102944][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.102944][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.102944][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.102944][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.102944][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.102944][ T7168] RIP: 0023:0xf7fc7549 [ 2323.102944][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2323.155184][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2323.155184][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2323.155184][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2323.155184][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2323.185864][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2323.185864][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2323.185864][ T7168] Uninit was stored to memory at: [ 2323.185864][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.185864][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.185864][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.185864][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.185864][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.235791][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.235791][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.235791][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.235791][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.235791][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.235791][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.235791][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.235791][ T7168] [ 2323.235791][ T7168] Uninit was stored to memory at: [ 2323.235791][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.235791][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.235791][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.235791][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.235791][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.235791][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.235791][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.235791][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.235791][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.325305][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.325305][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.325305][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.325305][ T7168] [ 2323.325305][ T7168] Uninit was stored to memory at: [ 2323.325305][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.325305][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.361115][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.361115][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.361115][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.361115][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.361115][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.361115][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.361115][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.361115][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.361115][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.361115][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.361115][ T7168] [ 2323.361115][ T7168] Uninit was stored to memory at: [ 2323.361115][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.361115][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.361115][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.361115][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.442781][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.442781][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.442781][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.442781][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.442781][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.442781][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.442781][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.442781][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.442781][ T7168] [ 2323.442781][ T7168] Uninit was stored to memory at: [ 2323.442781][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.442781][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.442781][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.442781][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.442781][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.442781][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.442781][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.525130][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.525130][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.525130][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.525130][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.525130][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.525130][ T7168] [ 2323.525130][ T7168] Uninit was stored to memory at: [ 2323.525130][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.525130][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.525130][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.525130][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.525130][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.525130][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.525130][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.525130][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.525130][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.525130][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.525130][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.525130][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.525130][ T7168] [ 2323.525130][ T7168] Uninit was stored to memory at: [ 2323.525130][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2323.525130][ T7168] __msan_chain_origin+0x57/0xa0 [ 2323.525130][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2323.525130][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2323.525130][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2323.525130][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2323.525130][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.525130][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.525130][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2323.525130][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2323.525130][ T7168] do_SYSENTER_32+0x73/0x90 [ 2323.525130][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.525130][ T7168] [ 2323.525130][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2323.525130][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2323.525130][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2324.419518][ T7168] not chained 1100000 origins [ 2324.424223][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2324.424885][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.438495][ T7168] Call Trace: [ 2324.438495][ T7168] dump_stack+0x21c/0x280 [ 2324.438495][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2324.438495][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2324.438495][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.438495][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2324.438495][ T7168] ? _copy_from_user+0x201/0x310 [ 2324.438495][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2324.438495][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.438495][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.438495][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.495016][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.495016][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.495016][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2324.495016][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2324.495016][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.495016][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2324.495016][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2324.495016][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.495016][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.495016][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.495016][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.495016][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.495016][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.565593][ T7168] RIP: 0023:0xf7fc7549 [ 2324.565593][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2324.565593][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2324.565593][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2324.565593][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2324.565593][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2324.565593][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2324.565593][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2324.565593][ T7168] Uninit was stored to memory at: [ 2324.565593][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.565593][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.565593][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.565593][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.565593][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.565593][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.565593][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.565593][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.565593][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.565593][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.565593][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.565593][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.565593][ T7168] [ 2324.565593][ T7168] Uninit was stored to memory at: [ 2324.565593][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.565593][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.565593][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.565593][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.565593][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.565593][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.565593][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.565593][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.565593][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.565593][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.565593][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.770309][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.770309][ T7168] [ 2324.770309][ T7168] Uninit was stored to memory at: [ 2324.770309][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.770309][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.770309][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.770309][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.770309][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.770309][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.770309][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.770309][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.770309][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.770309][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.835269][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.838548][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.838548][ T7168] [ 2324.838548][ T7168] Uninit was stored to memory at: [ 2324.838548][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.838548][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.838548][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.838548][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.838548][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.838548][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.838548][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.838548][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.838548][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.838548][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.838548][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.838548][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.838548][ T7168] [ 2324.838548][ T7168] Uninit was stored to memory at: [ 2324.838548][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.838548][ T7168] __msan_chain_origin+0x57/0xa0 [ 2324.838548][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2324.838548][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2324.838548][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2324.838548][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2324.838548][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.838548][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.838548][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2324.838548][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2324.838548][ T7168] do_SYSENTER_32+0x73/0x90 [ 2324.838548][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.838548][ T7168] [ 2324.838548][ T7168] Uninit was stored to memory at: [ 2324.838548][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2324.838548][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.005113][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.005113][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.005113][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.005113][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.005113][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.005113][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.005113][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.005113][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.005113][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.005113][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.005113][ T7168] [ 2325.005113][ T7168] Uninit was stored to memory at: [ 2325.005113][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.005113][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.005113][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.005113][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.005113][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.005113][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.005113][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.005113][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.005113][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.005113][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.005113][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.005113][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.005113][ T7168] [ 2325.005113][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2325.005113][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2325.005113][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2325.355588][ T7168] not chained 1110000 origins [ 2325.360286][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2325.364857][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2325.364857][ T7168] Call Trace: [ 2325.364857][ T7168] dump_stack+0x21c/0x280 [ 2325.364857][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2325.364857][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2325.364857][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2325.364857][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.364857][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2325.364857][ T7168] ? _copy_from_user+0x201/0x310 [ 2325.364857][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2325.422357][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.422357][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.422357][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.422357][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.422357][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.422357][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2325.422357][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2325.422357][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.422357][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2325.422357][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2325.422357][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.422357][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.422357][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.422357][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.422357][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.499840][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.499840][ T7168] RIP: 0023:0xf7fc7549 [ 2325.499840][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2325.514256][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2325.514256][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2325.514256][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2325.514256][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2325.514256][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2325.514256][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Uninit was stored to memory at: [ 2325.514256][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2325.514256][ T7168] __msan_chain_origin+0x57/0xa0 [ 2325.514256][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2325.514256][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2325.514256][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2325.514256][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2325.514256][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.514256][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.514256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2325.514256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2325.514256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2325.514256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.514256][ T7168] [ 2325.514256][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2325.514256][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2325.514256][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2326.308564][ T7168] not chained 1120000 origins [ 2326.313267][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2326.314846][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.324928][ T7168] Call Trace: [ 2326.324928][ T7168] dump_stack+0x21c/0x280 [ 2326.324928][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2326.324928][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2326.324928][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.355120][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2326.355120][ T7168] ? _copy_from_user+0x201/0x310 [ 2326.355120][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2326.355120][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.355120][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.355120][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.355120][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.355120][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.355120][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2326.355120][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2326.403248][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.403248][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2326.403248][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2326.403248][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.403248][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.435494][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.435494][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.435494][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.435494][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.435494][ T7168] RIP: 0023:0xf7fc7549 [ 2326.435494][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2326.435494][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2326.435494][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2326.435494][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2326.435494][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2326.435494][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2326.435494][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2326.525038][ T7168] Uninit was stored to memory at: [ 2326.525038][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.525038][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.525038][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.525038][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.525038][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.525038][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.525038][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.525038][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.525038][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.525038][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.525038][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.525038][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.594994][ T7168] [ 2326.594994][ T7168] Uninit was stored to memory at: [ 2326.594994][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.608360][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.608360][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.615417][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.615417][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.625771][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.625771][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.635173][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.645035][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.650459][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.654997][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.654997][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.665213][ T7168] [ 2326.665213][ T7168] Uninit was stored to memory at: [ 2326.665213][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.674978][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.674978][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.685125][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.685125][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.695141][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.695141][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.705107][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.715003][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.715003][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.725212][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.725212][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.734984][ T7168] [ 2326.734984][ T7168] Uninit was stored to memory at: [ 2326.734984][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.745497][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.745497][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.755057][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.760465][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.765146][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.765146][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.775146][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.785176][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.785176][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.794995][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.794995][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.805107][ T7168] [ 2326.805107][ T7168] Uninit was stored to memory at: [ 2326.813130][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.815129][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.824993][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.825124][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.834972][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.834972][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.834972][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.845205][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.854987][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.854987][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.865086][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.870548][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.875403][ T7168] [ 2326.875403][ T7168] Uninit was stored to memory at: [ 2326.875403][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.885131][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.894991][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.894991][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.905314][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.905314][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.905314][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.915745][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.925143][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.925143][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2326.935180][ T7168] do_SYSENTER_32+0x73/0x90 [ 2326.935180][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.945139][ T7168] [ 2326.945139][ T7168] Uninit was stored to memory at: [ 2326.954979][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2326.954979][ T7168] __msan_chain_origin+0x57/0xa0 [ 2326.965218][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2326.965218][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2326.975034][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2326.975034][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2326.980376][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.985213][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.995119][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2326.995119][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.005399][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.005399][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.014998][ T7168] [ 2327.017919][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2327.025187][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2327.025187][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2327.270599][ T7168] not chained 1130000 origins [ 2327.274850][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2327.274850][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.274850][ T7168] Call Trace: [ 2327.274850][ T7168] dump_stack+0x21c/0x280 [ 2327.274850][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2327.274850][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2327.274850][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2327.274850][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.274850][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2327.274850][ T7168] ? _copy_from_user+0x201/0x310 [ 2327.274850][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2327.274850][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.274850][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.274850][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.274850][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.274850][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.274850][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2327.274850][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2327.274850][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.274850][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2327.274850][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2327.274850][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.274850][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.274850][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.274850][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.274850][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.274850][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.274850][ T7168] RIP: 0023:0xf7fc7549 [ 2327.274850][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2327.274850][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2327.274850][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2327.274850][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2327.274850][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2327.274850][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2327.274850][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.274850][ T7168] Uninit was stored to memory at: [ 2327.274850][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.274850][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.274850][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.274850][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.274850][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.274850][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.274850][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.274850][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.274850][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.274850][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.274850][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.274850][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.274850][ T7168] [ 2327.274850][ T7168] Uninit was stored to memory at: [ 2327.274850][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.274850][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.274850][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.274850][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.274850][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.274850][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.274850][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.274850][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.274850][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.274850][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.274850][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.274850][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.274850][ T7168] [ 2327.635066][ T7168] Uninit was stored to memory at: [ 2327.635066][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.635066][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.635066][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.635066][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.635066][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.635066][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.635066][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.635066][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.635066][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.635066][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.635066][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.635066][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.635066][ T7168] [ 2327.635066][ T7168] Uninit was stored to memory at: [ 2327.635066][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.635066][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.635066][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.635066][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.635066][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.635066][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.635066][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.635066][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.635066][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.635066][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.635066][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.635066][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.635066][ T7168] [ 2327.635066][ T7168] Uninit was stored to memory at: [ 2327.635066][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.635066][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.635066][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.635066][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.635066][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.635066][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.635066][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.635066][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.635066][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.635066][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.635066][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.635066][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.635066][ T7168] [ 2327.635066][ T7168] Uninit was stored to memory at: [ 2327.635066][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.635066][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.635066][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.635066][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.635066][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.635066][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.635066][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.635066][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.889531][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.895027][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.895027][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.905205][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.905205][ T7168] [ 2327.915518][ T7168] Uninit was stored to memory at: [ 2327.915518][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2327.925369][ T7168] __msan_chain_origin+0x57/0xa0 [ 2327.925369][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2327.935007][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2327.939516][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2327.945205][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2327.945205][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.955174][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.955174][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2327.965037][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2327.970495][ T7168] do_SYSENTER_32+0x73/0x90 [ 2327.975160][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.975160][ T7168] [ 2327.985108][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2327.985108][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2327.994967][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2328.251540][ T7168] not chained 1140000 origins [ 2328.254841][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2328.254841][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2328.254841][ T7168] Call Trace: [ 2328.254841][ T7168] dump_stack+0x21c/0x280 [ 2328.254841][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2328.254841][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2328.254841][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2328.254841][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.254841][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2328.254841][ T7168] ? _copy_from_user+0x201/0x310 [ 2328.254841][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2328.254841][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.254841][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.254841][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.254841][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.254841][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.254841][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2328.348795][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2328.355503][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.355503][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2328.355503][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2328.355503][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.355503][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.355503][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.355503][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.355503][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.355503][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.355503][ T7168] RIP: 0023:0xf7fc7549 [ 2328.355503][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2328.355503][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2328.355503][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2328.437645][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.444976][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.455679][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2328.464950][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.475119][ T7168] Uninit was stored to memory at: [ 2328.475119][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.485116][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.485116][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.495113][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.495113][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.504948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.504948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.515103][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.520557][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.520557][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.520557][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.536213][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.541720][ T7168] [ 2328.544942][ T7168] Uninit was stored to memory at: [ 2328.544942][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.555145][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.555145][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.565337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.565337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.575220][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.575220][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.584940][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.584940][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.595125][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.605099][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.605099][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.615121][ T7168] [ 2328.615121][ T7168] Uninit was stored to memory at: [ 2328.624993][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.630382][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.635134][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.635134][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.644951][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.644951][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.656338][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.656338][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.665158][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.665158][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.675131][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.675131][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.685112][ T7168] [ 2328.685112][ T7168] Uninit was