0010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @private, r2}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) [ 368.486068][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.556341][T12215] ptrace attach of "/root/syz-executor.2"[12211] was attempted by "/root/syz-executor.2"[12215] 07:27:21 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080), &(0x7f0000000100)) 07:27:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x49c0}, 0x18) 07:27:21 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/170, 0xaa}], 0x1, 0x0, 0x0) 07:27:21 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd2710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0x120000374}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 07:27:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="53000000fcfffffffdffffff0200040000009600000000000000a40000000000348a67b68c4cc357f70d748bc0ec6c000000001b1bab0525dcda9f60dd1685812c76d61bd85f96051133e085e09d08b7dc5c1e23926250ec", 0x58}], 0x1) 07:27:21 executing program 1: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='}&*\\/!\xb8-D,@!(\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1) [ 369.339903][ T35] audit: type=1800 audit(1625383641.706:75): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14240 res=0 errno=0 07:27:21 executing program 5: r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='\xb8\xab\xca\xa8#Yx\xef\xfd\x83*+\xdb\x8d9,2\xd3E\tr\xab\xb7\xb3t\xef\x828K-\xce\xcca\x96K\x9dG\x97\x96\xd8\xab\xe2y:\x93\xe1\x9b\xeb\xb6[a\x93\xdd_\x1f\x94\xa8D\xe1iX\n\xfff\xc1\xbf\x04U\x11K\xe4\x1br\xd2\xb2\\\xf3\xd7q\xf2\xd2\xcc;\xe5\x1eu\x8f\x9a\xdb\t0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3ff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff0}, 0xfffffffc) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 07:27:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x64}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x12a}], 0x1000009e, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) [ 371.020509][T12267] mmap: syz-executor.4 (12267) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 07:27:23 executing program 1: clock_gettime(0x6, &(0x7f00000000c0)) clock_getres(0x7, 0x0) clock_gettime(0x0, 0x0) [ 371.197141][T12274] IPVS: ftp: loaded support on port[0] = 21 [ 371.283903][T12274] vxcan1 speed is unknown, defaulting to 1000 07:27:23 executing program 4: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 07:27:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000001f000000010000000200000002800000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[]) 07:27:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r4 = dup3(r1, r2, 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="050409fcb9f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d131066321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x3, 0x0, 0x2f) 07:27:24 executing program 3: unshare(0x62000200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8942, &(0x7f0000000680)='lo:\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 07:27:24 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e899") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 372.021765][T12275] IPVS: ftp: loaded support on port[0] = 21 07:27:24 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 07:27:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) [ 372.354138][T12318] IPVS: ftp: loaded support on port[0] = 21 [ 372.530958][T12318] vxcan1 speed is unknown, defaulting to 1000 [ 373.379168][ T8451] Bluetooth: hci2: command 0x0406 tx timeout 07:27:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x961000, 0x0) preadv2(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, 0x0, 0x0, 0x0) 07:27:26 executing program 1: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 07:27:26 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e899") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x8b, 0x0, 0x0, 0x0, 0x0) 07:27:26 executing program 4: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(0xffffffffffffffff, 0x1d, 0x0) setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 07:27:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000004fc0), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x40}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '\x00'}}]}}) [ 374.592326][T12376] 9pnet: Insufficient options for proto=fd 07:27:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x8b, 0x0, 0x0, 0x0, 0x0) 07:27:27 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e899") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)=@ethtool_gfeatures}) 07:27:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x156, &(0x7f0000001340)="c4c691019919da078a0098d1e0a59320ff79b040f762910016775a8454cc16dc38f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689bce0e2db60713a3a7eeba5c9c6a47312334c2a97a4837714569255346f930000ffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2c43a2316418ba9eb1f8fac57719b6650c7016af47d3160960f4dc0f5e233b32d191e7e4038ed607016ac06e8214ed7d77cea361915907969ff9f43a5aba17ec18f82611bd8eaa876fcc5ff9eac52567ecc1e30746c21060f7aeee1160a26ea18d388ae82180105572516041514566a35650c3f8c39388cc5b3aab2edc6a68af8873f3ddf84521dc060955bde2fff5bf4247701e2745a31ffdc0f3d96521fd6d5707adcdc066169672d06bee71dc1993f83c79c76ff9a270880bd60ff3b1fadf"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 07:27:27 executing program 1: r0 = fsopen(&(0x7f0000002500)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000002540)='rootcontext', &(0x7f0000002580)='\f', 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 07:27:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0000084000000000000204"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:27:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xbb, &(0x7f0000000140)="c4c6912d45366bf69e698ec4ae37cd2ef7ef62bedb2e41986063b9a8c03dd438ed2fedf97a84b1fe8dd90ba030c1612ee3ae3f1f931cc7f2fdb8364b1ba8fdf90f82b461ed1202b8a46facdd315e2aa6172083c8405a5b5c69debbd3cac6f60baa9dbf1b9c0a36c319fd1d9e24d942f139adf460d97999b1441595289a3549f9c070fbb58a2e32e2df0fd44836fd266f2deda6e91243ee74dc0a4bdd1b70ec01d2ddf16b067ad623755a32beffb955239c45bb2fb14b742e9d1955"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 375.482190][T12400] ptrace attach of "/root/syz-executor.4"[12397] was attempted by "/root/syz-executor.4"[12400] 07:27:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) shutdown(r1, 0x0) 07:27:28 executing program 3: mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000300)='./control\x00') setreuid(0xee00, r1) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') 07:27:28 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x6a53, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000100)) [ 375.841661][T12407] ptrace attach of "/root/syz-executor.5"[12406] was attempted by "/root/syz-executor.5"[12407] 07:27:28 executing program 5: prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002ea000/0x3000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0xe, 0xffffffffffffffff) 07:27:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clone(0x530a0480, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x322) 07:27:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="10100000100009000000000000000000256acdb9b2fcad01d70ac6"], 0x1010}], 0x1}, 0x0) 07:27:28 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:29 executing program 1: setreuid(0xffffffffffffffff, 0xee01) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 07:27:29 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, &(0x7f0000048000), 0x0) [ 376.994128][T12438] IPVS: ftp: loaded support on port[0] = 21 [ 377.231060][T12438] vxcan1 speed is unknown, defaulting to 1000 07:27:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0000000018eaed30899e9d"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 377.857339][T12461] IPVS: ftp: loaded support on port[0] = 21 [ 377.939088][T12461] vxcan1 speed is unknown, defaulting to 1000 [ 378.811096][T12436] not chained 10000 origins [ 378.815646][T12436] CPU: 1 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 378.824428][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.834516][T12436] Call Trace: [ 378.837810][T12436] dump_stack+0x24c/0x2e0 [ 378.842253][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 378.848049][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 378.853706][T12436] ? kmsan_get_metadata+0x116/0x180 [ 378.858932][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 378.864586][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.870664][T12436] ? kmsan_get_metadata+0x116/0x180 [ 378.875888][T12436] ? kmsan_get_metadata+0x116/0x180 [ 378.881107][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 378.886933][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.893017][T12436] ? kmsan_get_metadata+0x116/0x180 [ 378.898231][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 378.903876][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.909955][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 378.915257][T12436] ? _copy_from_user+0x1fd/0x300 [ 378.920264][T12436] __msan_chain_origin+0x54/0xa0 [ 378.925202][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 378.930355][T12436] get_compat_msghdr+0x108/0x2b0 [ 378.935310][T12436] do_recvmmsg+0xdc1/0x22d0 [ 378.939886][T12436] ? __msan_get_context_state+0x9/0x20 [ 378.945346][T12436] ? kfree+0x29/0x11f0 [ 378.949451][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.955519][T12436] ? kmsan_get_metadata+0x116/0x180 [ 378.960758][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 378.966407][T12436] ? __msan_poison_alloca+0xec/0x110 [ 378.971702][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 378.976468][T12436] __sys_recvmmsg+0x519/0x6f0 [ 378.981162][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 378.987293][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 378.993458][T12436] __do_fast_syscall_32+0x127/0x180 [ 378.998783][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.003632][T12436] do_SYSENTER_32+0x73/0x90 [ 379.008134][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.014508][T12436] RIP: 0023:0xf7f31549 [ 379.018571][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 379.038174][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 379.046583][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 379.054548][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 379.062510][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.070490][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 379.078459][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.086444][T12436] Uninit was stored to memory at: [ 379.091462][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.097180][T12436] __msan_chain_origin+0x54/0xa0 [ 379.102120][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.107258][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.112201][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.116720][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.121400][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.127465][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.133617][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.138814][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.143662][T12436] do_SYSENTER_32+0x73/0x90 [ 379.148165][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.154494][T12436] [ 379.156805][T12436] Uninit was stored to memory at: [ 379.161820][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.167540][T12436] __msan_chain_origin+0x54/0xa0 [ 379.172477][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.177601][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.182531][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.187029][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.191701][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.197765][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.203919][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.209117][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.213962][T12436] do_SYSENTER_32+0x73/0x90 [ 379.218463][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.224798][T12436] [ 379.227109][T12436] Uninit was stored to memory at: [ 379.232113][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.237829][T12436] __msan_chain_origin+0x54/0xa0 [ 379.242763][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.247874][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.252805][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.257302][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.261976][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.268043][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.274196][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.279397][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.284253][T12436] do_SYSENTER_32+0x73/0x90 [ 379.288753][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.295083][T12436] [ 379.297392][T12436] Uninit was stored to memory at: [ 379.302507][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.308226][T12436] __msan_chain_origin+0x54/0xa0 [ 379.313161][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.318270][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.323205][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.327705][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.332378][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.338474][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.344623][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.349818][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.354666][T12436] do_SYSENTER_32+0x73/0x90 [ 379.359167][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.365491][T12436] [ 379.367801][T12436] Uninit was stored to memory at: [ 379.372804][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.378519][T12436] __msan_chain_origin+0x54/0xa0 [ 379.383451][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.388556][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.393489][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.397989][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.402661][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.408730][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.414882][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.420079][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.424928][T12436] do_SYSENTER_32+0x73/0x90 [ 379.429447][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.435775][T12436] [ 379.438085][T12436] Uninit was stored to memory at: [ 379.443090][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.448808][T12436] __msan_chain_origin+0x54/0xa0 [ 379.453745][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.458865][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.463798][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.468297][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.472988][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.479054][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.485206][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.490401][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.495247][T12436] do_SYSENTER_32+0x73/0x90 [ 379.499748][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.506074][T12436] [ 379.508477][T12436] Uninit was stored to memory at: [ 379.513595][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 379.519332][T12436] __msan_chain_origin+0x54/0xa0 [ 379.524563][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 379.529675][T12436] get_compat_msghdr+0x108/0x2b0 [ 379.534621][T12436] do_recvmmsg+0xdc1/0x22d0 [ 379.539119][T12436] __sys_recvmmsg+0x519/0x6f0 [ 379.543788][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 379.549854][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 379.556528][T12436] __do_fast_syscall_32+0x127/0x180 [ 379.561724][T12436] do_fast_syscall_32+0x77/0xd0 [ 379.566575][T12436] do_SYSENTER_32+0x73/0x90 [ 379.571075][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.577399][T12436] [ 379.579708][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 379.586359][T12436] do_recvmmsg+0xbf/0x22d0 [ 379.590770][T12436] do_recvmmsg+0xbf/0x22d0 07:27:32 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000380)) 07:27:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = epoll_create(0x200008) ioctl$SG_IO(r0, 0x2285, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0xb000001d}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 07:27:32 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x22, 0x0, &(0x7f0000000080)) 07:27:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 07:27:32 executing program 3: unshare(0x42000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2}}) [ 380.588777][T12460] not chained 20000 origins [ 380.593319][T12460] CPU: 0 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 380.601932][T12535] IPVS: ftp: loaded support on port[0] = 21 [ 380.602281][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.602298][T12460] Call Trace: [ 380.602309][T12460] dump_stack+0x24c/0x2e0 [ 380.626000][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 380.631747][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 380.637403][T12460] ? kmsan_get_metadata+0x116/0x180 [ 