stored to memory at: [ 2328.695441][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.695441][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.704955][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.704955][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.715203][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.715203][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.724933][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.724933][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.735034][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.745138][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.745138][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.745138][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.758721][ T7168] [ 2328.758721][ T7168] Uninit was stored to memory at: [ 2328.764939][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.764939][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.775246][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.775246][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.795120][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.795120][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.805130][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.815178][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.815178][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.815178][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.825374][ T7168] [ 2328.825374][ T7168] Uninit was stored to memory at: [ 2328.835402][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.835402][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.845009][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.850334][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.855141][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.861178][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.865121][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.865121][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.875210][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.884979][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.884979][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.884979][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.895214][ T7168] [ 2328.895214][ T7168] Uninit was stored to memory at: [ 2328.904959][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2328.904959][ T7168] __msan_chain_origin+0x57/0xa0 [ 2328.915197][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2328.915197][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2328.925147][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2328.925147][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2328.935136][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.935136][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.944956][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2328.955058][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2328.960716][ T7168] do_SYSENTER_32+0x73/0x90 [ 2328.964936][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.964936][ T7168] [ 2328.964936][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2328.975152][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2328.975152][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2329.282994][ T7168] not chained 1150000 origins [ 2329.284843][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2329.284843][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2329.284843][ T7168] Call Trace: [ 2329.284843][ T7168] dump_stack+0x21c/0x280 [ 2329.284843][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2329.284843][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2329.284843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2329.284843][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2329.335450][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2329.335450][ T7168] ? _copy_from_user+0x201/0x310 [ 2329.335450][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2329.335450][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.335450][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.335450][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.335450][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.335450][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2329.335450][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2329.335450][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2329.335450][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.335450][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2329.335450][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2329.335450][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.335450][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.335450][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.335450][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.335450][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.335450][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.335450][ T7168] RIP: 0023:0xf7fc7549 [ 2329.335450][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2329.335450][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2329.335450][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2329.475145][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2329.476275][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2329.484933][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2329.495139][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2329.505013][ T7168] Uninit was stored to memory at: [ 2329.510370][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.515115][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.515115][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.524947][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.524947][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.535218][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.541547][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.544946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.544946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.555357][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.555357][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.564947][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.575119][ T7168] [ 2329.575119][ T7168] Uninit was stored to memory at: [ 2329.577972][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.584959][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.584959][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.595128][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.595128][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.605347][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.605347][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.615076][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.620507][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.624923][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.624923][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.636696][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.645023][ T7168] [ 2329.645023][ T7168] Uninit was stored to memory at: [ 2329.645023][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.655171][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.655171][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.665397][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.665397][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.675164][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.680316][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.684943][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.684943][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.695277][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.695277][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.704969][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.715214][ T7168] [ 2329.715214][ T7168] Uninit was stored to memory at: [ 2329.715214][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.725051][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.730468][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.735527][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.735527][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.744988][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.744988][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.755275][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.764973][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.764973][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.775058][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.775383][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.785120][ T7168] [ 2329.785120][ T7168] Uninit was stored to memory at: [ 2329.785120][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.797363][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.797363][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.804971][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.804971][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.815243][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.815243][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.824939][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.835038][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.840465][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.845116][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.845116][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.855123][ T7168] [ 2329.855123][ T7168] Uninit was stored to memory at: [ 2329.855123][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.865348][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.865348][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.877989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.877989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.885638][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.885638][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.895143][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.905212][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.905212][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.915146][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.915146][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.925145][ T7168] [ 2329.925145][ T7168] Uninit was stored to memory at: [ 2329.925145][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2329.935247][ T7168] __msan_chain_origin+0x57/0xa0 [ 2329.935247][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2329.945013][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2329.950460][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2329.955274][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2329.955274][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.965116][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.975129][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2329.975129][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2329.984969][ T7168] do_SYSENTER_32+0x73/0x90 [ 2329.987542][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.995719][ T7168] [ 2329.995719][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2330.004967][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2330.004967][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2330.226583][ T7168] not chained 1160000 origins [ 2330.231295][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2330.234838][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.234838][ T7168] Call Trace: [ 2330.234838][ T7168] dump_stack+0x21c/0x280 [ 2330.234838][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2330.234838][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2330.234838][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2330.234838][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.234838][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2330.234838][ T7168] ? _copy_from_user+0x201/0x310 [ 2330.234838][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2330.294396][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.294396][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.294396][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.294396][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.294396][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.294396][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2330.294396][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2330.294396][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.294396][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2330.294396][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2330.294396][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.294396][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.294396][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.294396][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.294396][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.294396][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.294396][ T7168] RIP: 0023:0xf7fc7549 [ 2330.294396][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2330.294396][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2330.294396][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2330.294396][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2330.294396][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2330.294396][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2330.294396][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2330.294396][ T7168] Uninit was stored to memory at: [ 2330.294396][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.294396][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Uninit was stored to memory at: [ 2330.466469][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2330.466469][ T7168] __msan_chain_origin+0x57/0xa0 [ 2330.466469][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2330.466469][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2330.466469][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2330.466469][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2330.466469][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.466469][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.466469][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2330.466469][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2330.466469][ T7168] do_SYSENTER_32+0x73/0x90 [ 2330.466469][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.466469][ T7168] [ 2330.466469][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2330.466469][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2330.466469][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2331.117122][ T7168] not chained 1170000 origins [ 2331.121826][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2331.124845][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.124845][ T7168] Call Trace: [ 2331.124845][ T7168] dump_stack+0x21c/0x280 [ 2331.124845][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2331.151696][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2331.151696][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.151696][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2331.151696][ T7168] ? _copy_from_user+0x201/0x310 [ 2331.151696][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2331.151696][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.151696][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.151696][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.151696][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.151696][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.151696][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2331.151696][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2331.151696][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.151696][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.151696][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2331.151696][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.151696][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.151696][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.151696][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.151696][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.151696][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.151696][ T7168] RIP: 0023:0xf7fc7549 [ 2331.151696][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2331.151696][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2331.151696][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2331.151696][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2331.151696][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2331.151696][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2331.151696][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2331.151696][ T7168] Uninit was stored to memory at: [ 2331.151696][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.151696][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.151696][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.151696][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.151696][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.151696][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.151696][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.151696][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.151696][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.151696][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.151696][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.394970][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.394970][ T7168] [ 2331.394970][ T7168] Uninit was stored to memory at: [ 2331.394970][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.394970][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.394970][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.394970][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.394970][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.394970][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.394970][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.394970][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.394970][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.455094][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.455094][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.455094][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.455094][ T7168] [ 2331.455094][ T7168] Uninit was stored to memory at: [ 2331.455094][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.455094][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.455094][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.455094][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.455094][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.455094][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.455094][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.455094][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.455094][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.525005][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.525005][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.525005][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.545181][ T7168] [ 2331.545181][ T7168] Uninit was stored to memory at: [ 2331.545181][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.558172][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.558172][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.565348][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.565348][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.577992][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.577992][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.585087][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.595075][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.599752][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.605030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.608689][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.615044][ T7168] [ 2331.617863][ T7168] Uninit was stored to memory at: [ 2331.617863][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.625898][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.625898][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.638153][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.638153][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.645093][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.645093][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.657891][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.665202][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.665202][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.675057][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.678254][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.685494][ T7168] [ 2331.685494][ T7168] Uninit was stored to memory at: [ 2331.685494][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.697991][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.697991][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.707016][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.707016][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.715249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.722281][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.728324][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.735117][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.737945][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.745187][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.745187][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.755135][ T7168] [ 2331.758039][ T7168] Uninit was stored to memory at: [ 2331.758039][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2331.765154][ T7168] __msan_chain_origin+0x57/0xa0 [ 2331.765154][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2331.777928][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2331.777928][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2331.785526][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2331.785526][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.798177][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.805193][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2331.805193][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2331.815136][ T7168] do_SYSENTER_32+0x73/0x90 [ 2331.820115][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.825051][ T7168] [ 2331.828759][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2331.835049][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2331.837959][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2332.045126][ T7168] not chained 1180000 origins [ 2332.049830][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2332.054843][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.054843][ T7168] Call Trace: [ 2332.054843][ T7168] dump_stack+0x21c/0x280 [ 2332.054843][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2332.054843][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2332.054843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.054843][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.054843][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2332.054843][ T7168] ? _copy_from_user+0x201/0x310 [ 2332.054843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.054843][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.054843][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.054843][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.054843][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.054843][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.054843][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2332.054843][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2332.054843][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.054843][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.054843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.054843][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.054843][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.054843][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.054843][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.054843][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.054843][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.195389][ T7168] RIP: 0023:0xf7fc7549 [ 2332.201745][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2332.215030][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2332.228028][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2332.235164][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2332.245042][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.248002][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2332.256938][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.265087][ T7168] Uninit was stored to memory at: [ 2332.271560][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.277217][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.285056][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.288213][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.295145][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.295145][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.305067][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.308041][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.315005][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.315005][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.325052][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.328042][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.335392][ T7168] [ 2332.335392][ T7168] Uninit was stored to memory at: [ 2332.345048][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.348003][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.355479][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.355479][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.365093][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.369893][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.375042][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.378673][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.385064][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.388031][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.395151][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.395151][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.407978][ T7168] [ 2332.407978][ T7168] Uninit was stored to memory at: [ 2332.414983][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.414983][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.425078][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.428050][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.434990][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.434990][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.445197][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.448548][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.455174][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.455174][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.468237][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.468237][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.476932][ T7168] [ 2332.476932][ T7168] Uninit was stored to memory at: [ 2332.485092][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.491554][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.494991][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.494991][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.505052][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.508162][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.515228][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.515228][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.528070][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.528070][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.534992][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.541565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.548737][ T7168] [ 2332.548737][ T7168] Uninit was stored to memory at: [ 2332.554988][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.554988][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.565034][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.567983][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.575146][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.575146][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.585064][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.589840][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.595023][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.598842][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.608029][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.608029][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.614996][ T7168] [ 2332.614996][ T7168] Uninit was stored to memory at: [ 2332.625040][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.627955][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.635163][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.635163][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.645043][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.649986][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.655133][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.655133][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.668036][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.668036][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.674978][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.674978][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.687944][ T7168] [ 2332.687944][ T7168] Uninit was stored to memory at: [ 2332.696948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2332.696948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.705117][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.711623][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.715042][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.715042][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.725091][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.728534][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.735023][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.735023][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.748007][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.752308][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.755145][ T7168] [ 2332.755145][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2332.767936][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2332.767936][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2332.992439][ T7168] not chained 1190000 origins [ 2332.994896][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2332.994896][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.994896][ T7168] Call Trace: [ 2332.994896][ T7168] dump_stack+0x21c/0x280 [ 2332.994896][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2332.994896][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2332.994896][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.994896][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.994896][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2332.994896][ T7168] ? _copy_from_user+0x201/0x310 [ 2332.994896][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.994896][ T7168] __msan_chain_origin+0x57/0xa0 [ 2332.994896][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2332.994896][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2332.994896][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2332.994896][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.994896][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2332.994896][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2332.994896][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2332.994896][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.994896][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2332.994896][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.994896][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.994896][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2332.994896][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2332.994896][ T7168] do_SYSENTER_32+0x73/0x90 [ 2332.994896][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.994896][ T7168] RIP: 0023:0xf7fc7549 [ 2332.994896][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2332.994896][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2332.994896][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2332.994896][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2332.994896][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.994896][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2332.994896][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.994896][ T7168] Uninit was stored to memory at: [ 2332.994896][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Uninit was stored to memory at: [ 2333.226573][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2333.226573][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.226573][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.226573][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.226573][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.226573][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.226573][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.226573][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.226573][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.226573][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.226573][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.226573][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.226573][ T7168] [ 2333.226573][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2333.226573][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2333.226573][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2333.943591][ T7168] not chained 1200000 origins [ 2333.944860][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2333.944860][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.944860][ T7168] Call Trace: [ 2333.944860][ T7168] dump_stack+0x21c/0x280 [ 2333.944860][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2333.944860][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2333.980783][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2333.980783][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.980783][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2333.980783][ T7168] ? _copy_from_user+0x201/0x310 [ 2333.980783][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2333.980783][ T7168] __msan_chain_origin+0x57/0xa0 [ 2333.980783][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2333.980783][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2333.980783][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2333.980783][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.980783][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2333.980783][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2333.980783][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2333.980783][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2333.980783][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2333.980783][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.980783][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.980783][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2333.980783][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2333.980783][ T7168] do_SYSENTER_32+0x73/0x90 [ 2333.980783][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.980783][ T7168] RIP: 0023:0xf7fc7549 [ 2333.980783][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.119014][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2334.124927][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2334.124927][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.124927][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.152059][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2334.152059][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Uninit was stored to memory at: [ 2334.152059][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.152059][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.152059][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.152059][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.152059][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.152059][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.152059][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.152059][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.152059][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.152059][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.152059][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.152059][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.152059][ T7168] [ 2334.152059][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2334.152059][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2334.152059][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2334.852635][ T7168] not chained 1210000 origins [ 2334.854863][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2334.865249][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.865249][ T7168] Call Trace: [ 2334.876251][ T7168] dump_stack+0x21c/0x280 [ 2334.876251][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2334.876251][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2334.876251][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2334.876251][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.876251][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2334.876251][ T7168] ? _copy_from_user+0x201/0x310 [ 2334.876251][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2334.876251][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.876251][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.876251][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.876251][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.876251][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.876251][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2334.876251][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2334.876251][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.876251][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.876251][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2334.876251][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.876251][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.876251][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.876251][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2334.876251][ T7168] do_SYSENTER_32+0x73/0x90 [ 2334.876251][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.876251][ T7168] RIP: 0023:0xf7fc7549 [ 2334.876251][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.876251][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2334.876251][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2334.876251][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.876251][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.876251][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2334.876251][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.876251][ T7168] Uninit was stored to memory at: [ 2334.876251][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2334.876251][ T7168] __msan_chain_origin+0x57/0xa0 [ 2334.876251][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2334.876251][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2334.876251][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2334.876251][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2334.876251][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.876251][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.876251][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2334.876251][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.135147][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.135147][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.145479][ T7168] [ 2335.145479][ T7168] Uninit was stored to memory at: [ 2335.145479][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.145479][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.145479][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.145479][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.145479][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.145479][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.145479][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.145479][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.145479][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.145479][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.145479][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.209951][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.209951][ T7168] [ 2335.209951][ T7168] Uninit was stored to memory at: [ 2335.209951][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.209951][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.209951][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.209951][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.209951][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.209951][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.209951][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.209951][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.209951][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.209951][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.209951][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.209951][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.209951][ T7168] [ 2335.209951][ T7168] Uninit was stored to memory at: [ 2335.209951][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.209951][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.209951][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.209951][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.312335][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.312335][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.312335][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.312335][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.312335][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.312335][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.312335][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.346267][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.346267][ T7168] [ 2335.346267][ T7168] Uninit was stored to memory at: [ 2335.346267][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.346267][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.346267][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.346267][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.346267][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.346267][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.346267][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.346267][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.346267][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.346267][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.414761][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.414761][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.414761][ T7168] [ 2335.414761][ T7168] Uninit was stored to memory at: [ 2335.414761][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.414761][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.414761][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.414761][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.414761][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.414761][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.414761][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.414761][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.414761][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.414761][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.414761][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.414761][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.414761][ T7168] [ 2335.414761][ T7168] Uninit was stored to memory at: [ 2335.414761][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.414761][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.414761][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.517158][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.517158][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.517158][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.517158][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.517158][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.541577][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.541577][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.541577][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.541577][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.541577][ T7168] [ 2335.541577][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2335.541577][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2335.541577][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2335.789220][ T7168] not chained 1220000 origins [ 2335.793929][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2335.794869][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2335.794869][ T7168] Call Trace: [ 2335.794869][ T7168] dump_stack+0x21c/0x280 [ 2335.794869][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2335.824005][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2335.824005][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2335.824005][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2335.824005][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2335.824005][ T7168] ? _copy_from_user+0x201/0x310 [ 2335.824005][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2335.824005][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.824005][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.824005][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.824005][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.824005][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2335.824005][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2335.824005][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2335.824005][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.824005][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2335.824005][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2335.824005][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.824005][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.824005][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.824005][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.824005][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.824005][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.824005][ T7168] RIP: 0023:0xf7fc7549 [ 2335.824005][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2335.966081][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2335.966081][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2335.974948][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2335.974948][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2335.974948][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2335.974948][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2335.974948][ T7168] Uninit was stored to memory at: [ 2335.974948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.974948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.974948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.974948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.974948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.974948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.974948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.974948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.974948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.974948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.974948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.974948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.974948][ T7168] [ 2335.974948][ T7168] Uninit was stored to memory at: [ 2335.974948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.974948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.974948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.974948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.974948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.974948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.974948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.974948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.974948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.974948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.974948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.974948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.974948][ T7168] [ 2335.974948][ T7168] Uninit was stored to memory at: [ 2335.974948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.974948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.974948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.974948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.974948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.974948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.974948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.974948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.974948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.974948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.974948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.974948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.974948][ T7168] [ 2335.974948][ T7168] Uninit was stored to memory at: [ 2335.974948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.974948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.974948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.974948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.974948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.974948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.974948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.974948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.974948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2335.974948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2335.974948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2335.974948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.974948][ T7168] [ 2335.974948][ T7168] Uninit was stored to memory at: [ 2335.974948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2335.974948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2335.974948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2335.974948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2335.974948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2335.974948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2335.974948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.974948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.974948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.346425][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.346425][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.346425][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.346425][ T7168] [ 2336.346425][ T7168] Uninit was stored to memory at: [ 2336.346425][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.346425][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.346425][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.346425][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.346425][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.346425][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.346425][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.346425][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.346425][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.346425][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.346425][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.346425][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.346425][ T7168] [ 2336.346425][ T7168] Uninit was stored to memory at: [ 2336.346425][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.346425][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.346425][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.346425][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.346425][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.346425][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.346425][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.346425][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.346425][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.346425][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.346425][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.346425][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.346425][ T7168] [ 2336.346425][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2336.346425][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2336.346425][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2336.692242][ T7168] not chained 1230000 origins [ 2336.694861][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2336.694861][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2336.694861][ T7168] Call Trace: [ 2336.694861][ T7168] dump_stack+0x21c/0x280 [ 2336.694861][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2336.694861][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2336.694861][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2336.694861][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.694861][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2336.745588][ T7168] ? _copy_from_user+0x201/0x310 [ 2336.745588][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2336.745588][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.745588][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.745588][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.745588][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.745588][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.745588][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2336.745588][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2336.745588][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.745588][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2336.745588][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2336.745588][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.745588][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.745588][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.745588][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.745588][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.745588][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.745588][ T7168] RIP: 0023:0xf7fc7549 [ 2336.745588][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2336.745588][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2336.745588][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2336.745588][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2336.745588][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2336.745588][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2336.745588][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2336.745588][ T7168] Uninit was stored to memory at: [ 2336.745588][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.925152][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.925152][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.925152][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.925152][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.925152][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.925152][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.925152][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.925152][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.925152][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.925152][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.925152][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.925152][ T7168] [ 2336.925152][ T7168] Uninit was stored to memory at: [ 2336.925152][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.925152][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.925152][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.925152][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.925152][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.925152][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.925152][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.925152][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.925152][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.925152][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.925152][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.925152][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.925152][ T7168] [ 2336.925152][ T7168] Uninit was stored to memory at: [ 2336.925152][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.925152][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.925152][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.925152][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2336.925152][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2336.925152][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2336.925152][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.925152][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.925152][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2336.925152][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2336.925152][ T7168] do_SYSENTER_32+0x73/0x90 [ 2336.925152][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.925152][ T7168] [ 2336.925152][ T7168] Uninit was stored to memory at: [ 2336.925152][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2336.925152][ T7168] __msan_chain_origin+0x57/0xa0 [ 2336.925152][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2336.925152][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.152158][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.152158][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.152158][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.152158][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.152158][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.152158][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.152158][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.152158][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.152158][ T7168] [ 2337.152158][ T7168] Uninit was stored to memory at: [ 2337.152158][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.152158][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.152158][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.152158][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.152158][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.152158][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.152158][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.152158][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.152158][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.152158][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.152158][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.152158][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.152158][ T7168] [ 2337.152158][ T7168] Uninit was stored to memory at: [ 2337.152158][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.152158][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.152158][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.152158][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.152158][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.152158][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.152158][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.152158][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.152158][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.152158][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.152158][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.152158][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.152158][ T7168] [ 2337.152158][ T7168] Uninit was stored to memory at: [ 2337.152158][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.152158][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.152158][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.152158][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.152158][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.152158][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.152158][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.152158][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.152158][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.152158][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.152158][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.152158][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.152158][ T7168] [ 2337.152158][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2337.152158][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2337.152158][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2337.601865][ T7168] not chained 1240000 origins [ 2337.604899][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2337.604899][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2337.604899][ T7168] Call Trace: [ 2337.604899][ T7168] dump_stack+0x21c/0x280 [ 2337.604899][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2337.604899][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2337.604899][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2337.604899][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.604899][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2337.604899][ T7168] ? _copy_from_user+0x201/0x310 [ 2337.604899][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2337.604899][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.604899][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.604899][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.604899][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.604899][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.604899][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2337.604899][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2337.604899][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.604899][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2337.604899][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2337.604899][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.604899][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.604899][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.604899][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.604899][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.604899][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.604899][ T7168] RIP: 0023:0xf7fc7549 [ 2337.604899][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2337.604899][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2337.604899][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2337.604899][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2337.604899][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2337.604899][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2337.604899][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2337.604899][ T7168] Uninit was stored to memory at: [ 2337.828021][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.828021][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.828021][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.828021][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.828021][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.828021][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.828021][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.828021][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Uninit was stored to memory at: [ 2337.872431][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2337.872431][ T7168] __msan_chain_origin+0x57/0xa0 [ 2337.872431][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2337.872431][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2337.872431][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2337.872431][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2337.872431][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.872431][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.872431][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2337.872431][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2337.872431][ T7168] do_SYSENTER_32+0x73/0x90 [ 2337.872431][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.872431][ T7168] [ 2337.872431][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2337.872431][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2337.872431][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2338.488541][ T7168] not chained 1250000 origins [ 2338.493241][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2338.494894][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2338.494894][ T7168] Call Trace: [ 2338.494894][ T7168] dump_stack+0x21c/0x280 [ 2338.494894][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2338.494894][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2338.494894][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2338.494894][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.494894][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2338.494894][ T7168] ? _copy_from_user+0x201/0x310 [ 2338.494894][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2338.494894][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.494894][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.494894][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.494894][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.494894][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.494894][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2338.494894][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2338.494894][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.494894][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2338.494894][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2338.494894][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.494894][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.494894][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.494894][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.494894][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.494894][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.494894][ T7168] RIP: 0023:0xf7fc7549 [ 2338.494894][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2338.494894][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2338.494894][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2338.494894][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2338.494894][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2338.494894][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2338.494894][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2338.494894][ T7168] Uninit was stored to memory at: [ 2338.717527][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.717527][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Uninit was stored to memory at: [ 2338.724948][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2338.724948][ T7168] __msan_chain_origin+0x57/0xa0 [ 2338.724948][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2338.724948][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2338.724948][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2338.724948][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2338.724948][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.724948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.724948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2338.724948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2338.724948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2338.724948][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.724948][ T7168] [ 2338.724948][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2338.724948][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2338.724948][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2339.377481][ T7168] not chained 1260000 origins [ 2339.382181][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2339.384895][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2339.384895][ T7168] Call Trace: [ 2339.384895][ T7168] dump_stack+0x21c/0x280 [ 2339.384895][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2339.384895][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2339.384895][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2339.384895][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2339.384895][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2339.384895][ T7168] ? _copy_from_user+0x201/0x310 [ 2339.384895][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2339.384895][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.384895][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.384895][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.384895][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.384895][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2339.384895][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2339.384895][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2339.384895][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.384895][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2339.384895][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2339.384895][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.384895][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.384895][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.384895][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.384895][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.384895][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.384895][ T7168] RIP: 0023:0xf7fc7549 [ 2339.384895][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2339.384895][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2339.384895][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2339.384895][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2339.384895][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.384895][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2339.384895][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.602360][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Uninit was stored to memory at: [ 2339.604946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2339.604946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2339.604946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2339.604946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2339.604946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2339.604946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2339.604946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.604946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.604946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2339.604946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2339.604946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2339.604946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.604946][ T7168] [ 2339.604946][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2339.604946][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2339.604946][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2340.332944][ T7168] not chained 1270000 origins [ 2340.334846][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2340.334846][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.334846][ T7168] Call Trace: [ 2340.334846][ T7168] dump_stack+0x21c/0x280 [ 2340.334846][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2340.334846][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2340.334846][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2340.334846][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.334846][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2340.334846][ T7168] ? _copy_from_user+0x201/0x310 [ 2340.334846][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2340.334846][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.334846][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.334846][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.334846][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.334846][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.334846][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2340.334846][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2340.334846][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.334846][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.334846][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2340.334846][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.334846][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.334846][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.334846][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.334846][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.334846][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.334846][ T7168] RIP: 0023:0xf7fc7549 [ 2340.334846][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2340.334846][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2340.334846][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2340.334846][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2340.334846][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.334846][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2340.334846][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.334846][ T7168] Uninit was stored to memory at: [ 2340.334846][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.334846][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.334846][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.334846][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.334846][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.334846][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.334846][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.334846][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.334846][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.334846][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.334846][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.334846][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.334846][ T7168] [ 2340.334846][ T7168] Uninit was stored to memory at: [ 2340.334846][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.334846][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.334846][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.334846][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.334846][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.334846][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.334846][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.334846][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.675256][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.675256][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.685104][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.685104][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.694989][ T7168] [ 2340.694989][ T7168] Uninit was stored to memory at: [ 2340.694989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.705199][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.705199][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.714961][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.714961][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.725108][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.725108][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.739509][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.745140][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.745140][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.755046][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.757797][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.765460][ T7168] [ 2340.765460][ T7168] Uninit was stored to memory at: [ 2340.765460][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.775032][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.780341][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.785104][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.785104][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.795130][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.795130][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.805090][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.814982][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.814982][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.825201][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.825201][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.834964][ T7168] [ 2340.834964][ T7168] Uninit was stored to memory at: [ 2340.841947][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.845102][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.845102][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.855138][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.855138][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.865110][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.865110][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.874974][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.885092][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.890656][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.895375][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.895375][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.905118][ T7168] [ 2340.905118][ T7168] Uninit was stored to memory at: [ 2340.905118][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.915154][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.915154][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.925115][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2340.925115][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2340.934964][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2340.934964][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.945178][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.954991][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2340.954991][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2340.965095][ T7168] do_SYSENTER_32+0x73/0x90 [ 2340.965095][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.975140][ T7168] [ 2340.975140][ T7168] Uninit was stored to memory at: [ 2340.975140][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2340.985200][ T7168] __msan_chain_origin+0x57/0xa0 [ 2340.985200][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2340.995026][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.005003][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.005190][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.005190][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.014979][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.025416][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.025416][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.035131][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.035131][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.046718][ T7168] [ 2341.046718][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2341.054977][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2341.054977][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2341.298828][ T7168] not chained 1280000 origins [ 2341.303529][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2341.304847][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2341.304847][ T7168] Call Trace: [ 2341.304847][ T7168] dump_stack+0x21c/0x280 [ 2341.304847][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2341.304847][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2341.304847][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2341.304847][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2341.304847][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2341.304847][ T7168] ? _copy_from_user+0x201/0x310 [ 2341.304847][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2341.304847][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2341.304847][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2341.304847][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] RIP: 0023:0xf7fc7549 [ 2341.304847][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2341.304847][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2341.304847][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2341.304847][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2341.304847][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2341.304847][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2341.304847][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Uninit was stored to memory at: [ 2341.304847][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2341.304847][ T7168] __msan_chain_origin+0x57/0xa0 [ 2341.304847][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2341.304847][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2341.304847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2341.304847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2341.304847][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.304847][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.304847][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2341.304847][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2341.304847][ T7168] do_SYSENTER_32+0x73/0x90 [ 2341.304847][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.304847][ T7168] [ 2341.304847][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2341.304847][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2341.304847][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2342.184098][ T7168] not chained 1290000 origins [ 2342.185030][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2342.185030][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2342.205103][ T7168] Call Trace: [ 2342.205103][ T7168] dump_stack+0x21c/0x280 [ 2342.205103][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2342.205103][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2342.205103][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2342.205103][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.205103][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2342.205103][ T7168] ? _copy_from_user+0x201/0x310 [ 2342.205103][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2342.205103][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.205103][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.205103][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.205103][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.205103][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.275348][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2342.275348][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2342.285390][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] RIP: 0023:0xf7fc7549 [ 2342.285390][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2342.285390][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2342.285390][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2342.285390][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2342.285390][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2342.285390][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2342.285390][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Uninit was stored to memory at: [ 2342.285390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2342.285390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2342.285390][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2342.285390][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2342.285390][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2342.285390][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2342.285390][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.285390][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.285390][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2342.285390][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2342.285390][ T7168] do_SYSENTER_32+0x73/0x90 [ 2342.285390][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.285390][ T7168] [ 2342.285390][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2342.285390][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2342.285390][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2343.115210][ T7168] not chained 1300000 origins [ 2343.119887][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2343.124858][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2343.124858][ T7168] Call Trace: [ 2343.124858][ T7168] dump_stack+0x21c/0x280 [ 2343.124858][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2343.124858][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2343.124858][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2343.124858][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2343.124858][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2343.124858][ T7168] ? _copy_from_user+0x201/0x310 [ 2343.124858][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2343.124858][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2343.124858][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2343.124858][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] RIP: 0023:0xf7fc7549 [ 2343.124858][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2343.124858][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2343.124858][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2343.124858][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2343.124858][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2343.124858][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2343.124858][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Uninit was stored to memory at: [ 2343.124858][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2343.124858][ T7168] __msan_chain_origin+0x57/0xa0 [ 2343.124858][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2343.124858][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2343.124858][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2343.124858][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2343.124858][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.124858][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.124858][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2343.124858][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2343.124858][ T7168] do_SYSENTER_32+0x73/0x90 [ 2343.124858][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.124858][ T7168] [ 2343.124858][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2343.124858][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2343.124858][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2344.140611][ T7168] not chained 1310000 origins [ 2344.144853][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2344.144853][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2344.144853][ T7168] Call Trace: [ 2344.144853][ T7168] dump_stack+0x21c/0x280 [ 2344.144853][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2344.144853][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2344.144853][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2344.144853][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2344.144853][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2344.144853][ T7168] ? _copy_from_user+0x201/0x310 [ 2344.144853][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2344.144853][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.144853][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.144853][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.220788][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.220788][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2344.220788][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2344.220788][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2344.220788][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.220788][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2344.220788][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2344.220788][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.220788][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.220788][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.220788][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.220788][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.220788][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.220788][ T7168] RIP: 0023:0xf7fc7549 [ 2344.220788][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2344.220788][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2344.220788][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2344.220788][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2344.220788][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2344.220788][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2344.354926][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Uninit was stored to memory at: [ 2344.354926][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2344.354926][ T7168] __msan_chain_origin+0x57/0xa0 [ 2344.354926][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2344.354926][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2344.354926][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2344.354926][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2344.354926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.354926][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.354926][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2344.354926][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2344.354926][ T7168] do_SYSENTER_32+0x73/0x90 [ 2344.354926][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.354926][ T7168] [ 2344.354926][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2344.354926][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2344.354926][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2345.103944][ T7168] not chained 1320000 origins [ 2345.104840][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2345.104840][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2345.104840][ T7168] Call Trace: [ 2345.104840][ T7168] dump_stack+0x21c/0x280 [ 2345.104840][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2345.104840][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2345.104840][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2345.104840][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2345.104840][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2345.104840][ T7168] ? _copy_from_user+0x201/0x310 [ 2345.104840][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2345.104840][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.104840][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.104840][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.104840][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.104840][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2345.104840][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2345.104840][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2345.104840][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.104840][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2345.104840][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2345.104840][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.104840][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.104840][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.104840][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.104840][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.104840][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.104840][ T7168] RIP: 0023:0xf7fc7549 [ 2345.104840][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2345.104840][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2345.104840][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2345.104840][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2345.104840][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2345.104840][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2345.319458][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2345.325037][ T7168] Uninit was stored to memory at: [ 2345.329818][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.335238][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.335238][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.348523][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.348523][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.355144][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.355144][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.368004][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.375204][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.375204][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.385084][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.387910][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.396234][ T7168] [ 2345.396234][ T7168] Uninit was stored to memory at: [ 2345.396234][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.408306][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.408306][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.415150][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.415150][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.425055][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.431459][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.436982][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.445006][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.449891][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.455207][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.455207][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.464999][ T7168] [ 2345.467877][ T7168] Uninit was stored to memory at: [ 2345.467877][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.475200][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.475200][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.487986][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.495016][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.495153][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.495153][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.507898][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.515231][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.515231][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.525023][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.527884][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.535059][ T7168] [ 2345.538986][ T7168] Uninit was stored to memory at: [ 2345.541569][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.549922][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.555122][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.555122][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.565006][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.567861][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.567861][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.575231][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.585054][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.587961][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.595192][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.595192][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.605078][ T7168] [ 2345.608050][ T7168] Uninit was stored to memory at: [ 2345.615049][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.615190][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.625040][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.627947][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.635289][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.635289][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.645074][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.645074][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.657002][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.657002][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.665068][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.668272][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.675139][ T7168] [ 2345.675139][ T7168] Uninit was stored to memory at: [ 2345.685007][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.687900][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.695215][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.695215][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.705021][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.707886][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.715151][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.715151][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.725045][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.727983][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.735144][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.735144][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.748013][ T7168] [ 2345.748013][ T7168] Uninit was stored to memory at: [ 2345.755090][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2345.759506][ T7168] __msan_chain_origin+0x57/0xa0 [ 2345.765088][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2345.769999][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2345.775156][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2345.775156][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2345.785062][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2345.788038][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2345.795232][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2345.795232][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2345.795232][ T7168] do_SYSENTER_32+0x73/0x90 [ 2345.809661][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2345.809661][ T7168] [ 2345.809661][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2345.809661][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2345.809661][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2346.112435][ T7168] not chained 1330000 origins [ 2346.115014][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2346.115014][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2346.115014][ T7168] Call Trace: [ 2346.115014][ T7168] dump_stack+0x21c/0x280 [ 2346.115014][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2346.115014][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2346.115014][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2346.115014][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2346.115014][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2346.115014][ T7168] ? _copy_from_user+0x201/0x310 [ 2346.115014][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2346.115014][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.115014][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.115014][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.115014][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.115014][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2346.115014][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2346.115014][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2346.115014][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.115014][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2346.115014][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2346.115014][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.115014][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.115014][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.115014][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.115014][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.115014][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.115014][ T7168] RIP: 0023:0xf7fc7549 [ 2346.115014][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2346.115014][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2346.290085][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2346.290085][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2346.290085][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2346.290085][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2346.290085][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2346.290085][ T7168] Uninit was stored to memory at: [ 2346.290085][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.290085][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.290085][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.290085][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.290085][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.290085][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.290085][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.290085][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.290085][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.290085][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.290085][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.290085][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.290085][ T7168] [ 2346.290085][ T7168] Uninit was stored to memory at: [ 2346.290085][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.290085][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.290085][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.290085][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.290085][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.290085][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.290085][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.290085][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.290085][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.290085][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.290085][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.290085][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.290085][ T7168] [ 2346.290085][ T7168] Uninit was stored to memory at: [ 2346.290085][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.290085][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.290085][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.290085][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.290085][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.508249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.508249][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.508249][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.508249][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.508249][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.508249][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.508249][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.508249][ T7168] [ 2346.508249][ T7168] Uninit was stored to memory at: [ 2346.508249][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.508249][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.508249][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.508249][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.508249][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.508249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.508249][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.508249][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.508249][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.508249][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.508249][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.508249][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.508249][ T7168] [ 2346.508249][ T7168] Uninit was stored to memory at: [ 2346.508249][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.508249][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.508249][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.508249][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.508249][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.508249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.508249][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.508249][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.508249][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.508249][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.508249][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.508249][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.508249][ T7168] [ 2346.508249][ T7168] Uninit was stored to memory at: [ 2346.508249][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.508249][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.508249][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.508249][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.508249][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.508249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.508249][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.508249][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.508249][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.508249][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.508249][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.508249][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.508249][ T7168] [ 2346.508249][ T7168] Uninit was stored to memory at: [ 2346.508249][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2346.508249][ T7168] __msan_chain_origin+0x57/0xa0 [ 2346.508249][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2346.508249][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2346.508249][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2346.508249][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2346.508249][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.508249][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.508249][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2346.508249][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2346.508249][ T7168] do_SYSENTER_32+0x73/0x90 [ 2346.508249][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.508249][ T7168] [ 2346.508249][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2346.508249][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2346.508249][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2347.018615][ T7168] not chained 1340000 origins [ 2347.023348][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2347.024845][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2347.024845][ T7168] Call Trace: [ 2347.024845][ T7168] dump_stack+0x21c/0x280 [ 2347.024845][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2347.054968][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.054968][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.054968][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2347.054968][ T7168] ? _copy_from_user+0x201/0x310 [ 2347.054968][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.054968][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.054968][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.054968][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.054968][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.054968][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.054968][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2347.054968][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2347.054968][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.054968][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.054968][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.054968][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.054968][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.144994][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.144994][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.144994][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.144994][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.144994][ T7168] RIP: 0023:0xf7fc7549 [ 2347.144994][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2347.144994][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2347.144994][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2347.144994][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2347.144994][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2347.214989][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2347.214989][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Uninit was stored to memory at: [ 2347.214989][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2347.214989][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.214989][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.214989][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.214989][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.214989][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.214989][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.214989][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.214989][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2347.214989][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2347.214989][ T7168] do_SYSENTER_32+0x73/0x90 [ 2347.214989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.214989][ T7168] [ 2347.214989][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2347.214989][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2347.214989][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2347.924749][ T7168] not chained 1350000 origins [ 2347.924854][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2347.924854][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2347.924854][ T7168] Call Trace: [ 2347.924854][ T7168] dump_stack+0x21c/0x280 [ 2347.924854][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2347.924854][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2347.924854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.924854][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.924854][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2347.924854][ T7168] ? _copy_from_user+0x201/0x310 [ 2347.924854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.924854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2347.924854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2347.924854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2347.924854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2347.924854][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.924854][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2347.924854][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2347.924854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2347.924854][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.924854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2347.924854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.045341][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.045341][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.045341][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.045341][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.045341][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.045341][ T7168] RIP: 0023:0xf7fc7549 [ 2348.045341][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2348.045341][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2348.045341][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2348.045341][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2348.045341][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2348.045341][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2348.045341][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2348.045341][ T7168] Uninit was stored to memory at: [ 2348.045341][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.045341][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.045341][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.045341][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.045341][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.045341][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.045341][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.045341][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.045341][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.045341][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.045341][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.045341][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.045341][ T7168] [ 2348.045341][ T7168] Uninit was stored to memory at: [ 2348.045341][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.045341][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.045341][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.045341][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.045341][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.045341][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.045341][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.045341][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.045341][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.045341][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.045341][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.045341][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.045341][ T7168] [ 2348.045341][ T7168] Uninit was stored to memory at: [ 2348.045341][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.045341][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.045341][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.045341][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.045341][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.045341][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.045341][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.045341][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.045341][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.045341][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.045341][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.045341][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.357593][ T7168] [ 2348.357593][ T7168] Uninit was stored to memory at: [ 2348.365570][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.365570][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.375081][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.377538][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.385862][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.385862][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.395031][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.397417][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.408116][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.408116][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.415054][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.420084][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.425803][ T7168] [ 2348.425803][ T7168] Uninit was stored to memory at: [ 2348.435077][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.439252][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.445541][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.445541][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.455080][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.457586][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.465636][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.465636][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.477451][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.477451][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.485558][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.485558][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.497501][ T7168] [ 2348.497501][ T7168] Uninit was stored to memory at: [ 2348.505551][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.505551][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.515089][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.521890][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.525021][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.527398][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.535067][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.541571][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.547365][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.547365][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.557508][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.557508][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.565559][ T7168] [ 2348.565559][ T7168] Uninit was stored to memory at: [ 2348.575030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2348.577408][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.585630][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.585630][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.597388][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.597388][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.605574][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.605574][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.617489][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.617489][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.627366][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.627366][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.639400][ T7168] [ 2348.639400][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2348.646169][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2348.646169][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2348.867412][ T7168] not chained 1360000 origins [ 2348.872111][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2348.874843][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2348.874843][ T7168] Call Trace: [ 2348.874843][ T7168] dump_stack+0x21c/0x280 [ 2348.874843][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2348.874843][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2348.874843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2348.874843][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2348.914978][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2348.914978][ T7168] ? _copy_from_user+0x201/0x310 [ 2348.914978][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2348.914978][ T7168] __msan_chain_origin+0x57/0xa0 [ 2348.914978][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2348.914978][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2348.914978][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2348.914978][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2348.914978][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2348.914978][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2348.914978][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2348.914978][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2348.914978][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2348.914978][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.914978][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.914978][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2348.914978][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2348.914978][ T7168] do_SYSENTER_32+0x73/0x90 [ 2348.914978][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.914978][ T7168] RIP: 0023:0xf7fc7549 [ 2348.914978][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2348.914978][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2349.044972][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2349.058178][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2349.066824][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2349.075245][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2349.075245][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2349.088565][ T7168] Uninit was stored to memory at: [ 2349.096965][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.096965][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.107831][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.107831][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.115288][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.115288][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.127868][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.127868][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.136303][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.145056][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.147963][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.152425][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.155129][ T7168] [ 2349.155129][ T7168] Uninit was stored to memory at: [ 2349.168151][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.168151][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.176955][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.176955][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.185050][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.189671][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.195115][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.195115][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.209663][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.215114][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.215114][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.215114][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.227842][ T7168] [ 2349.227842][ T7168] Uninit was stored to memory at: [ 2349.235206][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.238707][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.247814][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.247814][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.255119][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.255119][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.268039][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.268039][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.275155][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.285021][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.289652][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.289652][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.297202][ T7168] [ 2349.297202][ T7168] Uninit was stored to memory at: [ 2349.307917][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.307917][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.315073][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.319460][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.327902][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.327902][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.335122][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.341095][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.347812][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.355225][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.355225][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.364990][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.367818][ T7168] [ 2349.367818][ T7168] Uninit was stored to memory at: [ 2349.375122][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.375122][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.387907][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.387907][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.396930][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.396930][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.405040][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.409711][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.415206][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.425079][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.430572][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.435080][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.435080][ T7168] [ 2349.443506][ T7168] Uninit was stored to memory at: [ 2349.447937][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.447937][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.455166][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.455166][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.467874][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.467874][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.475472][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.484998][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.487979][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.495110][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.495110][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.505032][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.509729][ T7168] [ 2349.509729][ T7168] Uninit was stored to memory at: [ 2349.517000][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2349.525013][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.527945][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.535026][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.536996][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.541411][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.548627][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.555025][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.555486][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.565055][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.567987][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.575117][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.575117][ T7168] [ 2349.575117][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2349.587882][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2349.595201][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2349.843918][ T7168] not chained 1370000 origins [ 2349.844843][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2349.852761][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.852761][ T7168] Call Trace: [ 2349.852761][ T7168] dump_stack+0x21c/0x280 [ 2349.852761][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2349.852761][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2349.852761][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2349.852761][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.852761][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2349.852761][ T7168] ? _copy_from_user+0x201/0x310 [ 2349.906955][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2349.906955][ T7168] __msan_chain_origin+0x57/0xa0 [ 2349.915314][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2349.918161][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2349.925001][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2349.925001][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.925001][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2349.925001][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2349.925001][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2349.925001][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.957785][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2349.957785][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.964943][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.975047][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2349.976957][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2349.985337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2349.985337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.995150][ T7168] RIP: 0023:0xf7fc7549 [ 2349.995150][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2350.015269][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2350.024949][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2350.035773][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2350.035773][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2350.044971][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2350.058003][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2350.066861][ T7168] Uninit was stored to memory at: [ 2350.066861][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.075451][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.075451][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.086851][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.086851][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.095131][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.095131][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.104936][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.115219][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.115219][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.124952][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.124952][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.135129][ T7168] [ 2350.135129][ T7168] Uninit was stored to memory at: [ 2350.135129][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.145115][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.145115][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.155164][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.160316][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.166821][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.166821][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.176980][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.184954][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.184954][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.195044][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.196963][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.205337][ T7168] [ 2350.205337][ T7168] Uninit was stored to memory at: [ 2350.205337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.215125][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.215125][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.224962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.224962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.235213][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.235213][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.244948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.255123][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.255123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.265104][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.265104][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.275118][ T7168] [ 2350.277464][ T7168] Uninit was stored to memory at: [ 2350.277464][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.286857][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.286857][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.295240][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.295240][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.306799][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.306799][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.315132][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.325115][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.325115][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.335427][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.335427][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.344950][ T7168] [ 2350.344950][ T7168] Uninit was stored to memory at: [ 2350.344950][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.357782][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.357782][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.365316][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.375014][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.375141][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.375141][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.386874][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.395038][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.396958][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.405127][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.405127][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.417004][ T7168] [ 2350.417004][ T7168] Uninit was stored to memory at: [ 2350.417004][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.424946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.435017][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.435155][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.445068][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.445880][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.445880][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.455145][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.465343][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.467516][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.475213][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.475213][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.484952][ T7168] [ 2350.484952][ T7168] Uninit was stored to memory at: [ 2350.484952][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.497136][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.505017][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.506898][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.515149][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.515149][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.515149][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.526894][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.535233][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.541529][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.544964][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.544964][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.555134][ T7168] [ 2350.555134][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2350.565131][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2350.569910][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2350.790554][ T7168] not chained 1380000 origins [ 2350.794842][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2350.794842][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2350.794842][ T7168] Call Trace: [ 2350.794842][ T7168] dump_stack+0x21c/0x280 [ 2350.794842][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2350.794842][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2350.794842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2350.794842][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2350.794842][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2350.794842][ T7168] ? _copy_from_user+0x201/0x310 [ 2350.794842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2350.794842][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.794842][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.794842][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.794842][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2350.794842][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2350.794842][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2350.794842][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2350.794842][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2350.794842][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2350.794842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2350.794842][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.915369][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.915369][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2350.915369][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2350.915369][ T7168] do_SYSENTER_32+0x73/0x90 [ 2350.915369][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.915369][ T7168] RIP: 0023:0xf7fc7549 [ 2350.915369][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2350.915369][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2350.915369][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2350.915369][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2350.915369][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2350.915369][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2350.915369][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2350.915369][ T7168] Uninit was stored to memory at: [ 2350.915369][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2350.915369][ T7168] __msan_chain_origin+0x57/0xa0 [ 2350.915369][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2350.915369][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2350.915369][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.042563][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.046936][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.056893][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.056893][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.065123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.065123][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.077257][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.081941][ T7168] [ 2351.085130][ T7168] Uninit was stored to memory at: [ 2351.085130][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.094980][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.094980][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.105207][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.105207][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.115375][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.115375][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.125109][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.125109][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.135137][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.135137][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.145113][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.145113][ T7168] [ 2351.155213][ T7168] Uninit was stored to memory at: [ 2351.155213][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.155213][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.167349][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.174962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.174962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.185000][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.186916][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.195139][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.195139][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.205109][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.205109][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.214964][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.214964][ T7168] [ 2351.225221][ T7168] Uninit was stored to memory at: [ 2351.225221][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.234973][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.234973][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.245455][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.245455][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.255180][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.255180][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.265111][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.265111][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.278650][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.278650][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.286705][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.286705][ T7168] [ 2351.295003][ T7168] Uninit was stored to memory at: [ 2351.296880][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.305119][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.305119][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.315148][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.315148][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.325096][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.325096][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.334970][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.334970][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.345205][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.345205][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.354974][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.354974][ T7168] [ 2351.365112][ T7168] Uninit was stored to memory at: [ 2351.365112][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.375391][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.375391][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.385002][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.389401][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.395042][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.397626][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.406948][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.406948][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.414969][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.414969][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.425112][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.425112][ T7168] [ 2351.435150][ T7168] Uninit was stored to memory at: [ 2351.435150][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2351.445071][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.445071][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.455177][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.455177][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.465248][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.465248][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.475041][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.475041][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.485899][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.491519][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.495028][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.498676][ T7168] [ 2351.505488][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2351.505488][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2351.517113][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2351.823219][ T7168] not chained 1390000 origins [ 2351.824842][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2351.824842][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2351.824842][ T7168] Call Trace: [ 2351.824842][ T7168] dump_stack+0x21c/0x280 [ 2351.824842][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2351.824842][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2351.824842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2351.824842][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2351.824842][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2351.824842][ T7168] ? _copy_from_user+0x201/0x310 [ 2351.824842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2351.824842][ T7168] __msan_chain_origin+0x57/0xa0 [ 2351.824842][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2351.824842][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2351.824842][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2351.824842][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2351.824842][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2351.824842][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2351.824842][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2351.824842][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2351.824842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2351.824842][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.824842][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.955131][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2351.957008][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2351.965120][ T7168] do_SYSENTER_32+0x73/0x90 [ 2351.965120][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.975010][ T7168] RIP: 0023:0xf7fc7549 [ 2351.975010][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2351.995798][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2352.005089][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2352.014973][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2352.014973][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2352.025679][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2352.037770][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2352.045062][ T7168] Uninit was stored to memory at: [ 2352.048793][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.055141][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.055141][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.066904][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.066904][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.075020][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.075020][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.085241][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.085241][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.095044][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.104985][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.105955][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.115175][ T7168] [ 2352.115175][ T7168] Uninit was stored to memory at: [ 2352.115175][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.125130][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.125130][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.135146][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.135146][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.145117][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.151267][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.151267][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.165222][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.165222][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.175011][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.176877][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.185125][ T7168] [ 2352.185125][ T7168] Uninit was stored to memory at: [ 2352.185125][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.195301][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.203881][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.208313][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.208313][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.214992][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.214992][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.225224][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.234983][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.234983][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.245113][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.245113][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.255159][ T7168] [ 2352.255159][ T7168] Uninit was stored to memory at: [ 2352.255159][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.268764][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.268764][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.274973][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.274973][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.287187][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.287187][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.295145][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.305111][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.310711][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.315134][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.315134][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.325123][ T7168] [ 2352.325123][ T7168] Uninit was stored to memory at: [ 2352.325123][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.334982][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.334982][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.345240][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.345240][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.354982][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.354982][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.365118][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.375031][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.378681][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.385099][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.385099][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.395015][ T7168] [ 2352.396885][ T7168] Uninit was stored to memory at: [ 2352.396885][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.405186][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.413099][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.415370][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.415370][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.425099][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.425099][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.437723][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.445127][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.445127][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.454976][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.454976][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.465222][ T7168] [ 2352.465222][ T7168] Uninit was stored to memory at: [ 2352.465222][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.474971][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.474971][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.488768][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.488768][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.495134][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.495134][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.507698][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.515647][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.515647][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.525216][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.525216][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.535219][ T7168] [ 2352.535219][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2352.545408][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2352.545408][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2352.762623][ T7168] not chained 1400000 origins [ 2352.764846][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2352.764846][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2352.764846][ T7168] Call Trace: [ 2352.764846][ T7168] dump_stack+0x21c/0x280 [ 2352.764846][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2352.764846][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2352.764846][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2352.764846][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2352.764846][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2352.764846][ T7168] ? _copy_from_user+0x201/0x310 [ 2352.822389][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2352.822389][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.822389][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.822389][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.822389][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2352.822389][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2352.822389][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2352.822389][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2352.822389][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2352.822389][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2352.822389][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2352.822389][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.822389][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.822389][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2352.822389][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2352.822389][ T7168] do_SYSENTER_32+0x73/0x90 [ 2352.822389][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.822389][ T7168] RIP: 0023:0xf7fc7549 [ 2352.822389][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2352.822389][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2352.822389][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2352.822389][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2352.822389][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2352.822389][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2352.822389][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2352.822389][ T7168] Uninit was stored to memory at: [ 2352.822389][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2352.822389][ T7168] __msan_chain_origin+0x57/0xa0 [ 2352.822389][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2352.822389][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2352.822389][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.018178][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.018178][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.024944][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.035069][ T7168] [ 2353.035069][ T7168] Uninit was stored to memory at: [ 2353.035069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.035069][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.035069][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.035069][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.035069][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.035069][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.035069][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.035069][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.035069][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.035069][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.035069][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.035069][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.475295][ T7168] [ 2353.475295][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2353.475295][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2353.475295][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2353.649048][ T7168] not chained 1410000 origins [ 2353.653751][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2353.655480][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2353.664960][ T7168] Call Trace: [ 2353.664960][ T7168] dump_stack+0x21c/0x280 [ 2353.664960][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2353.664960][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2353.664960][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2353.664960][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2353.664960][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2353.664960][ T7168] ? _copy_from_user+0x201/0x310 [ 2353.664960][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2353.664960][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.664960][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.664960][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.664960][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.664960][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2353.664960][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2353.664960][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2353.664960][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.664960][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2353.664960][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2353.664960][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.664960][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.664960][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.664960][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.664960][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.664960][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.664960][ T7168] RIP: 0023:0xf7fc7549 [ 2353.664960][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2353.664960][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2353.664960][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2353.664960][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2353.664960][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2353.664960][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2353.664960][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2353.664960][ T7168] Uninit was stored to memory at: [ 2353.664960][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.664960][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.664960][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.664960][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.664960][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.664960][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.664960][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.664960][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.664960][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.664960][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.664960][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.664960][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.664960][ T7168] [ 2353.664960][ T7168] Uninit was stored to memory at: [ 2353.664960][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.664960][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.960561][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.965315][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.965315][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.965315][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.979804][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.979804][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.979804][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.979804][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.979804][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.979804][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.979804][ T7168] [ 2353.979804][ T7168] Uninit was stored to memory at: [ 2353.979804][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.979804][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.979804][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.979804][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.979804][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2353.979804][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2353.979804][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.979804][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.979804][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2353.979804][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2353.979804][ T7168] do_SYSENTER_32+0x73/0x90 [ 2353.979804][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.979804][ T7168] [ 2353.979804][ T7168] Uninit was stored to memory at: [ 2353.979804][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2353.979804][ T7168] __msan_chain_origin+0x57/0xa0 [ 2353.979804][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2353.979804][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2353.979804][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.115156][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.115156][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.115156][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.115156][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.115156][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.115156][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.115156][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.115156][ T7168] [ 2354.115156][ T7168] Uninit was stored to memory at: [ 2354.115156][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.115156][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.115156][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.115156][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.115156][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.115156][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.115156][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.115156][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.115156][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.115156][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.115156][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.115156][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.115156][ T7168] [ 2354.115156][ T7168] Uninit was stored to memory at: [ 2354.115156][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.115156][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.115156][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.115156][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.115156][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.115156][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.115156][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.115156][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.115156][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.115156][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.115156][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.115156][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.115156][ T7168] [ 2354.115156][ T7168] Uninit was stored to memory at: [ 2354.115156][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.115156][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.115156][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.115156][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.115156][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.115156][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.115156][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.115156][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.115156][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.115156][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.115156][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.115156][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.115156][ T7168] [ 2354.115156][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2354.115156][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2354.115156][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2354.536779][ T7168] not chained 1420000 origins [ 2354.541477][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2354.545030][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2354.545030][ T7168] Call Trace: [ 2354.545030][ T7168] dump_stack+0x21c/0x280 [ 2354.545030][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2354.545030][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2354.545030][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2354.545030][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2354.545030][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2354.545030][ T7168] ? _copy_from_user+0x201/0x310 [ 2354.545030][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2354.545030][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2354.545030][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2354.545030][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] RIP: 0023:0xf7fc7549 [ 2354.545030][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2354.545030][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2354.545030][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2354.545030][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2354.545030][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2354.545030][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2354.545030][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.545030][ T7168] [ 2354.545030][ T7168] Uninit was stored to memory at: [ 2354.545030][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2354.545030][ T7168] __msan_chain_origin+0x57/0xa0 [ 2354.545030][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2354.545030][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2354.545030][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2354.545030][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2354.545030][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.545030][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.545030][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2354.545030][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2354.545030][ T7168] do_SYSENTER_32+0x73/0x90 [ 2354.545030][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.179495][ T7168] [ 2355.179495][ T7168] Uninit was stored to memory at: [ 2355.179495][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2355.179495][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.179495][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2355.179495][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2355.179495][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2355.179495][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2355.179495][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.179495][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.179495][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2355.179495][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2355.179495][ T7168] do_SYSENTER_32+0x73/0x90 [ 2355.179495][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.179495][ T7168] [ 2355.179495][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2355.179495][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2355.179495][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2355.660673][ T7168] not chained 1430000 origins [ 2355.664842][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2355.664842][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2355.664842][ T7168] Call Trace: [ 2355.664842][ T7168] dump_stack+0x21c/0x280 [ 2355.689565][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2355.689565][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2355.689565][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2355.689565][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2355.689565][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2355.689565][ T7168] ? _copy_from_user+0x201/0x310 [ 2355.689565][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2355.689565][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.689565][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2355.689565][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2355.689565][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2355.689565][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2355.689565][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2355.689565][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2355.689565][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2355.689565][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2355.689565][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2355.689565][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.689565][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.689565][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2355.689565][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2355.689565][ T7168] do_SYSENTER_32+0x73/0x90 [ 2355.689565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.689565][ T7168] RIP: 0023:0xf7fc7549 [ 2355.689565][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2355.689565][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2355.689565][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2355.689565][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2355.689565][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2355.689565][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2355.689565][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2355.689565][ T7168] Uninit was stored to memory at: [ 2355.689565][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2355.689565][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.689565][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2355.689565][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2355.689565][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2355.689565][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2355.689565][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.689565][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.689565][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2355.689565][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2355.689565][ T7168] do_SYSENTER_32+0x73/0x90 [ 2355.689565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.689565][ T7168] [ 2355.689565][ T7168] Uninit was stored to memory at: [ 2355.689565][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2355.689565][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.689565][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2355.689565][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2355.689565][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2355.689565][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2355.689565][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.689565][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.689565][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2355.689565][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2355.689565][ T7168] do_SYSENTER_32+0x73/0x90 [ 2355.689565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.689565][ T7168] [ 2355.689565][ T7168] Uninit was stored to memory at: [ 2355.689565][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2355.689565][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.689565][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2355.689565][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2355.689565][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2355.689565][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2355.689565][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.689565][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.689565][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2355.689565][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2355.689565][ T7168] do_SYSENTER_32+0x73/0x90 [ 2355.689565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.689565][ T7168] [ 2355.689565][ T7168] Uninit was stored to memory at: [ 2355.689565][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2355.689565][ T7168] __msan_chain_origin+0x57/0xa0 [ 2355.689565][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.115123][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.115123][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.115123][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.115123][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.115123][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.115123][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.115123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.115123][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.115123][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.115123][ T7168] [ 2356.115123][ T7168] Uninit was stored to memory at: [ 2356.115123][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.115123][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.115123][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.115123][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.115123][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.115123][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.115123][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.115123][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.115123][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.115123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.115123][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.115123][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.115123][ T7168] [ 2356.115123][ T7168] Uninit was stored to memory at: [ 2356.115123][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.115123][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.115123][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.115123][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.115123][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.115123][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.115123][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.115123][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.115123][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.115123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.115123][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.115123][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.115123][ T7168] [ 2356.115123][ T7168] Uninit was stored to memory at: [ 2356.115123][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.115123][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.115123][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.115123][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.115123][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.115123][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.115123][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.115123][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.115123][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.115123][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.115123][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.115123][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.115123][ T7168] [ 2356.115123][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2356.115123][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2356.115123][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2356.613780][ T7168] not chained 1440000 origins [ 2356.614848][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2356.614848][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.614848][ T7168] Call Trace: [ 2356.614848][ T7168] dump_stack+0x21c/0x280 [ 2356.614848][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2356.614848][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2356.614848][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2356.614848][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2356.614848][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2356.614848][ T7168] ? _copy_from_user+0x201/0x310 [ 2356.675025][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2356.675025][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.675025][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.675025][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.675025][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.675025][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2356.675025][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2356.675025][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2356.675025][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.675025][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2356.675025][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2356.675025][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.675025][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.675025][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.675025][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.675025][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.675025][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.675025][ T7168] RIP: 0023:0xf7fc7549 [ 2356.675025][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2356.784962][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2356.795127][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2356.804976][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2356.804976][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2356.820547][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2356.826880][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2356.838794][ T7168] Uninit was stored to memory at: [ 2356.838794][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.845143][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.845143][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.858066][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.858066][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.864957][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.864957][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.878085][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.884970][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.884970][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.895130][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.898078][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.906936][ T7168] [ 2356.906936][ T7168] Uninit was stored to memory at: [ 2356.906936][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.918933][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.925021][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.926887][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2356.935131][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2356.935131][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2356.939926][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.945311][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.955073][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2356.957983][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2356.965378][ T7168] do_SYSENTER_32+0x73/0x90 [ 2356.965378][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.975068][ T7168] [ 2356.977967][ T7168] Uninit was stored to memory at: [ 2356.977967][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2356.985796][ T7168] __msan_chain_origin+0x57/0xa0 [ 2356.995096][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2356.998065][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.005000][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.005000][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.005000][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.019881][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.025115][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.025115][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.035083][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.039756][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.046816][ T7168] [ 2357.046816][ T7168] Uninit was stored to memory at: [ 2357.046816][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.058288][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.064966][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.064966][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.075191][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.078239][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.078239][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.085163][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.095110][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.098266][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.104966][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.104966][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.115100][ T7168] [ 2357.118050][ T7168] Uninit was stored to memory at: [ 2357.125078][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.127096][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.135058][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.138140][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.144993][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.146868][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.155091][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.159789][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.165293][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.165293][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.175097][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.178054][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.184975][ T7168] [ 2357.184975][ T7168] Uninit was stored to memory at: [ 2357.195069][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.197977][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.205139][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.205139][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.215070][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.217963][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.225001][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.226027][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.235131][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.239864][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.244973][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.244973][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.255115][ T7168] [ 2357.259805][ T7168] Uninit was stored to memory at: [ 2357.264996][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.266869][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.275105][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.278237][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.284946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.284946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.295110][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.298097][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.304945][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.304945][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.317381][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.320565][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.328333][ T7168] [ 2357.328333][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2357.335114][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2357.338138][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2357.686033][ T7168] not chained 1450000 origins [ 2357.690759][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2357.694854][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.694854][ T7168] Call Trace: [ 2357.694854][ T7168] dump_stack+0x21c/0x280 [ 2357.694854][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2357.694854][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2357.694854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2357.694854][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2357.694854][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2357.694854][ T7168] ? _copy_from_user+0x201/0x310 [ 2357.694854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2357.694854][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2357.694854][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2357.694854][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] RIP: 0023:0xf7fc7549 [ 2357.694854][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2357.694854][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2357.694854][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2357.694854][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2357.694854][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2357.694854][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2357.694854][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Uninit was stored to memory at: [ 2357.694854][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2357.694854][ T7168] __msan_chain_origin+0x57/0xa0 [ 2357.694854][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2357.694854][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2357.694854][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2357.694854][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2357.694854][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.694854][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.694854][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2357.694854][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2357.694854][ T7168] do_SYSENTER_32+0x73/0x90 [ 2357.694854][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.694854][ T7168] [ 2357.694854][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2357.694854][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2357.694854][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2358.621091][ T7168] not chained 1460000 origins [ 2358.624867][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2358.624867][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.624867][ T7168] Call Trace: [ 2358.624867][ T7168] dump_stack+0x21c/0x280 [ 2358.624867][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2358.624867][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2358.659187][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2358.659187][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2358.659187][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2358.659187][ T7168] ? _copy_from_user+0x201/0x310 [ 2358.659187][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2358.659187][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.659187][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.659187][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.659187][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.659187][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2358.659187][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2358.659187][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2358.659187][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.659187][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2358.659187][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2358.659187][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.659187][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.659187][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.659187][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.659187][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.659187][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.659187][ T7168] RIP: 0023:0xf7fc7549 [ 2358.659187][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2358.784935][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2358.784935][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2358.784935][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2358.784935][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2358.784935][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2358.784935][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Uninit was stored to memory at: [ 2358.784935][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2358.784935][ T7168] __msan_chain_origin+0x57/0xa0 [ 2358.784935][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2358.784935][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2358.784935][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2358.784935][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2358.784935][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.784935][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.784935][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2358.784935][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2358.784935][ T7168] do_SYSENTER_32+0x73/0x90 [ 2358.784935][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.784935][ T7168] [ 2358.784935][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2358.784935][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2358.784935][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2359.545920][ T7168] not chained 1470000 origins [ 2359.550619][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2359.554853][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.554853][ T7168] Call Trace: [ 2359.554853][ T7168] dump_stack+0x21c/0x280 [ 2359.554853][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2359.580780][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2359.580780][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2359.580780][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2359.580780][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2359.580780][ T7168] ? _copy_from_user+0x201/0x310 [ 2359.580780][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2359.580780][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.580780][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.580780][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.580780][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.580780][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2359.580780][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2359.580780][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2359.580780][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.580780][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2359.580780][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2359.580780][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.580780][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.580780][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.580780][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.580780][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.580780][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.580780][ T7168] RIP: 0023:0xf7fc7549 [ 2359.580780][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2359.721602][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2359.724946][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2359.724946][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2359.724946][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2359.724946][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2359.724946][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Uninit was stored to memory at: [ 2359.724946][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2359.724946][ T7168] __msan_chain_origin+0x57/0xa0 [ 2359.724946][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2359.724946][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2359.724946][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2359.724946][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2359.724946][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.724946][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.724946][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2359.724946][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2359.724946][ T7168] do_SYSENTER_32+0x73/0x90 [ 2359.724946][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.724946][ T7168] [ 2359.724946][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2359.724946][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2359.724946][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2360.500905][ T7168] not chained 1480000 origins [ 2360.504852][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2360.504852][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.504852][ T7168] Call Trace: [ 2360.504852][ T7168] dump_stack+0x21c/0x280 [ 2360.504852][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2360.504852][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2360.504852][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2360.504852][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2360.504852][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2360.504852][ T7168] ? _copy_from_user+0x201/0x310 [ 2360.504852][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2360.504852][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2360.504852][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2360.504852][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] RIP: 0023:0xf7fc7549 [ 2360.504852][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2360.504852][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2360.504852][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2360.504852][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2360.504852][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2360.504852][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2360.504852][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Uninit was stored to memory at: [ 2360.504852][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2360.504852][ T7168] __msan_chain_origin+0x57/0xa0 [ 2360.504852][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2360.504852][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2360.504852][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2360.504852][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2360.504852][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2360.504852][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2360.504852][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2360.504852][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2360.504852][ T7168] do_SYSENTER_32+0x73/0x90 [ 2360.504852][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2360.504852][ T7168] [ 2360.504852][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2360.504852][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2360.504852][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2361.469476][ T7168] not chained 1490000 origins [ 2361.474185][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2361.474860][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.474860][ T7168] Call Trace: [ 2361.474860][ T7168] dump_stack+0x21c/0x280 [ 2361.474860][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2361.474860][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2361.474860][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2361.474860][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2361.474860][ T7168] ? _copy_from_user+0x201/0x310 [ 