380.642626][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 380.648285][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 380.654364][T12460] ? kmsan_get_metadata+0x116/0x180 [ 380.659562][T12460] ? kmsan_get_metadata+0x116/0x180 [ 380.664844][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 380.670660][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 380.676746][T12460] ? kmsan_get_metadata+0x116/0x180 [ 380.681968][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 380.687609][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 380.693678][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 380.699048][T12460] ? _copy_from_user+0x1fd/0x300 [ 380.704074][T12460] __msan_chain_origin+0x54/0xa0 [ 380.709015][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 380.714126][T12460] get_compat_msghdr+0x108/0x2b0 [ 380.719076][T12460] do_recvmmsg+0xdc1/0x22d0 [ 380.723589][T12460] ? __msan_get_context_state+0x9/0x20 [ 380.729043][T12460] ? kfree+0x29/0x11f0 [ 380.733111][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 380.739191][T12460] ? kmsan_get_metadata+0x116/0x180 [ 380.744386][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 380.750013][T12460] ? __msan_poison_alloca+0xec/0x110 [ 380.755292][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 380.760056][T12460] __sys_recvmmsg+0x519/0x6f0 [ 380.764735][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 380.770805][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 380.776956][T12460] __do_fast_syscall_32+0x127/0x180 [ 380.782151][T12460] do_fast_syscall_32+0x77/0xd0 [ 380.787007][T12460] do_SYSENTER_32+0x73/0x90 [ 380.791505][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.797849][T12460] RIP: 0023:0xf7f31549 [ 380.801932][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.821534][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 380.829948][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 380.837913][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 380.846306][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.854268][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 380.862230][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.870196][T12460] Uninit was stored to memory at: [ 380.875284][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 380.881174][T12460] __msan_chain_origin+0x54/0xa0 [ 380.886104][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 380.891210][T12460] get_compat_msghdr+0x108/0x2b0 [ 380.896143][T12460] do_recvmmsg+0xdc1/0x22d0 [ 380.900646][T12460] __sys_recvmmsg+0x519/0x6f0 [ 380.905424][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 380.911503][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 380.917747][T12460] __do_fast_syscall_32+0x127/0x180 [ 380.922942][T12460] do_fast_syscall_32+0x77/0xd0 [ 380.927784][T12460] do_SYSENTER_32+0x73/0x90 [ 380.932281][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.938604][T12460] [ 380.940920][T12460] Uninit was stored to memory at: [ 380.945918][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 380.951629][T12460] __msan_chain_origin+0x54/0xa0 [ 380.956558][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 380.961682][T12460] get_compat_msghdr+0x108/0x2b0 [ 380.966635][T12460] do_recvmmsg+0xdc1/0x22d0 [ 380.971142][T12460] __sys_recvmmsg+0x519/0x6f0 [ 380.975812][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 380.981877][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 380.988031][T12460] __do_fast_syscall_32+0x127/0x180 [ 380.993225][T12460] do_fast_syscall_32+0x77/0xd0 [ 380.998070][T12460] do_SYSENTER_32+0x73/0x90 [ 381.002566][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.008894][T12460] [ 381.011204][T12460] Uninit was stored to memory at: [ 381.016212][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 381.021927][T12460] __msan_chain_origin+0x54/0xa0 [ 381.026861][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 381.031975][T12460] get_compat_msghdr+0x108/0x2b0 [ 381.036904][T12460] do_recvmmsg+0xdc1/0x22d0 [ 381.041421][T12460] __sys_recvmmsg+0x519/0x6f0 [ 381.046094][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 381.052164][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 381.058317][T12460] __do_fast_syscall_32+0x127/0x180 [ 381.063512][T12460] do_fast_syscall_32+0x77/0xd0 [ 381.068356][T12460] do_SYSENTER_32+0x73/0x90 [ 381.072854][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.079178][T12460] [ 381.081485][T12460] Uninit was stored to memory at: [ 381.086572][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 381.092286][T12460] __msan_chain_origin+0x54/0xa0 [ 381.097214][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 381.102332][T12460] get_compat_msghdr+0x108/0x2b0 [ 381.107265][T12460] do_recvmmsg+0xdc1/0x22d0 [ 381.111762][T12460] __sys_recvmmsg+0x519/0x6f0 [ 381.116449][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 381.122622][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 381.128773][T12460] __do_fast_syscall_32+0x127/0x180 [ 381.133967][T12460] do_fast_syscall_32+0x77/0xd0 [ 381.138814][T12460] do_SYSENTER_32+0x73/0x90 [ 381.143312][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.149636][T12460] [ 381.151943][T12460] Uninit was stored to memory at: [ 381.156944][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 381.162675][T12460] __msan_chain_origin+0x54/0xa0 [ 381.167607][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 381.172734][T12460] get_compat_msghdr+0x108/0x2b0 [ 381.177698][T12460] do_recvmmsg+0xdc1/0x22d0 [ 381.182194][T12460] __sys_recvmmsg+0x519/0x6f0 [ 381.186865][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 381.192927][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 381.199080][T12460] __do_fast_syscall_32+0x127/0x180 [ 381.204272][T12460] do_fast_syscall_32+0x77/0xd0 [ 381.209116][T12460] do_SYSENTER_32+0x73/0x90 [ 381.213614][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.220031][T12460] [ 381.222336][T12460] Uninit was stored to memory at: [ 381.227345][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 381.233059][T12460] __msan_chain_origin+0x54/0xa0 [ 381.237989][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 381.243095][T12460] get_compat_msghdr+0x108/0x2b0 [ 381.248027][T12460] do_recvmmsg+0xdc1/0x22d0 [ 381.252527][T12460] __sys_recvmmsg+0x519/0x6f0 [ 381.257200][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 381.263263][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 381.269413][T12460] __do_fast_syscall_32+0x127/0x180 [ 381.274609][T12460] do_fast_syscall_32+0x77/0xd0 [ 381.279453][T12460] do_SYSENTER_32+0x73/0x90 [ 381.283954][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.290280][T12460] [ 381.292587][T12460] Uninit was stored to memory at: [ 381.297590][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 381.303304][T12460] __msan_chain_origin+0x54/0xa0 [ 381.308235][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 381.313348][T12460] get_compat_msghdr+0x108/0x2b0 [ 381.318289][T12460] do_recvmmsg+0xdc1/0x22d0 [ 381.322787][T12460] __sys_recvmmsg+0x519/0x6f0 [ 381.327482][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 381.333547][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 381.339699][T12460] __do_fast_syscall_32+0x127/0x180 [ 381.344898][T12460] do_fast_syscall_32+0x77/0xd0 [ 381.349748][T12460] do_SYSENTER_32+0x73/0x90 [ 381.354265][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.360593][T12460] [ 381.362902][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 381.369556][T12460] do_recvmmsg+0xbf/0x22d0 [ 381.373973][T12460] do_recvmmsg+0xbf/0x22d0 [ 381.398511][T12535] vxcan1 speed is unknown, defaulting to 1000 [ 381.592955][T12536] IPVS: ftp: loaded support on port[0] = 21 [ 381.700227][T12536] vxcan1 speed is unknown, defaulting to 1000 [ 382.410817][T12436] not chained 30000 origins [ 382.415366][T12436] CPU: 0 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 382.424152][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.434224][T12436] Call Trace: [ 382.437513][T12436] dump_stack+0x24c/0x2e0 [ 382.441870][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 382.447616][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 382.453267][T12436] ? kmsan_get_metadata+0x116/0x180 [ 382.458483][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 382.464130][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 382.470219][T12436] ? kmsan_get_metadata+0x116/0x180 [ 382.475434][T12436] ? kmsan_get_metadata+0x116/0x180 [ 382.480648][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 382.486478][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 382.492565][T12436] ? kmsan_get_metadata+0x116/0x180 [ 382.497784][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 382.503455][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 382.509533][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 382.514836][T12436] ? _copy_from_user+0x1fd/0x300 [ 382.519797][T12436] __msan_chain_origin+0x54/0xa0 [ 382.524759][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.529904][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.534864][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.539397][T12436] ? __msan_get_context_state+0x9/0x20 [ 382.544879][T12436] ? kfree+0x29/0x11f0 [ 382.548971][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 382.555055][T12436] ? kmsan_get_metadata+0x116/0x180 [ 382.560277][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 382.565937][T12436] ? __msan_poison_alloca+0xec/0x110 [ 382.571248][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 382.576047][T12436] __sys_recvmmsg+0x519/0x6f0 [ 382.580730][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 382.586806][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 382.592961][T12436] __do_fast_syscall_32+0x127/0x180 [ 382.598161][T12436] do_fast_syscall_32+0x77/0xd0 [ 382.603012][T12436] do_SYSENTER_32+0x73/0x90 [ 382.607514][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.613844][T12436] RIP: 0023:0xf7f31549 [ 382.617906][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 382.637510][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 382.645921][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 382.653896][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 382.661875][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.669848][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 382.677820][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.685790][T12436] Uninit was stored to memory at: [ 382.690791][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 382.696512][T12436] __msan_chain_origin+0x54/0xa0 [ 382.701445][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.706552][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.711487][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.715988][T12436] __sys_recvmmsg+0x519/0x6f0 [ 382.720664][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 382.726732][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 382.732884][T12436] __do_fast_syscall_32+0x127/0x180 [ 382.738084][T12436] do_fast_syscall_32+0x77/0xd0 [ 382.742932][T12436] do_SYSENTER_32+0x73/0x90 [ 382.747429][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.753754][T12436] [ 382.756064][T12436] Uninit was stored to memory at: [ 382.761065][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 382.766780][T12436] __msan_chain_origin+0x54/0xa0 [ 382.771721][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.776836][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.781800][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.786323][T12436] __sys_recvmmsg+0x519/0x6f0 [ 382.791005][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 382.797074][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 382.803229][T12436] __do_fast_syscall_32+0x127/0x180 [ 382.808427][T12436] do_fast_syscall_32+0x77/0xd0 [ 382.813274][T12436] do_SYSENTER_32+0x73/0x90 [ 382.817776][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.824101][T12436] [ 382.826409][T12436] Uninit was stored to memory at: [ 382.831411][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 382.837130][T12436] __msan_chain_origin+0x54/0xa0 [ 382.842066][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.847175][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.852106][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.856606][T12436] __sys_recvmmsg+0x519/0x6f0 [ 382.861282][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 382.867347][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 382.873512][T12436] __do_fast_syscall_32+0x127/0x180 [ 382.878708][T12436] do_fast_syscall_32+0x77/0xd0 [ 382.883576][T12436] do_SYSENTER_32+0x73/0x90 [ 382.888077][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.894407][T12436] [ 382.896715][T12436] Uninit was stored to memory at: [ 382.901717][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 382.907435][T12436] __msan_chain_origin+0x54/0xa0 [ 382.912367][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.917481][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.922416][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.926954][T12436] __sys_recvmmsg+0x519/0x6f0 [ 382.931632][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 382.937700][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 382.943854][T12436] __do_fast_syscall_32+0x127/0x180 [ 382.949053][T12436] do_fast_syscall_32+0x77/0xd0 [ 382.953905][T12436] do_SYSENTER_32+0x73/0x90 [ 382.958406][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.964733][T12436] [ 382.967040][T12436] Uninit was stored to memory at: [ 382.972042][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 382.977773][T12436] __msan_chain_origin+0x54/0xa0 [ 382.982704][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 382.987809][T12436] get_compat_msghdr+0x108/0x2b0 [ 382.992741][T12436] do_recvmmsg+0xdc1/0x22d0 [ 382.997245][T12436] __sys_recvmmsg+0x519/0x6f0 [ 383.001917][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 383.010584][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 383.016739][T12436] __do_fast_syscall_32+0x127/0x180 [ 383.022032][T12436] do_fast_syscall_32+0x77/0xd0 [ 383.026880][T12436] do_SYSENTER_32+0x73/0x90 [ 383.031379][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 383.037702][T12436] [ 383.040012][T12436] Uninit was stored to memory at: [ 383.045099][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 383.050814][T12436] __msan_chain_origin+0x54/0xa0 [ 383.055780][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 383.061065][T12436] get_compat_msghdr+0x108/0x2b0 [ 383.065997][T12436] do_recvmmsg+0xdc1/0x22d0 [ 383.070583][T12436] __sys_recvmmsg+0x519/0x6f0 [ 383.075254][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 383.081315][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 383.087487][T12436] __do_fast_syscall_32+0x127/0x180 [ 383.092682][T12436] do_fast_syscall_32+0x77/0xd0 [ 383.097555][T12436] do_SYSENTER_32+0x73/0x90 [ 383.102063][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 383.108404][T12436] [ 383.110729][T12436] Uninit was stored to memory at: [ 383.115728][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 383.121443][T12436] __msan_chain_origin+0x54/0xa0 [ 383.126368][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 383.131477][T12436] get_compat_msghdr+0x108/0x2b0 [ 383.136408][T12436] do_recvmmsg+0xdc1/0x22d0 [ 383.140907][T12436] __sys_recvmmsg+0x519/0x6f0 [ 383.145588][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 383.151668][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 383.157819][T12436] __do_fast_syscall_32+0x127/0x180 [ 383.163013][T12436] do_fast_syscall_32+0x77/0xd0 [ 383.167859][T12436] do_SYSENTER_32+0x73/0x90 [ 383.172358][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 383.178680][T12436] [ 383.180987][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 383.187637][T12436] do_recvmmsg+0xbf/0x22d0 [ 383.192044][T12436] do_recvmmsg+0xbf/0x22d0 [ 383.782408][T12436] not chained 40000 origins [ 383.786957][T12436] CPU: 1 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 383.795739][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.806062][T12436] Call Trace: [ 383.809368][T12436] dump_stack+0x24c/0x2e0 [ 383.813741][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 383.819487][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 383.825139][T12436] ? kmsan_get_metadata+0x116/0x180 [ 383.830358][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 383.836045][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 383.842140][T12436] ? kmsan_get_metadata+0x116/0x180 [ 383.847350][T12436] ? kmsan_get_metadata+0x116/0x180 [ 383.852560][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 383.858821][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 383.864991][T12436] ? kmsan_get_metadata+0x116/0x180 [ 383.870219][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 383.875953][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 383.882113][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 383.887416][T12436] ? _copy_from_user+0x1fd/0x300 [ 383.892361][T12436] __msan_chain_origin+0x54/0xa0 [ 383.897310][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 383.902447][T12436] get_compat_msghdr+0x108/0x2b0 [ 383.907402][T12436] do_recvmmsg+0xdc1/0x22d0 [ 383.911927][T12436] ? __msan_get_context_state+0x9/0x20 [ 383.917429][T12436] ? kfree+0x29/0x11f0 [ 383.921507][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 383.927668][T12436] ? kmsan_get_metadata+0x116/0x180 [ 383.932905][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 383.938572][T12436] ? __msan_poison_alloca+0xec/0x110 [ 383.944047][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 383.948829][T12436] __sys_recvmmsg+0x519/0x6f0 [ 383.953612][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 383.959701][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 383.965871][T12436] __do_fast_syscall_32+0x127/0x180 [ 383.971101][T12436] do_fast_syscall_32+0x77/0xd0 [ 383.975971][T12436] do_SYSENTER_32+0x73/0x90 [ 383.980494][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 383.986842][T12436] RIP: 0023:0xf7f31549 [ 383.990928][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 384.010553][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 384.018986][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 384.026969][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 384.034947][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.042930][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 384.050908][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.058980][T12436] Uninit was stored to memory at: [ 384.063994][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.069712][T12436] __msan_chain_origin+0x54/0xa0 [ 384.074729][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.079843][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.084875][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.089375][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.094145][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.100233][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.106404][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.111606][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.116466][T12436] do_SYSENTER_32+0x73/0x90 [ 384.120967][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.127294][T12436] [ 384.129602][T12436] Uninit was stored to memory at: [ 384.134604][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.140322][T12436] __msan_chain_origin+0x54/0xa0 [ 384.145444][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.150638][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.155571][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.160159][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.164834][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.170898][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.177144][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.182441][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.187288][T12436] do_SYSENTER_32+0x73/0x90 [ 384.191789][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.198198][T12436] [ 384.200503][T12436] Uninit was stored to memory at: [ 384.205679][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.211394][T12436] __msan_chain_origin+0x54/0xa0 [ 384.216326][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.221520][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.226457][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.230980][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.235652][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.241718][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.247871][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.253065][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.257912][T12436] do_SYSENTER_32+0x73/0x90 [ 384.262410][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.268732][T12436] [ 384.271038][T12436] Uninit was stored to memory at: [ 384.276040][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.281753][T12436] __msan_chain_origin+0x54/0xa0 [ 384.286683][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.291802][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.296735][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.301232][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.305903][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.311966][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.318119][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.323316][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.328165][T12436] do_SYSENTER_32+0x73/0x90 [ 384.332670][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.339025][T12436] [ 384.341335][T12436] Uninit was stored to memory at: [ 384.346338][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.352052][T12436] __msan_chain_origin+0x54/0xa0 [ 384.356982][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.362089][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.367019][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.371524][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.376197][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.382263][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.388431][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.393636][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.398485][T12436] do_SYSENTER_32+0x73/0x90 [ 384.402985][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.409308][T12436] [ 384.411613][T12436] Uninit was stored to memory at: [ 384.416613][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.422328][T12436] __msan_chain_origin+0x54/0xa0 [ 384.427262][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.432370][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.437300][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.441799][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.446472][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.452633][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.458875][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.464070][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.468918][T12436] do_SYSENTER_32+0x73/0x90 [ 384.473419][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.479757][T12436] [ 384.482065][T12436] Uninit was stored to memory at: [ 384.487066][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 384.492778][T12436] __msan_chain_origin+0x54/0xa0 [ 384.497707][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 384.502816][T12436] get_compat_msghdr+0x108/0x2b0 [ 384.507747][T12436] do_recvmmsg+0xdc1/0x22d0 [ 384.512246][T12436] __sys_recvmmsg+0x519/0x6f0 [ 384.516917][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 384.522981][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 384.529132][T12436] __do_fast_syscall_32+0x127/0x180 [ 384.534330][T12436] do_fast_syscall_32+0x77/0xd0 [ 384.539177][T12436] do_SYSENTER_32+0x73/0x90 [ 384.543684][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.550013][T12436] [ 384.552325][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 384.558979][T12436] do_recvmmsg+0xbf/0x22d0 [ 384.563398][T12436] do_recvmmsg+0xbf/0x22d0 [ 384.860505][T12460] not chained 50000 origins [ 384.865099][T12460] CPU: 0 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 384.873873][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.884026][T12460] Call Trace: [ 384.887307][T12460] dump_stack+0x24c/0x2e0 [ 384.891658][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 384.897387][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 384.903034][T12460] ? kmsan_get_metadata+0x116/0x180 [ 384.908241][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 384.913884][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 384.924131][T12460] ? kmsan_get_metadata+0x116/0x180 [ 384.929351][T12460] ? kmsan_get_metadata+0x116/0x180 [ 384.934744][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 384.940573][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 384.946649][T12460] ? kmsan_get_metadata+0x116/0x180 [ 384.951940][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 384.957840][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 384.964001][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 384.969293][T12460] ? _copy_from_user+0x1fd/0x300 [ 384.974239][T12460] __msan_chain_origin+0x54/0xa0 [ 384.979191][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 384.984318][T12460] get_compat_msghdr+0x108/0x2b0 [ 384.989269][T12460] do_recvmmsg+0xdc1/0x22d0 [ 384.993787][T12460] ? __msan_get_context_state+0x9/0x20 [ 384.999338][T12460] ? kfree+0x29/0x11f0 [ 385.003419][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 385.009493][T12460] ? kmsan_get_metadata+0x116/0x180 [ 385.014790][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 385.020434][T12460] ? __msan_poison_alloca+0xec/0x110 [ 385.025814][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 385.030628][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.035407][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.041494][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.047837][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.053051][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.057913][T12460] do_SYSENTER_32+0x73/0x90 [ 385.062426][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.068773][T12460] RIP: 0023:0xf7f31549 [ 385.072848][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.092561][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 385.101099][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 385.109099][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 385.117097][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.125087][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 385.133073][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.141067][T12460] Uninit was stored to memory at: [ 385.146093][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.151835][T12460] __msan_chain_origin+0x54/0xa0 [ 385.156795][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.161929][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.166894][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.171416][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.176124][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.182213][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.188392][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.194133][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.199003][T12460] do_SYSENTER_32+0x73/0x90 [ 385.203527][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.209881][T12460] [ 385.212217][T12460] Uninit was stored to memory at: [ 385.217325][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.223070][T12460] __msan_chain_origin+0x54/0xa0 [ 385.228033][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.233174][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.238133][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.242658][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.247357][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.253450][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.259625][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.264849][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.269726][T12460] do_SYSENTER_32+0x73/0x90 [ 385.274289][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.280643][T12460] [ 385.282967][T12460] Uninit was stored to memory at: [ 385.287989][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.293726][T12460] __msan_chain_origin+0x54/0xa0 [ 385.298684][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.303820][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.308786][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.313313][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.318013][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.324104][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.330282][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.335536][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.340406][T12460] do_SYSENTER_32+0x73/0x90 [ 385.344928][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.351277][T12460] [ 385.353601][T12460] Uninit was stored to memory at: [ 385.358616][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.364357][T12460] __msan_chain_origin+0x54/0xa0 [ 385.369312][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.374442][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.379401][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.383924][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.388623][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.394716][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.400990][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.406219][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.411106][T12460] do_SYSENTER_32+0x73/0x90 [ 385.415636][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.421985][T12460] [ 385.424336][T12460] Uninit was stored to memory at: [ 385.429360][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.435105][T12460] __msan_chain_origin+0x54/0xa0 [ 385.440063][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.445196][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.450158][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.454683][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.459381][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.465473][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.471655][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.476900][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.481773][T12460] do_SYSENTER_32+0x73/0x90 [ 385.486394][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.492751][T12460] [ 385.495081][T12460] Uninit was stored to memory at: [ 385.500102][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.505843][T12460] __msan_chain_origin+0x54/0xa0 [ 385.510800][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.515933][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.520901][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.525432][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.530129][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.536223][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.542429][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.547658][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.552625][T12460] do_SYSENTER_32+0x73/0x90 [ 385.557161][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.563508][T12460] [ 385.565836][T12460] Uninit was stored to memory at: [ 385.570857][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 385.576604][T12460] __msan_chain_origin+0x54/0xa0 [ 385.581570][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 385.586709][T12460] get_compat_msghdr+0x108/0x2b0 [ 385.591670][T12460] do_recvmmsg+0xdc1/0x22d0 [ 385.596241][T12460] __sys_recvmmsg+0x519/0x6f0 [ 385.600962][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 385.607057][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 385.613245][T12460] __do_fast_syscall_32+0x127/0x180 [ 385.618474][T12460] do_fast_syscall_32+0x77/0xd0 [ 385.623350][T12460] do_SYSENTER_32+0x73/0x90 [ 385.627873][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.634229][T12460] [ 385.636558][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 385.643229][T12460] do_recvmmsg+0xbf/0x22d0 [ 385.647681][T12460] do_recvmmsg+0xbf/0x22d0 [ 386.015387][T12436] not chained 60000 origins [ 386.019951][T12436] CPU: 1 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 386.028732][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.038787][T12436] Call Trace: [ 386.042058][T12436] dump_stack+0x24c/0x2e0 [ 386.046393][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 386.052109][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 386.057741][T12436] ? kmsan_get_metadata+0x116/0x180 [ 386.062936][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 386.068564][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 386.074632][T12436] ? kmsan_get_metadata+0x116/0x180 [ 386.079831][T12436] ? kmsan_get_metadata+0x116/0x180 [ 386.085025][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 386.090828][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 386.096891][T12436] ? kmsan_get_metadata+0x116/0x180 [ 386.102086][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 386.107717][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 386.113871][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 386.119156][T12436] ? _copy_from_user+0x1fd/0x300 [ 386.124097][T12436] __msan_chain_origin+0x54/0xa0 [ 386.129045][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.134163][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.139116][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.143625][T12436] ? __msan_get_context_state+0x9/0x20 [ 386.149112][T12436] ? kfree+0x29/0x11f0 [ 386.153196][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 386.159262][T12436] ? kmsan_get_metadata+0x116/0x180 [ 386.164462][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 386.170179][T12436] ? __msan_poison_alloca+0xec/0x110 [ 386.175461][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 386.180225][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.184906][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.190978][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.197134][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.202333][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.207183][T12436] do_SYSENTER_32+0x73/0x90 [ 386.211686][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.218016][T12436] RIP: 0023:0xf7f31549 [ 386.222075][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 386.241682][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 386.250093][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 386.258057][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 386.266020][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.273993][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.281957][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.289923][T12436] Uninit was stored to memory at: [ 386.294926][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.300642][T12436] __msan_chain_origin+0x54/0xa0 [ 386.305576][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.310693][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.315628][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.320131][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.324805][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.330872][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.337025][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.342223][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.347071][T12436] do_SYSENTER_32+0x73/0x90 [ 386.351576][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.357902][T12436] [ 386.360212][T12436] Uninit was stored to memory at: [ 386.365216][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.370931][T12436] __msan_chain_origin+0x54/0xa0 [ 386.375861][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.380969][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.385903][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.390403][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.395080][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.401143][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.407294][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.412487][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.417334][T12436] do_SYSENTER_32+0x73/0x90 [ 386.421833][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.428156][T12436] [ 386.430465][T12436] Uninit was stored to memory at: [ 386.435468][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.441180][T12436] __msan_chain_origin+0x54/0xa0 [ 386.446111][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.451216][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.456151][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.460650][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.465328][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.471405][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.477730][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.482941][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.487873][T12436] do_SYSENTER_32+0x73/0x90 [ 386.492382][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.498729][T12436] [ 386.501050][T12436] Uninit was stored to memory at: [ 386.506071][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.511795][T12436] __msan_chain_origin+0x54/0xa0 [ 386.516729][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.521839][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.526780][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.531280][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.536138][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.543856][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.550017][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.555230][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.560083][T12436] do_SYSENTER_32+0x73/0x90 [ 386.564582][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.571006][T12436] [ 386.573316][T12436] Uninit was stored to memory at: [ 386.578523][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.584250][T12436] __msan_chain_origin+0x54/0xa0 [ 386.589212][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.594324][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.599261][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.603760][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.608434][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.614500][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.620778][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.626093][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.631039][T12436] do_SYSENTER_32+0x73/0x90 [ 386.635558][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.641887][T12436] [ 386.644195][T12436] Uninit was stored to memory at: [ 386.649566][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.655283][T12436] __msan_chain_origin+0x54/0xa0 [ 386.660214][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.665410][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.670344][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.674847][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.679519][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.685586][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.691751][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.696947][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.701796][T12436] do_SYSENTER_32+0x73/0x90 [ 386.706313][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.712639][T12436] [ 386.714949][T12436] Uninit was stored to memory at: [ 386.719949][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 386.725679][T12436] __msan_chain_origin+0x54/0xa0 [ 386.730696][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 386.735817][T12436] get_compat_msghdr+0x108/0x2b0 [ 386.740755][T12436] do_recvmmsg+0xdc1/0x22d0 [ 386.745254][T12436] __sys_recvmmsg+0x519/0x6f0 [ 386.750139][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 386.756230][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 386.762573][T12436] __do_fast_syscall_32+0x127/0x180 [ 386.767775][T12436] do_fast_syscall_32+0x77/0xd0 [ 386.772627][T12436] do_SYSENTER_32+0x73/0x90 [ 386.777127][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 386.783456][T12436] [ 386.785774][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 386.792428][T12436] do_recvmmsg+0xbf/0x22d0 [ 386.796845][T12436] do_recvmmsg+0xbf/0x22d0 [ 386.854672][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.861244][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.207536][T12460] not chained 70000 origins [ 387.212076][T12460] CPU: 0 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 387.221011][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.231082][T12460] Call Trace: [ 387.234372][T12460] dump_stack+0x24c/0x2e0 [ 387.238731][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 387.244472][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 387.250129][T12460] ? kmsan_get_metadata+0x116/0x180 [ 387.255352][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 387.260997][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 387.267138][T12460] ? kmsan_get_metadata+0x116/0x180 [ 387.272439][T12460] ? kmsan_get_metadata+0x116/0x180 [ 387.277750][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 387.283599][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 387.289679][T12460] ? kmsan_get_metadata+0x116/0x180 [ 387.294987][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 387.300635][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 387.306724][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 387.312029][T12460] ? _copy_from_user+0x1fd/0x300 [ 387.317256][T12460] __msan_chain_origin+0x54/0xa0 [ 387.322207][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.327340][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.332293][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.336817][T12460] ? __msan_get_context_state+0x9/0x20 [ 387.342287][T12460] ? kfree+0x29/0x11f0 [ 387.346386][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 387.352648][T12460] ? kmsan_get_metadata+0x116/0x180 [ 387.357872][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 387.363517][T12460] ? __msan_poison_alloca+0xec/0x110 [ 387.368953][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 387.373761][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.378454][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.384626][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.390790][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.396025][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.400881][T12460] do_SYSENTER_32+0x73/0x90 [ 387.405383][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.411709][T12460] RIP: 0023:0xf7f31549 [ 387.415768][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 387.435369][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 387.443790][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 387.451755][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 387.459719][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.467703][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 387.475673][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.483643][T12460] Uninit was stored to memory at: [ 387.488644][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.494550][T12460] __msan_chain_origin+0x54/0xa0 [ 387.499492][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.504598][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.509794][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.514298][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.519084][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.525164][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.531343][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.536557][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.542098][T12460] do_SYSENTER_32+0x73/0x90 [ 387.546620][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.552959][T12460] [ 387.555362][T12460] Uninit was stored to memory at: [ 387.560365][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.566081][T12460] __msan_chain_origin+0x54/0xa0 [ 387.571013][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.576141][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.581335][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.585841][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.590516][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.596579][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.602844][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.608039][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.612897][T12460] do_SYSENTER_32+0x73/0x90 [ 387.617396][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.623733][T12460] [ 387.626039][T12460] Uninit was stored to memory at: [ 387.633410][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.639125][T12460] __msan_chain_origin+0x54/0xa0 [ 387.644174][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.649295][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.654261][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.658768][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.663440][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.669513][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.675753][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.681058][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.685910][T12460] do_SYSENTER_32+0x73/0x90 [ 387.690590][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.696933][T12460] [ 387.699252][T12460] Uninit was stored to memory at: [ 387.704255][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.709973][T12460] __msan_chain_origin+0x54/0xa0 [ 387.714902][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.720025][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.724963][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.729460][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.734133][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.740199][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.746352][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.751549][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.756397][T12460] do_SYSENTER_32+0x73/0x90 [ 387.760904][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.767232][T12460] [ 387.769541][T12460] Uninit was stored to memory at: [ 387.774541][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.780284][T12460] __msan_chain_origin+0x54/0xa0 [ 387.785304][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.790426][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.795359][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.799859][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.804537][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.810712][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.816866][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.822061][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.826907][T12460] do_SYSENTER_32+0x73/0x90 [ 387.831411][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.837736][T12460] [ 387.840045][T12460] Uninit was stored to memory at: [ 387.845044][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.850758][T12460] __msan_chain_origin+0x54/0xa0 [ 387.855689][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.860794][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.865723][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.870223][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.874898][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.880963][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.887201][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.892398][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.897254][T12460] do_SYSENTER_32+0x73/0x90 [ 387.901766][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.908114][T12460] [ 387.910418][T12460] Uninit was stored to memory at: [ 387.915503][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 387.921306][T12460] __msan_chain_origin+0x54/0xa0 [ 387.926272][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 387.931389][T12460] get_compat_msghdr+0x108/0x2b0 [ 387.936323][T12460] do_recvmmsg+0xdc1/0x22d0 [ 387.940823][T12460] __sys_recvmmsg+0x519/0x6f0 [ 387.945685][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 387.951752][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 387.957918][T12460] __do_fast_syscall_32+0x127/0x180 [ 387.963115][T12460] do_fast_syscall_32+0x77/0xd0 [ 387.967960][T12460] do_SYSENTER_32+0x73/0x90 [ 387.972459][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 387.978870][T12460] [ 387.981179][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 387.987830][T12460] do_recvmmsg+0xbf/0x22d0 [ 387.992240][T12460] do_recvmmsg+0xbf/0x22d0 [ 388.280891][T12436] not chained 80000 origins [ 388.285427][T12436] CPU: 0 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 388.294185][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.304231][T12436] Call Trace: [ 388.307501][T12436] dump_stack+0x24c/0x2e0 [ 388.311839][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 388.317555][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 388.323186][T12436] ? kmsan_get_metadata+0x116/0x180 [ 388.328396][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 388.334036][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 388.340216][T12436] ? kmsan_get_metadata+0x116/0x180 [ 388.345421][T12436] ? kmsan_get_metadata+0x116/0x180 [ 388.350616][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 388.356437][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 388.362678][T12436] ? kmsan_get_metadata+0x116/0x180 [ 388.367875][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 388.373516][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 388.379581][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 388.384869][T12436] ? _copy_from_user+0x1fd/0x300 [ 388.389806][T12436] __msan_chain_origin+0x54/0xa0 [ 388.394744][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.399862][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.404801][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.409309][T12436] ? __msan_get_context_state+0x9/0x20 [ 388.414761][T12436] ? kfree+0x29/0x11f0 [ 388.418838][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 388.424900][T12436] ? kmsan_get_metadata+0x116/0x180 [ 388.430093][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 388.435721][T12436] ? __msan_poison_alloca+0xec/0x110 [ 388.441002][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 388.445769][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.450467][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.456549][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.462707][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.467910][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.472765][T12436] do_SYSENTER_32+0x73/0x90 [ 388.477268][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.483611][T12436] RIP: 0023:0xf7f31549 [ 388.487672][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 388.507280][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 388.515690][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 