2361.526374][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2361.526374][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.526374][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.526374][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.526374][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.526374][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2361.526374][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2361.526374][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2361.526374][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.526374][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2361.526374][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2361.526374][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.526374][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.526374][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.526374][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.526374][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.526374][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.616925][ T7168] RIP: 0023:0xf7fc7549 [ 2361.616925][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2361.624962][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2361.624962][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2361.624962][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.624962][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.624962][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2361.624962][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Uninit was stored to memory at: [ 2361.624962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2361.624962][ T7168] __msan_chain_origin+0x57/0xa0 [ 2361.624962][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2361.624962][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2361.624962][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2361.624962][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2361.624962][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2361.624962][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2361.624962][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2361.624962][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2361.624962][ T7168] do_SYSENTER_32+0x73/0x90 [ 2361.624962][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.624962][ T7168] [ 2361.624962][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2361.624962][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2361.624962][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2362.380989][ T7168] not chained 1500000 origins [ 2362.384855][ T7168] CPU: 0 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2362.384855][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2362.384855][ T7168] Call Trace: [ 2362.384855][ T7168] dump_stack+0x21c/0x280 [ 2362.384855][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2362.384855][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2362.384855][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2362.384855][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2362.384855][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2362.384855][ T7168] ? _copy_from_user+0x201/0x310 [ 2362.384855][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2362.384855][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2362.384855][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2362.384855][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] RIP: 0023:0xf7fc7549 [ 2362.384855][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2362.384855][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2362.384855][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2362.384855][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2362.384855][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2362.384855][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2362.384855][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Uninit was stored to memory at: [ 2362.384855][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2362.384855][ T7168] __msan_chain_origin+0x57/0xa0 [ 2362.384855][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2362.384855][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2362.384855][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2362.384855][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2362.384855][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2362.384855][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2362.384855][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2362.384855][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2362.384855][ T7168] do_SYSENTER_32+0x73/0x90 [ 2362.384855][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2362.384855][ T7168] [ 2362.384855][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2362.384855][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2362.384855][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2363.414539][ T7168] not chained 1510000 origins [ 2363.414842][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2363.414842][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2363.414842][ T7168] Call Trace: [ 2363.414842][ T7168] dump_stack+0x21c/0x280 [ 2363.414842][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2363.414842][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2363.414842][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2363.414842][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2363.414842][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2363.471986][ T7168] ? _copy_from_user+0x201/0x310 [ 2363.475020][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2363.475020][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.475020][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.475020][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.475020][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.475020][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2363.475020][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2363.475020][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2363.475020][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.475020][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2363.475020][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2363.475020][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.475020][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.475020][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.475020][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.475020][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.475020][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.475020][ T7168] RIP: 0023:0xf7fc7549 [ 2363.475020][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2363.475020][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2363.475020][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2363.604611][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2363.604611][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2363.604611][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2363.604611][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2363.604611][ T7168] do_SYSENTER_32+0x73/0x90 [ 2363.604611][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2363.604611][ T7168] [ 2363.604611][ T7168] Uninit was stored to memory at: [ 2363.604611][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2363.604611][ T7168] __msan_chain_origin+0x57/0xa0 [ 2363.604611][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2363.604611][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2363.604611][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2363.604611][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2363.604611][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2363.604611][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2363.604611][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2363.604611][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.115256][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.115256][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.115256][ T7168] [ 2364.115256][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2364.115256][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2364.115256][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2364.310496][ T7168] not chained 1520000 origins [ 2364.315058][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2364.315058][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2364.315058][ T7168] Call Trace: [ 2364.315058][ T7168] dump_stack+0x21c/0x280 [ 2364.315058][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2364.315058][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2364.315058][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2364.315058][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2364.315058][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2364.315058][ T7168] ? _copy_from_user+0x201/0x310 [ 2364.315058][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2364.315058][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.315058][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.315058][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.315058][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.315058][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2364.315058][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2364.315058][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2364.315058][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.315058][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2364.315058][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2364.315058][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.315058][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.315058][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.315058][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.315058][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.315058][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.315058][ T7168] RIP: 0023:0xf7fc7549 [ 2364.315058][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2364.315058][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2364.315058][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2364.315058][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2364.315058][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2364.315058][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2364.315058][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2364.315058][ T7168] Uninit was stored to memory at: [ 2364.315058][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.315058][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.315058][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.315058][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.315058][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.315058][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.315058][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.315058][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.315058][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.315058][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.315058][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.315058][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.315058][ T7168] [ 2364.315058][ T7168] Uninit was stored to memory at: [ 2364.315058][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.315058][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.315058][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.315058][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.315058][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.315058][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.315058][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.315058][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.315058][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.315058][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.315058][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.315058][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.315058][ T7168] [ 2364.315058][ T7168] Uninit was stored to memory at: [ 2364.315058][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.315058][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.315058][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.315058][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.701987][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.701987][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.701987][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.716363][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.716363][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.716363][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.716363][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.716363][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.716363][ T7168] [ 2364.716363][ T7168] Uninit was stored to memory at: [ 2364.716363][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.716363][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.716363][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.716363][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.716363][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.716363][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.716363][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.716363][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.716363][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.716363][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.716363][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.716363][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.716363][ T7168] [ 2364.716363][ T7168] Uninit was stored to memory at: [ 2364.716363][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.716363][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.716363][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.716363][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.716363][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.716363][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.716363][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.716363][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.716363][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.716363][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.716363][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.716363][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.716363][ T7168] [ 2364.716363][ T7168] Uninit was stored to memory at: [ 2364.716363][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.716363][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.716363][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.716363][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.716363][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.716363][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.716363][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.716363][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.716363][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.716363][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.716363][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.716363][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.716363][ T7168] [ 2364.716363][ T7168] Uninit was stored to memory at: [ 2364.716363][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2364.716363][ T7168] __msan_chain_origin+0x57/0xa0 [ 2364.716363][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2364.716363][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2364.716363][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2364.716363][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2364.716363][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2364.716363][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2364.716363][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2364.716363][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2364.716363][ T7168] do_SYSENTER_32+0x73/0x90 [ 2364.716363][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2364.716363][ T7168] [ 2364.716363][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2364.716363][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2364.716363][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2365.199917][ T7168] not chained 1530000 origins [ 2365.204616][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2365.204844][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.214950][ T7168] Call Trace: [ 2365.214950][ T7168] dump_stack+0x21c/0x280 [ 2365.214950][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2365.214950][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2365.214950][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2365.214950][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2365.214950][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2365.214950][ T7168] ? _copy_from_user+0x201/0x310 [ 2365.214950][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2365.214950][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.214950][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.214950][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.214950][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.214950][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2365.214950][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2365.214950][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2365.214950][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.214950][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2365.214950][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2365.214950][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.214950][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.214950][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.214950][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.214950][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.214950][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.214950][ T7168] RIP: 0023:0xf7fc7549 [ 2365.214950][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2365.214950][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2365.214950][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2365.387922][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2365.395337][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2365.395337][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2365.395337][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Uninit was stored to memory at: [ 2365.395337][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2365.395337][ T7168] __msan_chain_origin+0x57/0xa0 [ 2365.395337][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2365.395337][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2365.395337][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2365.395337][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2365.395337][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2365.395337][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2365.395337][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2365.395337][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2365.395337][ T7168] do_SYSENTER_32+0x73/0x90 [ 2365.395337][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2365.395337][ T7168] [ 2365.395337][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2365.395337][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2365.395337][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2366.079639][ T7168] not chained 1540000 origins [ 2366.084335][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2366.084843][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2366.084843][ T7168] Call Trace: [ 2366.084843][ T7168] dump_stack+0x21c/0x280 [ 2366.084843][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2366.084843][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2366.084843][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2366.125769][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2366.125769][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2366.125769][ T7168] ? _copy_from_user+0x201/0x310 [ 2366.125769][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2366.125769][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.125769][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.125769][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.125769][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.125769][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2366.125769][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2366.125769][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2366.125769][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.125769][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2366.125769][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2366.195102][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.195102][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.195102][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.195102][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.195102][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.195102][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.195102][ T7168] RIP: 0023:0xf7fc7549 [ 2366.195102][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2366.195102][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2366.195102][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2366.195102][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2366.195102][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2366.195102][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2366.195102][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2366.195102][ T7168] Uninit was stored to memory at: [ 2366.195102][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.195102][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.195102][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.195102][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.195102][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.195102][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.195102][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.195102][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.195102][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.195102][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.195102][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.195102][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.195102][ T7168] [ 2366.195102][ T7168] Uninit was stored to memory at: [ 2366.195102][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.195102][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.195102][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.195102][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.195102][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.195102][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.195102][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.195102][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.195102][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.195102][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.195102][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.195102][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.195102][ T7168] [ 2366.195102][ T7168] Uninit was stored to memory at: [ 2366.195102][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.195102][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.195102][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.195102][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.195102][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.195102][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.195102][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.195102][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.489780][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.489780][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.497908][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.505349][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.505349][ T7168] [ 2366.515115][ T7168] Uninit was stored to memory at: [ 2366.518505][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.525027][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.530382][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.535047][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.537963][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.544932][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.544932][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.555025][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.557840][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.565097][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.565097][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.575027][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.577845][ T7168] [ 2366.584938][ T7168] Uninit was stored to memory at: [ 2366.584938][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.595057][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.597947][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.604957][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.604957][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.615054][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.618120][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.625095][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.625095][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.635076][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.635076][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.646689][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.646689][ T7168] [ 2366.655068][ T7168] Uninit was stored to memory at: [ 2366.658142][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.664950][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.664950][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.675068][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.677966][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.685108][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.685108][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.695023][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.697842][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.704948][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.704948][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.717965][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.717965][ T7168] [ 2366.725293][ T7168] Uninit was stored to memory at: [ 2366.725293][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2366.735099][ T7168] __msan_chain_origin+0x57/0xa0 [ 2366.738589][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2366.745031][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2366.751043][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2366.755095][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2366.757953][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2366.764943][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2366.764943][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2366.778180][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2366.778180][ T7168] do_SYSENTER_32+0x73/0x90 [ 2366.784941][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2366.784941][ T7168] [ 2366.795038][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2366.797892][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2366.805126][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2367.023982][ T7168] not chained 1550000 origins [ 2367.024849][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2367.024849][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2367.024849][ T7168] Call Trace: [ 2367.024849][ T7168] dump_stack+0x21c/0x280 [ 2367.024849][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2367.024849][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2367.024849][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2367.024849][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2367.024849][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2367.024849][ T7168] ? _copy_from_user+0x201/0x310 [ 2367.024849][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2367.024849][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2367.024849][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2367.024849][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] RIP: 0023:0xf7fc7549 [ 2367.024849][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2367.024849][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2367.024849][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2367.024849][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2367.024849][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2367.024849][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2367.024849][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Uninit was stored to memory at: [ 2367.024849][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2367.024849][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.024849][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.024849][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.024849][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.024849][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2367.024849][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2367.024849][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2367.024849][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2367.024849][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2367.024849][ T7168] do_SYSENTER_32+0x73/0x90 [ 2367.024849][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2367.024849][ T7168] [ 2367.024849][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2367.024849][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2367.024849][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2367.957136][ T7168] not chained 1560000 origins [ 2367.961837][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2367.964848][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2367.977559][ T7168] Call Trace: [ 2367.977559][ T7168] dump_stack+0x21c/0x280 [ 2367.977559][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2367.977559][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2367.977559][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2367.977559][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2367.977559][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2367.977559][ T7168] ? _copy_from_user+0x201/0x310 [ 2367.977559][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2367.977559][ T7168] __msan_chain_origin+0x57/0xa0 [ 2367.977559][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2367.977559][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2367.977559][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2367.977559][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2367.977559][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2368.055031][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2368.055031][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.055031][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2368.055031][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2368.055031][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.055031][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.055031][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.055031][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.055031][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.055031][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.055031][ T7168] RIP: 0023:0xf7fc7549 [ 2368.055031][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2368.124987][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2368.124987][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2368.124987][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2368.124987][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2368.124987][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2368.124987][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2368.124987][ T7168] Uninit was stored to memory at: [ 2368.124987][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.124987][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.195270][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.195270][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.195270][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.209851][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.209851][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.209851][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.209851][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.209851][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.209851][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.209851][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.209851][ T7168] [ 2368.209851][ T7168] Uninit was stored to memory at: [ 2368.209851][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.209851][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.209851][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.209851][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.209851][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.209851][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.209851][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.209851][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.209851][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.209851][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.209851][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.209851][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.316416][ T7168] [ 2368.316416][ T7168] Uninit was stored to memory at: [ 2368.325147][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.335019][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.335374][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.345235][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.345235][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.345235][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.358808][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.365111][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.365111][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.375139][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.375139][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.385118][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.387559][ T7168] [ 2368.387559][ T7168] Uninit was stored to memory at: [ 2368.395021][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.405192][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.405192][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.414998][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.414998][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.414998][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.425107][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.425107][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.437730][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.445129][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.445129][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.454989][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.454989][ T7168] [ 2368.454989][ T7168] Uninit was stored to memory at: [ 2368.465490][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.474975][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.474975][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.485117][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.489952][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.489952][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.495132][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.505024][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.510476][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.515026][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.515026][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.525238][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.525238][ T7168] [ 2368.525238][ T7168] Uninit was stored to memory at: [ 2368.534983][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.545097][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.545097][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.555145][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.555145][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.565204][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.565204][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.574986][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.574986][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.585202][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.585202][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.595635][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.595635][ T7168] [ 2368.605088][ T7168] Uninit was stored to memory at: [ 2368.605088][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2368.615046][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.620429][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.625116][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2368.625116][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2368.634972][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2368.634972][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2368.645225][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2368.645225][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2368.654967][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2368.654967][ T7168] do_SYSENTER_32+0x73/0x90 [ 2368.665103][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2368.665103][ T7168] [ 2368.675179][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2368.675179][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2368.685125][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2368.937485][ T7168] not chained 1570000 origins [ 2368.942193][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2368.945028][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2368.945028][ T7168] Call Trace: [ 2368.945028][ T7168] dump_stack+0x21c/0x280 [ 