388.523654][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 388.531618][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.539677][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 388.547647][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.555636][T12436] Uninit was stored to memory at: [ 388.560673][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.566406][T12436] __msan_chain_origin+0x54/0xa0 [ 388.571342][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.576451][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.581393][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.585903][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.590585][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.596651][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.602804][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.608000][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.612848][T12436] do_SYSENTER_32+0x73/0x90 [ 388.617359][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.623686][T12436] [ 388.625997][T12436] Uninit was stored to memory at: [ 388.630999][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.636718][T12436] __msan_chain_origin+0x54/0xa0 [ 388.641650][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.646759][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.651780][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.656280][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.660954][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.667026][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.673195][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.678441][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.683303][T12436] do_SYSENTER_32+0x73/0x90 [ 388.687813][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.694141][T12436] [ 388.696469][T12436] Uninit was stored to memory at: [ 388.701485][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.707200][T12436] __msan_chain_origin+0x54/0xa0 [ 388.712131][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.717238][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.722172][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.726758][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.731430][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.737582][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.743746][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.748942][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.754073][T12436] do_SYSENTER_32+0x73/0x90 [ 388.758923][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.765258][T12436] [ 388.767567][T12436] Uninit was stored to memory at: [ 388.772656][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.778370][T12436] __msan_chain_origin+0x54/0xa0 [ 388.783299][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.788411][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.793348][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.797856][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.802531][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.808616][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.814959][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.820255][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.825122][T12436] do_SYSENTER_32+0x73/0x90 [ 388.829643][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.835990][T12436] [ 388.838301][T12436] Uninit was stored to memory at: [ 388.843303][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.849016][T12436] __msan_chain_origin+0x54/0xa0 [ 388.853949][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.859073][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.864007][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.868508][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.873179][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.879242][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.885400][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.890606][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.895457][T12436] do_SYSENTER_32+0x73/0x90 [ 388.899956][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.906282][T12436] [ 388.908588][T12436] Uninit was stored to memory at: [ 388.913588][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.919314][T12436] __msan_chain_origin+0x54/0xa0 [ 388.924244][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.929353][T12436] get_compat_msghdr+0x108/0x2b0 [ 388.934305][T12436] do_recvmmsg+0xdc1/0x22d0 [ 388.938805][T12436] __sys_recvmmsg+0x519/0x6f0 [ 388.943565][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 388.949718][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 388.955870][T12436] __do_fast_syscall_32+0x127/0x180 [ 388.961075][T12436] do_fast_syscall_32+0x77/0xd0 [ 388.965923][T12436] do_SYSENTER_32+0x73/0x90 [ 388.970422][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.976747][T12436] [ 388.979055][T12436] Uninit was stored to memory at: [ 388.984054][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 388.989770][T12436] __msan_chain_origin+0x54/0xa0 [ 388.994700][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 388.999806][T12436] get_compat_msghdr+0x108/0x2b0 [ 389.004738][T12436] do_recvmmsg+0xdc1/0x22d0 [ 389.009237][T12436] __sys_recvmmsg+0x519/0x6f0 [ 389.013915][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.019981][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.026135][T12436] __do_fast_syscall_32+0x127/0x180 [ 389.031330][T12436] do_fast_syscall_32+0x77/0xd0 [ 389.036180][T12436] do_SYSENTER_32+0x73/0x90 [ 389.040679][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.047018][T12436] [ 389.049326][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 389.056434][T12436] do_recvmmsg+0xbf/0x22d0 [ 389.060860][T12436] do_recvmmsg+0xbf/0x22d0 [ 389.328099][T12460] not chained 90000 origins [ 389.332634][T12460] CPU: 1 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 389.341405][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.351989][T12460] Call Trace: [ 389.355276][T12460] dump_stack+0x24c/0x2e0 [ 389.359624][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 389.365353][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 389.370997][T12460] ? kmsan_get_metadata+0x116/0x180 [ 389.376209][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 389.381853][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 389.387933][T12460] ? kmsan_get_metadata+0x116/0x180 [ 389.393164][T12460] ? kmsan_get_metadata+0x116/0x180 [ 389.398373][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 389.404193][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 389.410364][T12460] ? kmsan_get_metadata+0x116/0x180 [ 389.415572][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 389.421209][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 389.427281][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 389.432577][T12460] ? _copy_from_user+0x1fd/0x300 [ 389.437526][T12460] __msan_chain_origin+0x54/0xa0 [ 389.442476][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.447691][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.452643][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.457153][T12460] ? __msan_get_context_state+0x9/0x20 [ 389.462619][T12460] ? kfree+0x29/0x11f0 [ 389.466713][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 389.472781][T12460] ? kmsan_get_metadata+0x116/0x180 [ 389.477986][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 389.483618][T12460] ? __msan_poison_alloca+0xec/0x110 [ 389.488913][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 389.493766][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.498732][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.504818][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.510976][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.516182][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.521033][T12460] do_SYSENTER_32+0x73/0x90 [ 389.525543][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.531873][T12460] RIP: 0023:0xf7f31549 [ 389.535934][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 389.555537][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 389.563947][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 389.571912][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 389.579875][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.587848][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 389.595821][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.604049][T12460] Uninit was stored to memory at: [ 389.609054][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.614773][T12460] __msan_chain_origin+0x54/0xa0 [ 389.619883][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.624992][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.629928][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.634455][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.639326][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.645418][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.651599][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.656923][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.661772][T12460] do_SYSENTER_32+0x73/0x90 [ 389.666271][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.672703][T12460] [ 389.675010][T12460] Uninit was stored to memory at: [ 389.680012][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.685728][T12460] __msan_chain_origin+0x54/0xa0 [ 389.690663][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.695790][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.700739][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.705264][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.709944][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.716023][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.722181][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.727393][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.732284][T12460] do_SYSENTER_32+0x73/0x90 [ 389.736790][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.743140][T12460] [ 389.745451][T12460] Uninit was stored to memory at: [ 389.750453][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.756254][T12460] __msan_chain_origin+0x54/0xa0 [ 389.761189][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.766295][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.771237][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.775736][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.780408][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.786560][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.792712][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.797907][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.802759][T12460] do_SYSENTER_32+0x73/0x90 [ 389.807262][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.813589][T12460] [ 389.815985][T12460] Uninit was stored to memory at: [ 389.820983][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.826701][T12460] __msan_chain_origin+0x54/0xa0 [ 389.831637][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.836745][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.841680][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.846178][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.850852][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.856920][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.863071][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.868263][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.873121][T12460] do_SYSENTER_32+0x73/0x90 [ 389.877624][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.883952][T12460] [ 389.886258][T12460] Uninit was stored to memory at: [ 389.891520][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.897236][T12460] __msan_chain_origin+0x54/0xa0 [ 389.902189][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.907297][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.912231][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.916989][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.921661][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.927754][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 389.934004][T12460] __do_fast_syscall_32+0x127/0x180 [ 389.939200][T12460] do_fast_syscall_32+0x77/0xd0 [ 389.944047][T12460] do_SYSENTER_32+0x73/0x90 [ 389.948549][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 389.954876][T12460] [ 389.957185][T12460] Uninit was stored to memory at: [ 389.962189][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 389.967904][T12460] __msan_chain_origin+0x54/0xa0 [ 389.972835][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 389.977943][T12460] get_compat_msghdr+0x108/0x2b0 [ 389.982886][T12460] do_recvmmsg+0xdc1/0x22d0 [ 389.987385][T12460] __sys_recvmmsg+0x519/0x6f0 [ 389.992060][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 389.998124][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.004283][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.009480][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.014331][T12460] do_SYSENTER_32+0x73/0x90 [ 390.018833][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.025165][T12460] [ 390.027472][T12460] Uninit was stored to memory at: [ 390.032476][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.038200][T12460] __msan_chain_origin+0x54/0xa0 [ 390.043131][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.048243][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.053178][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.057697][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.062376][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.068443][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.074596][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.079793][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.084666][T12460] do_SYSENTER_32+0x73/0x90 [ 390.089172][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.095499][T12460] [ 390.097808][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 390.104462][T12460] do_recvmmsg+0xbf/0x22d0 [ 390.108874][T12460] do_recvmmsg+0xbf/0x22d0 [ 390.261899][T12460] not chained 100000 origins [ 390.266524][T12460] CPU: 1 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 390.275299][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.285355][T12460] Call Trace: [ 390.288633][T12460] dump_stack+0x24c/0x2e0 [ 390.292977][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 390.298695][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 390.304325][T12460] ? kmsan_get_metadata+0x116/0x180 [ 390.309522][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 390.315152][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 390.321223][T12460] ? kmsan_get_metadata+0x116/0x180 [ 390.326437][T12460] ? kmsan_get_metadata+0x116/0x180 [ 390.331641][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 390.337450][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 390.343515][T12460] ? kmsan_get_metadata+0x116/0x180 [ 390.348723][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 390.354354][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 390.360440][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 390.365724][T12460] ? _copy_from_user+0x1fd/0x300 [ 390.370662][T12460] __msan_chain_origin+0x54/0xa0 [ 390.375600][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.380718][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.385657][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.390170][T12460] ? __msan_get_context_state+0x9/0x20 [ 390.395625][T12460] ? kfree+0x29/0x11f0 [ 390.399696][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 390.405759][T12460] ? kmsan_get_metadata+0x116/0x180 [ 390.410954][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 390.416590][T12460] ? __msan_poison_alloca+0xec/0x110 [ 390.421884][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 390.426646][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.431326][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.437398][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.443556][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.448760][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.453611][T12460] do_SYSENTER_32+0x73/0x90 [ 390.458121][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.464454][T12460] RIP: 0023:0xf7f31549 [ 390.468512][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 390.488119][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 390.496534][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 390.504502][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 390.512466][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.520430][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 390.528403][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.536405][T12460] Uninit was stored to memory at: [ 390.541419][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.547144][T12460] __msan_chain_origin+0x54/0xa0 [ 390.552078][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.557189][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.562124][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.566625][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.571301][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.577368][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.583523][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.588720][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.593574][T12460] do_SYSENTER_32+0x73/0x90 [ 390.598074][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.604397][T12460] [ 390.606704][T12460] Uninit was stored to memory at: [ 390.611709][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.617428][T12460] __msan_chain_origin+0x54/0xa0 [ 390.622360][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.627467][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.632400][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.636898][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.641574][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.647639][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.653805][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.659028][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.663886][T12460] do_SYSENTER_32+0x73/0x90 [ 390.668391][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.674719][T12460] [ 390.677032][T12460] Uninit was stored to memory at: [ 390.682033][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.687753][T12460] __msan_chain_origin+0x54/0xa0 [ 390.692687][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.697809][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.702768][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.707293][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.711972][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.718042][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.724195][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.729391][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.734239][T12460] do_SYSENTER_32+0x73/0x90 [ 390.738738][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.745066][T12460] [ 390.747374][T12460] Uninit was stored to memory at: [ 390.752379][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.758093][T12460] __msan_chain_origin+0x54/0xa0 [ 390.763040][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.768170][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.773109][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.777623][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.782331][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.788423][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.794580][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.799780][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.804628][T12460] do_SYSENTER_32+0x73/0x90 [ 390.809134][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.815460][T12460] [ 390.817771][T12460] Uninit was stored to memory at: [ 390.822772][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.828505][T12460] __msan_chain_origin+0x54/0xa0 [ 390.833441][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.838551][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.843485][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.847984][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.852658][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.858729][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.864882][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.870083][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.874931][T12460] do_SYSENTER_32+0x73/0x90 [ 390.879434][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.885762][T12460] [ 390.888073][T12460] Uninit was stored to memory at: [ 390.893086][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.898799][T12460] __msan_chain_origin+0x54/0xa0 [ 390.903732][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.908841][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.913776][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.918276][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.922948][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.929022][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 390.935175][T12460] __do_fast_syscall_32+0x127/0x180 [ 390.940369][T12460] do_fast_syscall_32+0x77/0xd0 [ 390.945216][T12460] do_SYSENTER_32+0x73/0x90 [ 390.949717][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 390.956045][T12460] [ 390.958353][T12460] Uninit was stored to memory at: [ 390.963354][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 390.969068][T12460] __msan_chain_origin+0x54/0xa0 [ 390.973999][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 390.979106][T12460] get_compat_msghdr+0x108/0x2b0 [ 390.984039][T12460] do_recvmmsg+0xdc1/0x22d0 [ 390.988550][T12460] __sys_recvmmsg+0x519/0x6f0 [ 390.993247][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 390.999415][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.005601][T12460] __do_fast_syscall_32+0x127/0x180 [ 391.010797][T12460] do_fast_syscall_32+0x77/0xd0 [ 391.015647][T12460] do_SYSENTER_32+0x73/0x90 [ 391.020159][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.026502][T12460] [ 391.028832][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 391.035500][T12460] do_recvmmsg+0xbf/0x22d0 [ 391.039914][T12460] do_recvmmsg+0xbf/0x22d0 [ 391.313109][T12436] not chained 110000 origins [ 391.317743][T12436] CPU: 0 PID: 12436 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 391.326555][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.336623][T12436] Call Trace: [ 391.339907][T12436] dump_stack+0x24c/0x2e0 [ 391.344262][T12436] kmsan_internal_chain_origin+0x6f/0x130 [ 391.350022][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 391.355679][T12436] ? kmsan_get_metadata+0x116/0x180 [ 391.360904][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 391.366558][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 391.372639][T12436] ? kmsan_get_metadata+0x116/0x180 [ 391.377853][T12436] ? kmsan_get_metadata+0x116/0x180 [ 391.383063][T12436] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 391.388886][T12436] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 391.394970][T12436] ? kmsan_get_metadata+0x116/0x180 [ 391.400178][T12436] ? kmsan_set_origin_checked+0xa2/0x100 [ 391.405822][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 391.411897][T12436] ? kmsan_unpoison_shadow+0x74/0xa0 [ 391.417196][T12436] ? _copy_from_user+0x1fd/0x300 [ 391.422154][T12436] __msan_chain_origin+0x54/0xa0 [ 391.427104][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.432266][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.437216][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.441735][T12436] ? __msan_get_context_state+0x9/0x20 [ 391.447199][T12436] ? kfree+0x29/0x11f0 [ 391.451278][T12436] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 391.457360][T12436] ? kmsan_get_metadata+0x116/0x180 [ 391.462568][T12436] ? kmsan_internal_set_origin+0x82/0xc0 [ 391.468205][T12436] ? __msan_poison_alloca+0xec/0x110 [ 391.473497][T12436] ? __sys_recvmmsg+0xb5/0x6f0 [ 391.478263][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.482951][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.489049][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.495228][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.500460][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.505318][T12436] do_SYSENTER_32+0x73/0x90 [ 391.509822][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.516152][T12436] RIP: 0023:0xf7f31549 [ 391.520214][T12436] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 391.539925][T12436] RSP: 002b:00000000f550a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 391.548337][T12436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 391.556309][T12436] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 391.564282][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.572250][T12436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 391.580215][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.588195][T12436] Uninit was stored to memory at: [ 391.593215][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.598934][T12436] __msan_chain_origin+0x54/0xa0 [ 391.603902][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.609011][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.613947][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.618537][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.623212][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.629278][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.635431][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.640629][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.645565][T12436] do_SYSENTER_32+0x73/0x90 [ 391.650067][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.656395][T12436] [ 391.658715][T12436] Uninit was stored to memory at: [ 391.663721][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.669449][T12436] __msan_chain_origin+0x54/0xa0 [ 391.674390][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.679534][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.684493][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.689028][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.693709][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.699780][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.705933][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.711132][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.715987][T12436] do_SYSENTER_32+0x73/0x90 [ 391.720488][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.726826][T12436] [ 391.729154][T12436] Uninit was stored to memory at: [ 391.734160][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.739901][T12436] __msan_chain_origin+0x54/0xa0 [ 391.744836][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.750053][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.755007][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.759536][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.764213][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.770283][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.776438][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.781675][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.786524][T12436] do_SYSENTER_32+0x73/0x90 [ 391.791027][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.797353][T12436] [ 391.799664][T12436] Uninit was stored to memory at: [ 391.804683][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.810421][T12436] __msan_chain_origin+0x54/0xa0 [ 391.815450][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.820577][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.825514][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.830019][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.834694][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.840761][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.846915][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.852114][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.856964][T12436] do_SYSENTER_32+0x73/0x90 [ 391.861466][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.867792][T12436] [ 391.870102][T12436] Uninit was stored to memory at: [ 391.875105][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.880823][T12436] __msan_chain_origin+0x54/0xa0 [ 391.885756][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.890866][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.895811][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.900317][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.904994][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.911061][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.917214][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.922413][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.927264][T12436] do_SYSENTER_32+0x73/0x90 [ 391.931771][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 391.938117][T12436] [ 391.940429][T12436] Uninit was stored to memory at: [ 391.945434][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 391.951151][T12436] __msan_chain_origin+0x54/0xa0 [ 391.956081][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 391.961191][T12436] get_compat_msghdr+0x108/0x2b0 [ 391.966127][T12436] do_recvmmsg+0xdc1/0x22d0 [ 391.970630][T12436] __sys_recvmmsg+0x519/0x6f0 [ 391.975309][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 391.981376][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 391.987529][T12436] __do_fast_syscall_32+0x127/0x180 [ 391.992726][T12436] do_fast_syscall_32+0x77/0xd0 [ 391.997576][T12436] do_SYSENTER_32+0x73/0x90 [ 392.002082][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.008585][T12436] [ 392.010913][T12436] Uninit was stored to memory at: [ 392.015918][T12436] kmsan_internal_chain_origin+0xad/0x130 [ 392.021633][T12436] __msan_chain_origin+0x54/0xa0 [ 392.026568][T12436] __get_compat_msghdr+0x6db/0x9d0 [ 392.031679][T12436] get_compat_msghdr+0x108/0x2b0 [ 392.036615][T12436] do_recvmmsg+0xdc1/0x22d0 [ 392.041121][T12436] __sys_recvmmsg+0x519/0x6f0 [ 392.045794][T12436] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.051860][T12436] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.058016][T12436] __do_fast_syscall_32+0x127/0x180 [ 392.063214][T12436] do_fast_syscall_32+0x77/0xd0 [ 392.068062][T12436] do_SYSENTER_32+0x73/0x90 [ 392.072564][T12436] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.078892][T12436] [ 392.081203][T12436] Local variable ----msg_sys@do_recvmmsg created at: [ 392.087857][T12436] do_recvmmsg+0xbf/0x22d0 [ 392.092273][T12436] do_recvmmsg+0xbf/0x22d0 [ 392.215890][T12460] not chained 120000 origins [ 392.220531][T12460] CPU: 1 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 392.229308][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.239376][T12460] Call Trace: [ 392.242662][T12460] dump_stack+0x24c/0x2e0 [ 392.247066][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 392.252841][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 392.258502][T12460] ? kmsan_get_metadata+0x116/0x180 [ 392.263747][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 392.269393][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 392.275472][T12460] ? kmsan_get_metadata+0x116/0x180 [ 392.280679][T12460] ? kmsan_get_metadata+0x116/0x180 [ 392.285905][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 392.291725][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 392.297802][T12460] ? kmsan_get_metadata+0x116/0x180 [ 392.303019][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 392.308677][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 392.314755][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 392.320046][T12460] ? _copy_from_user+0x1fd/0x300 [ 392.324989][T12460] __msan_chain_origin+0x54/0xa0 [ 392.329925][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.335038][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.339976][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.344505][T12460] ? __msan_get_context_state+0x9/0x20 [ 392.349959][T12460] ? kfree+0x29/0x11f0 [ 392.354032][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 392.360094][T12460] ? kmsan_get_metadata+0x116/0x180 [ 392.365287][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 392.370917][T12460] ? __msan_poison_alloca+0xec/0x110 [ 392.376202][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 392.380970][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.385653][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.391723][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.397888][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.403090][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.407942][T12460] do_SYSENTER_32+0x73/0x90 [ 392.412446][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.418776][T12460] RIP: 0023:0xf7f31549 [ 392.422839][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 392.442444][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 392.450858][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 392.458822][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 392.466793][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.474758][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 392.482725][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.490696][T12460] Uninit was stored to memory at: [ 392.495700][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.501445][T12460] __msan_chain_origin+0x54/0xa0 [ 392.506479][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.511606][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.516559][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.521100][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.525778][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.531851][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.538007][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.543215][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.548063][T12460] do_SYSENTER_32+0x73/0x90 [ 392.552563][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.558892][T12460] [ 392.561203][T12460] Uninit was stored to memory at: [ 392.566206][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.571920][T12460] __msan_chain_origin+0x54/0xa0 [ 392.576875][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.581982][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.586914][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.591439][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.596113][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.602178][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.608331][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.613528][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.618377][T12460] do_SYSENTER_32+0x73/0x90 [ 392.622877][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.629204][T12460] [ 392.631512][T12460] Uninit was stored to memory at: [ 392.636548][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.642308][T12460] __msan_chain_origin+0x54/0xa0 [ 392.647246][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.652368][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.657308][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.661810][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.666518][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.672594][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.678746][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.683971][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.688820][T12460] do_SYSENTER_32+0x73/0x90 [ 392.693476][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.699804][T12460] [ 392.702113][T12460] Uninit was stored to memory at: [ 392.707264][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.712984][T12460] __msan_chain_origin+0x54/0xa0 [ 392.717918][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.723028][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.727959][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.732478][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.737161][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.743226][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.749376][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.754569][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.759436][T12460] do_SYSENTER_32+0x73/0x90 [ 392.763936][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.770271][T12460] [ 392.772599][T12460] Uninit was stored to memory at: [ 392.777600][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.783315][T12460] __msan_chain_origin+0x54/0xa0 [ 392.788250][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.793352][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.798293][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.802801][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.807474][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.813539][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.819692][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.824916][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.829766][T12460] do_SYSENTER_32+0x73/0x90 [ 392.834269][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.840594][T12460] [ 392.842903][T12460] Uninit was stored to memory at: [ 392.847902][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.853615][T12460] __msan_chain_origin+0x54/0xa0 [ 392.858561][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.863665][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.868598][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.873096][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.877767][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.883836][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.890007][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.895205][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.900054][T12460] do_SYSENTER_32+0x73/0x90 [ 392.904564][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.910888][T12460] [ 392.913198][T12460] Uninit was stored to memory at: [ 392.918200][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 392.923914][T12460] __msan_chain_origin+0x54/0xa0 [ 392.928849][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 392.933966][T12460] get_compat_msghdr+0x108/0x2b0 [ 392.938902][T12460] do_recvmmsg+0xdc1/0x22d0 [ 392.943407][T12460] __sys_recvmmsg+0x519/0x6f0 [ 392.948079][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 392.954146][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 392.960298][T12460] __do_fast_syscall_32+0x127/0x180 [ 392.965541][T12460] do_fast_syscall_32+0x77/0xd0 [ 392.970387][T12460] do_SYSENTER_32+0x73/0x90 [ 392.974887][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 392.981213][T12460] [ 392.983523][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 392.990178][T12460] do_recvmmsg+0xbf/0x22d0 [ 392.994590][T12460] do_recvmmsg+0xbf/0x22d0 [ 393.172473][T12460] not chained 130000 origins [ 393.177095][T12460] CPU: 1 PID: 12460 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 393.185870][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.196032][T12460] Call Trace: [ 393.199334][T12460] dump_stack+0x24c/0x2e0 [ 393.203723][T12460] kmsan_internal_chain_origin+0x6f/0x130 [ 393.209466][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 393.215118][T12460] ? kmsan_get_metadata+0x116/0x180 [ 393.220337][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 393.225996][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 393.232054][T12460] ? kmsan_get_metadata+0x116/0x180 [ 393.237245][T12460] ? kmsan_get_metadata+0x116/0x180 [ 393.242485][T12460] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 393.248282][T12460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.254356][T12460] ? kmsan_get_metadata+0x116/0x180 [ 393.259564][T12460] ? kmsan_set_origin_checked+0xa2/0x100 [ 393.265178][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 393.271226][T12460] ? kmsan_unpoison_shadow+0x74/0xa0 [ 393.276498][T12460] ? _copy_from_user+0x1fd/0x300 [ 393.281489][T12460] __msan_chain_origin+0x54/0xa0 [ 393.286413][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.291536][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.296494][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.301012][T12460] ? __msan_get_context_state+0x9/0x20 [ 393.306490][T12460] ? kfree+0x29/0x11f0 [ 393.310623][T12460] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 393.316766][T12460] ? kmsan_get_metadata+0x116/0x180 [ 393.321976][T12460] ? kmsan_internal_set_origin+0x82/0xc0 [ 393.327594][T12460] ? __msan_poison_alloca+0xec/0x110 [ 393.332881][T12460] ? __sys_recvmmsg+0xb5/0x6f0 [ 393.337635][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.342322][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.348400][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.354540][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.359757][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.364622][T12460] do_SYSENTER_32+0x73/0x90 [ 393.369115][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.375431][T12460] RIP: 0023:0xf7f31549 [ 393.379478][T12460] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 393.399073][T12460] RSP: 002b:00000000f54a75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 393.407486][T12460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 393.415460][T12460] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 393.423415][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.431371][T12460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.439327][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.447291][T12460] Uninit was stored to memory at: [ 393.452299][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.458012][T12460] __msan_chain_origin+0x54/0xa0 [ 393.462953][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.468056][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.473016][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.477518][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.482226][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.488289][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.494434][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.499632][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.504504][T12460] do_SYSENTER_32+0x73/0x90 [ 393.508997][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.515318][T12460] [ 393.517629][T12460] Uninit was stored to memory at: [ 393.522639][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.528346][T12460] __msan_chain_origin+0x54/0xa0 [ 393.533266][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.538362][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.543305][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.547792][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.552463][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.558514][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.564652][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.569833][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.574668][T12460] do_SYSENTER_32+0x73/0x90 [ 393.579158][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.585494][T12460] [ 393.587811][T12460] Uninit was stored to memory at: [ 393.592807][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.598515][T12460] __msan_chain_origin+0x54/0xa0 [ 393.603457][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.608553][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.613474][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.617963][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.622644][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.628750][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.634898][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.640082][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.644918][T12460] do_SYSENTER_32+0x73/0x90 [ 393.649404][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.655720][T12460] [ 393.658033][T12460] Uninit was stored to memory at: [ 393.663056][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.668774][T12460] __msan_chain_origin+0x54/0xa0 [ 393.673704][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.678803][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.683726][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.688222][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.692907][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.698966][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.705139][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.710334][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.715169][T12460] do_SYSENTER_32+0x73/0x90 [ 393.719663][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.725976][T12460] [ 393.728279][T12460] Uninit was stored to memory at: [ 393.733290][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.738992][T12460] __msan_chain_origin+0x54/0xa0 [ 393.743953][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.749047][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.753969][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.758457][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.763121][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.769168][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.775304][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.780485][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.785490][T12460] do_SYSENTER_32+0x73/0x90 [ 393.790112][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.796438][T12460] [ 393.798763][T12460] Uninit was stored to memory at: [ 393.803780][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.809515][T12460] __msan_chain_origin+0x54/0xa0 [ 393.814443][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.819537][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.824459][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.828945][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.833607][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.839658][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.845817][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.851000][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.855837][T12460] do_SYSENTER_32+0x73/0x90 [ 393.860322][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.866643][T12460] [ 393.868967][T12460] Uninit was stored to memory at: [ 393.873966][T12460] kmsan_internal_chain_origin+0xad/0x130 [ 393.879682][T12460] __msan_chain_origin+0x54/0xa0 [ 393.884609][T12460] __get_compat_msghdr+0x6db/0x9d0 [ 393.889714][T12460] get_compat_msghdr+0x108/0x2b0 [ 393.894641][T12460] do_recvmmsg+0xdc1/0x22d0 [ 393.899130][T12460] __sys_recvmmsg+0x519/0x6f0 [ 393.903791][T12460] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 393.909845][T12460] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 393.916016][T12460] __do_fast_syscall_32+0x127/0x180 [ 393.921206][T12460] do_fast_syscall_32+0x77/0xd0 [ 393.926044][T12460] do_SYSENTER_32+0x73/0x90 [ 393.930529][T12460] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 393.936847][T12460] [ 393.939163][T12460] Local variable ----msg_sys@do_recvmmsg created at: [ 393.945810][T12460] do_recvmmsg+0xbf/0x22d0 [ 393.950206][T12460] do_recvmmsg+0xbf/0x22d0 07:27:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x2000004c, &(0x7f0000000080)={0x0}}, 0x0) 07:27:46 executing program 1: mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount(0x0, &(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, &(0x7f0000000040)={0x0, 0x73}, 0x20) 07:27:46 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:27:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="95103aa73a81ebe957a9827b87c31ff6f149d9a523b2a6f598e57aa3", 0x1c}], 0x1) 07:27:46 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:46 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080), 0x20) 07:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe78) 07:27:47 executing program 3: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000240), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0xfe, 0x7fff}, {}, {0x0, 0x0, 0x7, 0x55}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x7f, 0x0, 0x0, 0x1}, {0x0, 0x4}, {0x0, 0x6, 0x40, 0x4}, {0x7ff, 0x97, 0x31}, {0x80, 0x7f, 0x52, 0x3}, {0x4, 0x2, 0x0, 0x1000}, {0xf2, 0x2, 0x3, 0x7fff}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'wlan1\x00', {0x2, 0x0, @remote}}) 07:27:47 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ustat(0x5, &(0x7f0000000280)) 07:27:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f0000000100)) 07:27:47 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0xfc00) [ 395.157681][ T35] audit: type=1326 audit(1625383667.527:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12610 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7549 code=0x0 [ 395.327491][ T35] audit: type=1326 audit(1625383667.587:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12610 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7549 code=0x0 [ 395.352190][ T35] audit: type=1326 audit(1625383667.627:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x7ffc0000 [ 395.375564][ T35] audit: type=1326 audit(1625383667.627:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x7ffc0000 [ 395.398610][ T35] audit: type=1326 audit(1625383667.637:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12610 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7549 code=0x0 [ 395.421184][ T35] audit: type=1326 audit(1625383667.657:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7f74549 code=0x7ffc0000 [ 395.444122][ T35] audit: type=1326 audit(1625383667.657:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x7ffc0000 [ 395.467108][ T35] audit: type=1326 audit(1625383667.667:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f74549 code=0x7ffc0000 [ 395.490072][ T35] audit: type=1326 audit(1625383667.667:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12615 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x7ffc0000 07:27:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @private2}]}, 0x50}}, 0x0) 07:27:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48d", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 07:27:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 07:27:48 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:48 executing program 4: clone3(&(0x7f0000000680)={0x10020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 396.010398][T12634] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.043570][T12639] ptrace attach of "/root/syz-executor.2"[12636] was attempted by "/root/syz-executor.2"[12639] 07:27:48 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) read(0xffffffffffffffff, 0x0, 0x0) 07:27:48 executing program 3: r0 = syz_io_uring_setup(0x211, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fstat(r0, &(0x7f00000003c0)) 07:27:48 executing program 1: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)='\v', 0x1}, {&(0x7f0000000580)="64bf", 0x2}], 0x0, 0x0) 07:27:48 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 396.815869][ T35] audit: type=1326 audit(1625383668.277:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12610 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7549 code=0x0 07:27:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 07:27:49 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x12, 0x7d3b}, 0x4c}}, 0x0) 