2368.945028][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2368.945028][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2368.945028][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2368.945028][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2368.985100][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2368.985100][ T7168] ? _copy_from_user+0x201/0x310 [ 2368.985100][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2368.985100][ T7168] __msan_chain_origin+0x57/0xa0 [ 2368.985100][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2368.985100][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.020475][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.020475][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2369.027711][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2369.035984][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2369.035984][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.045032][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2369.047431][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2369.055827][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.055827][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.069289][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.075073][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.077556][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.077556][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.087400][ T7168] RIP: 0023:0xf7fc7549 [ 2369.087400][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2369.107381][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2369.115684][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2369.127482][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2369.136043][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2369.145064][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2369.147850][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2369.155779][ T7168] Uninit was stored to memory at: [ 2369.167390][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.167390][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.177544][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.177544][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.185062][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.189254][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.195795][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.195795][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.205044][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.209911][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.215781][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.215781][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.227409][ T7168] [ 2369.227409][ T7168] Uninit was stored to memory at: [ 2369.235713][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.235713][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.248104][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.248104][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.255427][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.255427][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.265054][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.268175][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.275231][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.285055][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.289745][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.289745][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.296992][ T7168] [ 2369.296992][ T7168] Uninit was stored to memory at: [ 2369.307962][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.309125][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.315108][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.319550][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.327847][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.327847][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.335246][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.335246][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.347925][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.355161][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.355161][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.355161][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.368416][ T7168] [ 2369.368416][ T7168] Uninit was stored to memory at: [ 2369.375154][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.375154][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.387894][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.387894][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.395197][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.401029][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.405060][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.411507][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.415136][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.425056][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.429755][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.435159][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.435159][ T7168] [ 2369.435159][ T7168] Uninit was stored to memory at: [ 2369.447880][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.447880][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.455237][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.455237][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.467859][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.467859][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.476018][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.485057][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.487981][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.495170][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.495170][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.505052][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.509776][ T7168] [ 2369.513953][ T7168] Uninit was stored to memory at: [ 2369.516992][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.525044][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.528169][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.535048][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.536987][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.541557][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.547934][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.555173][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.555173][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.565010][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.567884][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.575243][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.575243][ T7168] [ 2369.575243][ T7168] Uninit was stored to memory at: [ 2369.588272][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2369.595139][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.595139][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.605065][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.607967][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.607967][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2369.617683][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2369.625080][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2369.629787][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2369.635570][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2369.635570][ T7168] do_SYSENTER_32+0x73/0x90 [ 2369.645131][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2369.649807][ T7168] [ 2369.649807][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2369.655537][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2369.665068][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2369.901912][ T7168] not chained 1580000 origins [ 2369.904850][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2369.904850][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2369.923196][ T7168] Call Trace: [ 2369.923196][ T7168] dump_stack+0x21c/0x280 [ 2369.923196][ T7168] kmsan_internal_chain_origin+0x6f/0x130 [ 2369.923196][ T7168] ? do_user_addr_fault+0x1045/0x16d0 [ 2369.923196][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2369.923196][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2369.923196][ T7168] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2369.923196][ T7168] ? _copy_from_user+0x201/0x310 [ 2369.923196][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2369.923196][ T7168] __msan_chain_origin+0x57/0xa0 [ 2369.923196][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2369.923196][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2369.923196][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2369.923196][ T7168] ? kmsan_internal_set_origin+0x85/0xc0 [ 2369.923196][ T7168] ? __msan_poison_alloca+0xe9/0x110 [ 2369.923196][ T7168] ? __sys_recvmmsg+0xb5/0x5f0 [ 2370.004967][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.004967][ T7168] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2370.004967][ T7168] ? kmsan_get_metadata+0x116/0x180 [ 2370.004967][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.004967][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.004967][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.004967][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.043240][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.045019][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.045019][ T7168] RIP: 0023:0xf7fc7549 [ 2370.045019][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2370.045019][ T7168] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2370.045019][ T7168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2370.045019][ T7168] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2370.045019][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2370.045019][ T7168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2370.045019][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2370.045019][ T7168] Uninit was stored to memory at: [ 2370.045019][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.045019][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.045019][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.045019][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.045019][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.045019][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.045019][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.045019][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.045019][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.045019][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.045019][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.045019][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.045019][ T7168] [ 2370.196594][ T7168] Uninit was stored to memory at: [ 2370.196594][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.196594][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.196594][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.196594][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.196594][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.196594][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.196594][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.196594][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.196594][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.196594][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.196594][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.196594][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.196594][ T7168] [ 2370.196594][ T7168] Uninit was stored to memory at: [ 2370.196594][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.196594][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.196594][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.196594][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.196594][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.196594][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.196594][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.196594][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.196594][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.196594][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.196594][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.196594][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.196594][ T7168] [ 2370.196594][ T7168] Uninit was stored to memory at: [ 2370.196594][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.196594][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.196594][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.196594][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.196594][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.196594][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.196594][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.196594][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.196594][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.196594][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.196594][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.196594][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.196594][ T7168] [ 2370.196594][ T7168] Uninit was stored to memory at: [ 2370.196594][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.196594][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.196594][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.196594][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.196594][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.435662][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.439750][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.439750][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.439750][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.439750][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.439750][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.439750][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.439750][ T7168] [ 2370.439750][ T7168] Uninit was stored to memory at: [ 2370.439750][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.439750][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.439750][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.439750][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.439750][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.439750][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.439750][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.439750][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.439750][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.439750][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.439750][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.439750][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.439750][ T7168] [ 2370.439750][ T7168] Uninit was stored to memory at: [ 2370.439750][ T7168] kmsan_internal_chain_origin+0xad/0x130 [ 2370.439750][ T7168] __msan_chain_origin+0x57/0xa0 [ 2370.439750][ T7168] __get_compat_msghdr+0x6db/0x9d0 [ 2370.439750][ T7168] get_compat_msghdr+0x108/0x2b0 [ 2370.439750][ T7168] do_recvmmsg+0xdc7/0x22e0 [ 2370.439750][ T7168] __sys_recvmmsg+0x340/0x5f0 [ 2370.439750][ T7168] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2370.439750][ T7168] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2370.439750][ T7168] __do_fast_syscall_32+0x129/0x180 [ 2370.439750][ T7168] do_fast_syscall_32+0x6a/0xc0 [ 2370.439750][ T7168] do_SYSENTER_32+0x73/0x90 [ 2370.439750][ T7168] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2370.439750][ T7168] [ 2370.439750][ T7168] Local variable ----msg_sys@do_recvmmsg created at: [ 2370.439750][ T7168] do_recvmmsg+0xc2/0x22e0 [ 2370.439750][ T7168] do_recvmmsg+0xc2/0x22e0 23:01:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffcd1, &(0x7f0000000000)={0x0}}, 0x0) 23:01:51 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_CAPACITY(r1, 0x5451) 23:01:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 23:01:51 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102040, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x28a1000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8c35946d472a967f, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 23:01:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:01:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, 0x0) 23:01:51 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x39}) 23:01:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:01:51 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000000040, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 23:01:51 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001340)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 23:01:52 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) 23:01:52 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) setrlimit(0x1, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) 23:01:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioprio_set$uid(0x2, r1, 0x0) 23:01:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x121c}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 23:01:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:01:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x30}) 23:01:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000200)) 23:01:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00000acaffffe00000f69c61fc3ba186a200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, 0x0) 23:01:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 23:01:53 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) 23:01:53 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) 23:01:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) close(r1) r3 = socket(0x2, 0x80001, 0x0) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f00000000c0)=@abs, 0x6e) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 23:01:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 23:01:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:01:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) 23:01:54 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 23:01:54 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400000) 23:01:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:01:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:01:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 23:01:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x5452, &(0x7f00000000c0)) 23:01:55 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$inet6(r1, 0x0, 0x0, 0x80000) 23:01:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x200000d4) 23:01:55 executing program 5: r0 = socket(0x10, 0x2, 0x2) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:01:55 executing program 2: r0 = socket(0xa, 0x3, 0x8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001740)={&(0x7f0000000300), 0xff3a, &(0x7f0000001700)={0x0}}, 0x0) 23:01:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0}}, 0x0) 23:01:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r3) connect$inet6(r3, &(0x7f0000001440)={0xa, 0x0, 0x0, @local, 0x5e}, 0x1c) dup2(r3, r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x504}}, 0x0) 23:01:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)) 23:01:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:01:55 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000940), 0x8) r1 = dup(r0) flock(r1, 0x8) 23:01:56 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:01:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)) 23:01:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 23:01:56 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 23:01:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x1049a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 23:01:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) tkill(r1, 0x1000000000016) 23:01:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000018c0)={&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4008084) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:01:57 executing program 0: open(&(0x7f0000000340)='./file0\x00', 0x40, 0x40) 23:01:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4004800) 23:01:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:01:57 executing program 4: r0 = gettid() r1 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffffc2}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) 23:01:57 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:01:58 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) 23:01:58 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000001cc0)={0x2, @ethernet={0x0, @local}, @nfc, @tipc=@id}) 23:01:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:01:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000240)=""/35, 0x23) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 23:01:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:01:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() write$P9_RGETATTR(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 23:01:58 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) 23:01:58 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 23:01:58 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f00000002c0)) 23:01:59 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 23:01:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = dup(r0) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 23:01:59 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:01:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) ioctl$FIDEDUPERANGE(r1, 0x5450, 0x0) 23:01:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 23:01:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) 23:01:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) dup2(r2, r1) ioctl$KDFONTOP_COPY(r1, 0x540b, 0x0) 23:01:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x540a, 0x0) 23:01:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8953, &(0x7f0000000240)) 23:02:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 23:02:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x538) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 23:02:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, 0x0) tkill(r0, 0x1000000000016) 23:02:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000) 23:02:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x6, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x6, 0x0, [0x20000a40, 0x0, 0x0, 0x20000cd4, 0x20000f80], 0x0, 0x0, 0x0}, 0x108) 23:02:00 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0x5450, 0x0) 23:02:01 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local}, 0x10) 23:02:01 executing program 0: r0 = geteuid() setfsuid(r0) 23:02:01 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 23:02:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:02:01 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2005c800, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RLCREATE(r2, 0x0, 0x0) close(r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket(0xa, 0x2, 0x0) tkill(r0, 0x13) [ 2381.263328][ T7462] device lo entered promiscuous mode [ 2381.290398][ T7460] device lo left promiscuous mode [ 2381.341565][ T7466] device lo entered promiscuous mode [ 2381.366626][ T7460] device lo left promiscuous mode 23:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 23:02:02 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 23:02:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:02:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) tkill(r2, 0x8001004000000016) 23:02:02 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:02:02 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0) 23:02:02 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 23:02:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) syncfs(r0) 23:02:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) fdatasync(r0) 23:02:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 23:02:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) 23:02:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xf) r2 = gettid() tkill(r2, 0x1000000000016) 23:02:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:02:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) dup2(r2, r1) ioctl$TCXONC(r1, 0x540a, 0x0) 23:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) 23:02:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:02:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 23:02:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$9p(r0, 0x0, 0x0) 23:02:08 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 23:02:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) 23:02:08 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:02:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) ioctl$TCSETXW(r1, 0x5428, 0x0) 23:02:08 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x5450, 0x0) 23:02:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = dup(r1) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') renameat(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') 23:02:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:02:08 executing program 0: r0 = socket(0x2, 0x3, 0x3) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, 0xe0}, 0x2000004c, &(0x7f0000000080)={0x0}}, 0x0) 23:02:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41, 0x0) write$char_raw(r0, 0x0, 0x0) 23:02:09 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='uid_map\x00') r3 = dup2(r0, r1) r4 = dup2(r3, r2) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 23:02:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:02:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)) 23:02:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x28, &(0x7f0000002540)={0x0}}, 0x0) 23:02:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000005c0)=0x80) dup2(r0, r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:02:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="04"], 0x118}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x126, 0x0, 0xffffffffffffffd7) 23:02:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='sh\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080), 0x14) 23:02:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) 23:02:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 23:02:10 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000000080)={0x2, @in={0x2, 0x0, @multicast1}, @ethernet={0x0, @dev}, @hci}) 23:02:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 23:02:10 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 23:02:10 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 23:02:10 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 23:02:10 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xffffffff) recvfrom$inet6(r0, 0x0, 0x0, 0x10140, 0x0, 0x0) 23:02:11 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 23:02:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0x14, 0x0, 0x1300) 23:02:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 23:02:11 executing program 0: r0 = socket(0x2, 0x80002, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:02:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000900)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 23:02:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl$TIOCGPKT(r1, 0x80045438, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 23:02:13 executing program 3: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, 0x0, 0x0) 23:02:13 executing program 4: r0 = timerfd_create(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$tun(r1, 0x0, 0x115) 23:02:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000010c0)=""/230) 23:02:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) 23:02:17 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x20004005) 23:02:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:17 executing program 1: r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000640)) 23:02:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_RESIZE(r0, 0x5450, 0x0) 23:02:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 23:02:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x5451, 0x0) 23:02:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x5f) fcntl$F_GET_RW_HINT(r1, 0xf, &(0x7f00000000c0)) 23:02:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 23:02:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000440), 0x8, 0x0) dup2(r0, r1) write$cgroup_type(r1, 0x0, 0x0) 23:02:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x6, 0x0, 0x0) 23:02:17 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r1) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'ip_vti0\x00'}) 23:02:18 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8c0) 23:02:18 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:02:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:02:18 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001a40)) 23:02:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:19 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:19 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x14, 0x0, 0x0) 23:02:19 executing program 5: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 23:02:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5450, 0x0) 23:02:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:02:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$EVIOCGBITSND(r1, 0x5451, 0x0) 23:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 23:02:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x40, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000180)) 23:02:20 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:02:20 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:02:20 executing program 4: r0 = socket(0x2, 0x3, 0x7f) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x1b, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) 23:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:02:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b942, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 23:02:20 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x8, 0x0) 23:02:20 executing program 2: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x141, &(0x7f0000000200)={&(0x7f00000005c0)={0x1034, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x2f5}, @generic="5c1cd6cbf22a9e", @nested={0x1010}]}, 0x1034}}, 0x0) 23:02:21 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 23:02:21 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) 23:02:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, 0x0) 23:02:21 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:02:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x5452, &(0x7f0000000100)) 23:02:21 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f00000031c0)={0x0}}, 0x8000) 23:02:21 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:02:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80004519, 0x0) 23:02:21 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 23:02:22 executing program 5: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:02:22 executing program 0: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:02:22 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1082, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 23:02:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x84044) 23:02:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x400) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:02:22 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\xfa+\x8ev\xab%-D\x14/\xe2\xf6\xf1[\x8a\xbc\x1f\xbc\x96R[\'\x03\xba\x1a\xee\x83\x9f\xe3\x90X\xac\x96\xb4\x13O;\xf2\xba\tl\x1fq\x9c\xa0\x1b\xfe\xc1\xbe\xe6\x92\xfdM\x059f\xf9+\xe8\xc0\xc9\xfe}g\x85IX\xde\xba\xca\xdb\x04q\xfe\x0esjI\xb1\x93\xfc\n\x00$4\xe1\x18@F\xf7\x8a/e\xdb:\x87\x0e\x1ev\xe4\\\xebU\x03\x81\xda\n\x1d~\xc4\xce\xda\xe9J\xa3\xa03\"\xed\fY\xb0J\xacr\xa2\x19\xcb\xcaz\xe54W\xe3\x81\xea\x85\xcdL]q3B\x00D\x9d\x81P\xb2\x92\xec\xe2m\x1a \v\xd9\x99\xd7:A\x84\x98\xa4\xbe\x16W\b\\2\xd789/T\x16]\xbd\xd7\x7fH\rw!D\"(\xc1q\xf6O\xd3', 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:02:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x5411, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 23:02:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KDMKTONE(r0, 0x541b, 0x20000000) 23:02:23 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x5427, 0x0) 23:02:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)=@hci={0x1f, 0x1, 0x3}, 0x80) 23:02:23 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chroot(0x0) 23:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, 0x0, 0x0) 23:02:23 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1600bd60, &(0x7f0000000000), 0x4) 23:02:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$EVIOCGABS3F(r3, 0x5450, 0x0) 23:02:23 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet6(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) [ 2403.500449][ T7822] ===================================================== [ 2403.504884][ T7822] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x585/0x3a40 [ 2403.504884][ T7822] CPU: 0 PID: 7822 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2403.504884][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.504884][ T7822] Call Trace: [ 2403.504884][ T7822] dump_stack+0x21c/0x280 [ 2403.504884][ T7822] kmsan_report+0xf7/0x1e0 [ 2403.504884][ T7822] __msan_warning+0x5f/0xa0 [ 2403.504884][ T7822] ip_tunnel_xmit+0x585/0x3a40 [ 2403.504884][ T7822] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2403.504884][ T7822] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2403.504884][ T7822] ? skb_push+0x15b/0x250 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ipgre_xmit+0x1261/0x1380 [ 2403.504884][ T7822] ? ipgre_close+0x280/0x280 [ 2403.504884][ T7822] xmit_one+0x1fc/0x760 [ 2403.504884][ T7822] __dev_queue_xmit+0x3310/0x4490 [ 2403.504884][ T7822] dev_queue_xmit+0x4b/0x60 [ 2403.504884][ T7822] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 2403.504884][ T7822] packet_sendmsg+0x86e9/0x99c0 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_internal_set_origin+0x85/0xc0 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2403.504884][ T7822] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2403.504884][ T7822] ? aa_sk_perm+0x99e/0xed0 [ 2403.504884][ T7822] ? packet_getsockopt+0x1110/0x1110 [ 2403.504884][ T7822] __sys_sendto+0x9dc/0xc80 [ 2403.504884][ T7822] __se_sys_sendto+0x107/0x130 [ 2403.504884][ T7822] __ia32_sys_sendto+0x6e/0x90 [ 2403.504884][ T7822] __do_fast_syscall_32+0x129/0x180 [ 2403.504884][ T7822] do_fast_syscall_32+0x6a/0xc0 [ 2403.504884][ T7822] do_SYSENTER_32+0x73/0x90 [ 2403.504884][ T7822] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2403.504884][ T7822] RIP: 0023:0xf7fc7549 [ 2403.504884][ T7822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2403.504884][ T7822] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2403.504884][ T7822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2403.504884][ T7822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000080 [ 2403.504884][ T7822] RBP: 0000000000000080 R08: 0000000000000000 R09: 0000000000000000 [ 2403.504884][ T7822] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2403.504884][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2403.504884][ T7822] [ 2403.504884][ T7822] Uninit was created at: [ 2403.504884][ T7822] kmsan_internal_poison_shadow+0x5c/0xf0 [ 2403.504884][ T7822] kmsan_slab_alloc+0x8d/0xe0 [ 2403.504884][ T7822] __kmalloc_node_track_caller+0x7de/0x1320 [ 2403.504884][ T7822] __alloc_skb+0x309/0xae0 [ 2403.504884][ T7822] alloc_skb_with_frags+0x1f3/0xc20 [ 2403.504884][ T7822] sock_alloc_send_pskb+0xc73/0xe40 [ 2403.504884][ T7822] packet_sendmsg+0x6a93/0x99c0 [ 2403.504884][ T7822] __sys_sendto+0x9dc/0xc80 [ 2403.504884][ T7822] __se_sys_sendto+0x107/0x130 [ 2403.504884][ T7822] __ia32_sys_sendto+0x6e/0x90 [ 2403.504884][ T7822] __do_fast_syscall_32+0x129/0x180 [ 2403.504884][ T7822] do_fast_syscall_32+0x6a/0xc0 [ 2403.504884][ T7822] do_SYSENTER_32+0x73/0x90 [ 2403.504884][ T7822] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2403.504884][ T7822] ===================================================== [ 2403.504884][ T7822] Disabling lock debugging due to kernel taint [ 2403.504884][ T7822] Kernel panic - not syncing: panic_on_warn set ... [ 2403.504884][ T7822] CPU: 0 PID: 7822 Comm: syz-executor.5 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 2403.504884][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.504884][ T7822] Call Trace: [ 2403.504884][ T7822] dump_stack+0x21c/0x280 [ 2403.504884][ T7822] panic+0x4c8/0xea7 [ 2403.504884][ T7822] ? add_taint+0x17c/0x210 [ 2403.504884][ T7822] kmsan_report+0x1da/0x1e0 [ 2403.504884][ T7822] __msan_warning+0x5f/0xa0 [ 2403.504884][ T7822] ip_tunnel_xmit+0x585/0x3a40 [ 2403.504884][ T7822] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2403.504884][ T7822] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2403.504884][ T7822] ? skb_push+0x15b/0x250 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ipgre_xmit+0x1261/0x1380 [ 2403.504884][ T7822] ? ipgre_close+0x280/0x280 [ 2403.504884][ T7822] xmit_one+0x1fc/0x760 [ 2403.504884][ T7822] __dev_queue_xmit+0x3310/0x4490 [ 2403.504884][ T7822] dev_queue_xmit+0x4b/0x60 [ 2403.504884][ T7822] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 2403.504884][ T7822] packet_sendmsg+0x86e9/0x99c0 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_internal_set_origin+0x85/0xc0 [ 2403.504884][ T7822] ? kmsan_get_metadata+0x116/0x180 [ 2403.504884][ T7822] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2403.504884][ T7822] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2403.504884][ T7822] ? aa_sk_perm+0x99e/0xed0 [ 2403.504884][ T7822] ? packet_getsockopt+0x1110/0x1110 [ 2403.504884][ T7822] __sys_sendto+0x9dc/0xc80 [ 2403.504884][ T7822] __se_sys_sendto+0x107/0x130 [ 2403.504884][ T7822] __ia32_sys_sendto+0x6e/0x90 [ 2403.504884][ T7822] __do_fast_syscall_32+0x129/0x180 [ 2403.504884][ T7822] do_fast_syscall_32+0x6a/0xc0 [ 2403.504884][ T7822] do_SYSENTER_32+0x73/0x90 [ 2403.504884][ T7822] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2403.504884][ T7822] RIP: 0023:0xf7fc7549 [ 2403.504884][ T7822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2403.504884][ T7822] RSP: 002b:00000000f55c10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2403.504884][ T7822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2403.504884][ T7822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000080 [ 2403.504884][ T7822] RBP: 0000000000000080 R08: 0000000000000000 R09: 0000000000000000 [ 2403.504884][ T7822] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2403.504884][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2403.504884][ T7822] Kernel Offset: disabled [ 2403.504884][ T7822] Rebooting in 86400 seconds..