07:27:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2, &(0x7f0000000380), 0x4) 07:27:49 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x40) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[], 0x191) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 07:27:49 executing program 1: set_mempolicy(0x8001, &(0x7f00000000c0)=0x312f, 0x200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) fchown(0xffffffffffffffff, 0x0, 0xee00) 07:27:50 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfe0b) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:27:50 executing program 2: setitimer(0x2, &(0x7f0000000240)={{0x0, 0xea60}, {0x77359400}}, 0x0) setitimer(0x2, 0x0, 0x0) 07:27:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x100) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:27:50 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:50 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1e}, 0x0) io_uring_enter(r1, 0xbf, 0x0, 0x0, 0x0, 0x0) 07:27:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f00000cc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x6196, 0x0, 0x0, 0x0, 0x0) [ 398.254273][T12694] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 07:27:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7", 0x3e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x8) 07:27:50 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x7, 0x0, &(0x7f00000000c0)) 07:27:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x135}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 07:27:51 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 398.870097][T12716] ptrace attach of "/root/syz-executor.3"[12714] was attempted by "/root/syz-executor.3"[12716] 07:27:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x22, 0x0, 0x0) 07:27:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:51 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000d51b00000000", 0x18) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) 07:27:51 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='*]@\x00', 0x0) 07:27:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f107000000364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 07:27:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 07:27:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:51 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), 0x4) 07:27:52 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 399.855401][T12743] ptrace attach of "/root/syz-executor.5"[12742] was attempted by "/root/syz-executor.5"[12743] 07:27:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001640)={0x14, 0x2, 0x1, 0x3}, 0x14}}, 0x0) 07:27:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 400.343156][T12758] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:27:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/204, 0x646) getdents(r0, &(0x7f0000000500)=""/151, 0x97) getdents(r0, &(0x7f0000000080)=""/169, 0xa9) 07:27:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) 07:27:53 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x8e6c, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) shutdown(r4, 0x0) 07:27:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x133}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:27:53 executing program 4: syz_io_uring_setup(0x701f, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 07:27:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 401.579676][T12761] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 401.602017][T12774] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:27:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000101ff3d14000008000000000a0000000c00198008000100e40c0000040019"], 0x24}}, 0x0) [ 402.203517][T12776] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:27:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000001180)=ANY=[], &(0x7f0000000100), 0x0) 07:27:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:27:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000000c0)={0x1c, 0x1e, 0x130b, 0x0, 0x0, "", [@generic="0700000000000000bb"]}, 0x1c}], 0x1}, 0x0) 07:27:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:54 executing program 3: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r0, &(0x7f0000000040), 0x7ffff000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000001c0)={0x2, 0x6, 0x3, 0x7, 0x7c9, 0x7}) ioctl$EVIOCGKEYCODE(r0, 0x40044591, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200000, 0x180) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000018c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000240)={{r1}, r2, 0x12, @inherit={0x68, &(0x7f0000000140)={0x1, 0x4, 0x0, 0x3, {0x0, 0x0, 0x8001, 0x1, 0xb010}, [0x4, 0x0, 0x1, 0x2]}}, @subvolid=0x7}) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setflags(r3, 0x2, 0x1) 07:27:54 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 07:27:55 executing program 5: setreuid(0x0, 0xee00) r0 = fork() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 07:27:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() 07:27:55 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:27:55 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x191) 07:27:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:27:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x40}, 0x18) lgetxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) [ 404.096331][ T58] Bluetooth: hci3: command 0x0406 tx timeout 07:27:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_io_uring_setup(0x89, &(0x7f0000000080), &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d5000/0x3000)=nil, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:27:56 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 07:28:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:00 executing program 4: r0 = syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000001c0)={r3}}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)={0x77359400}}, 0x3) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:28:00 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x6f, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x3000000000000}, 0x0) 07:28:00 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:00 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x6, 0x0) 07:28:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:01 executing program 5: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000160007041dfffd946f6105000a0000e8fe020801040008000800070004000000", 0x24}], 0x1}, 0x0) 07:28:01 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 07:28:01 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@rand_addr, @rand_addr, 0x0, 0x7, [@private, @loopback, @multicast1, @dev, @dev, @broadcast, @broadcast]}, 0x2c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x197, &(0x7f0000000200)="c4c691019919da07faea98d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0fb4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f958691a8a3fcf561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df6591cd574a02d4d9b9f3ebce31bd5982018ded8ceb71e75417dabc45f9fa0503befdcd0874ae979bc9581d6a854d4dfb7ffaed09bfcf330c365988c05e12ed069a42c964f79e16ad22f95ffaf5a1d4200b030d0b7b170051b850b78b196b00f0ffff72ac058a66ea2214ba81fdefa76b9b8df4a1203b820129976905984e26586931f700bbec30960449bfb7642485f2edf7bd55a715be62eecd33ee4d1480231a10e6ce6ad6942d6ac0799a6336259b1fde152b1628ba090a130cd9d7512698c13454ec3f5e7b146d732c3107e1766c0aa3f81d7240e6"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:28:01 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1000000010"], 0x28}], 0x1}, 0x0) [ 409.535426][T12892] ptrace attach of "/root/syz-executor.4"[12891] was attempted by "/root/syz-executor.4"[12892] 07:28:01 executing program 4: set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1d}, {0x6}]}) 07:28:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000000100)=""/184, 0xb8) 07:28:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 07:28:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x6) [ 410.104619][ T35] kauditd_printk_skb: 6 callbacks suppressed [ 410.104694][ T35] audit: type=1326 audit(1625383682.467:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12902 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31549 code=0x0 [ 410.280616][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:28:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc0031, 0xffffffffffffffff, 0x7706d000) 07:28:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') fchdir(r0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000002400)=ANY=[@ANYBLOB='\x00'], 0xa600) r1 = memfd_create(&(0x7f0000000140)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0Y\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xfa\xbf\xf3x\x86\xc2\xa3\t\x008\xb6XA]\xdc\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,R\x96X\x1ae', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0xd011, r1, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000002380)=""/93, 0x5d) 07:28:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETA(r0, 0x4b41, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, "877a60bccbe9d5c2"}) 07:28:03 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:03 executing program 3: unshare(0x4000680) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) 07:28:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="2000f8ff80dc8d06635f5f"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x31) 07:28:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40002081}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:28:03 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') pread64(r0, 0x0, 0x0, 0x0) [ 411.685348][T12946] ptrace attach of "/root/syz-executor.5"[12942] was attempted by "/root/syz-executor.5"[12946] 07:28:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000003c0)) 07:28:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x14}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x80000001, 0x5}, &(0x7f0000000040)) 07:28:05 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8c0}, 0x18) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x220) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x10000011) 07:28:05 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:05 executing program 5: unshare(0x64020000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000001a00190f00003fffffffda060200000000e80001dd0000040d000a00ea1100000005000000", 0x29}], 0x1) 07:28:05 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12b, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:28:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x14}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 413.348248][T12979] ptrace attach of "/root/syz-executor.2"[12974] was attempted by "/root/syz-executor.2"[12979] 07:28:05 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x171, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x34) [ 413.424884][T12980] IPVS: ftp: loaded support on port[0] = 21 07:28:06 executing program 3: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) [ 413.599984][T12980] vxcan1 speed is unknown, defaulting to 1000 07:28:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x14}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 414.242661][T12983] IPVS: ftp: loaded support on port[0] = 21 07:28:06 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0xfffffffffffffff0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:28:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x0, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f00000043c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000c"], 0x18}}], 0x2, 0x0) [ 414.544678][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.631710][T12983] vxcan1 speed is unknown, defaulting to 1000 07:28:07 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x6, &(0x7f0000000200)={0x10, {{0x29, 0x0, 0x0, @loopback}}}, 0x90) [ 415.133219][T13060] ptrace attach of "/root/syz-executor.4"[13059] was attempted by "/root/syz-executor.4"[13060] 07:28:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) 07:28:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x0, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:08 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000680)=[{}], 0x1, 0x80000001) r1 = io_uring_setup(0x28fe, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80002014}) 07:28:08 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xf, 0x0, 0x4) 07:28:08 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x541b, 0x0) 07:28:08 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x0, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="020000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)) 07:28:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 07:28:08 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) 07:28:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)=@ethtool_eee={0x44}}) 07:28:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:09 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x24}, {0x16}]}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:28:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x3000000000000}, 0x0) 07:28:09 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x176, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) [ 417.742845][ T35] audit: type=1326 audit(1625383690.107:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13105 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 [ 417.877660][ T35] audit: type=1326 audit(1625383690.137:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13107 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x0 07:28:10 executing program 4: r0 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x40000006) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ftruncate(r0, 0xdd5) fallocate(r0, 0x0, 0x0, 0x10000) [ 418.002234][T13116] ptrace attach of "/root/syz-executor.4"[13115] was attempted by "/root/syz-executor.4"[13116] 07:28:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(r1, 0x0, 0x0) 07:28:10 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:10 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x107, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x34) 07:28:11 executing program 5: r0 = creat(0x0, 0x0) r1 = syz_io_uring_setup(0x25f3, &(0x7f0000000080)={0x0, 0x4ad, 0x2, 0x0, 0x366, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040), 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) [ 418.596608][T13127] ptrace attach of "/root/syz-executor.2"[13125] was attempted by "/root/syz-executor.2"[13127] 07:28:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:11 executing program 2: unshare(0x40480) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$RNDADDENTROPY(r0, 0x40045201, 0x0) 07:28:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4b65, 0x0) 07:28:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bf00000000000000077647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc569cc61847a3687893a744b2af907cd408a9eafb1e536db9a53c0834c0bfa25f6fe44749fde027f6d9b734554f53f46333d4335707750f5e1a95c3691c793ae65b26963b3b4bbe07d4adbf5565aac2013c6ebb6daa46bb116ba41a5ce064579d932bd8", 0xc2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 419.286420][ T35] audit: type=1326 audit(1625383691.647:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13143 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 07:28:11 executing program 2: unshare(0x40480) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$RNDADDENTROPY(r0, 0x40045201, 0x0) [ 419.456653][T13151] ptrace attach of "/root/syz-executor.3"[13150] was attempted by "/root/syz-executor.3"[13151] 07:28:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) set_mempolicy(0x8001, &(0x7f00000000c0)=0x5, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0883752cf1e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 07:28:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000014c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 07:28:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0460fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 07:28:12 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:12 executing program 5: r0 = syz_io_uring_setup(0x587, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="26000000220047010564336e038d7c3bd7b534d6b36e850007008980e8ff31586d20002b1f00", 0x26) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:28:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="a85af2096167e2d8188da2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:28:12 executing program 3: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) [ 420.775781][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.936032][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.949770][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.988835][T13174] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.060560][ T35] audit: type=1326 audit(1625383693.427:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13172 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 [ 421.121338][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.131194][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.145776][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.189480][T13183] netlink: 37387 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.198252][T13184] ptrace attach of "/root/syz-executor.2"[13179] was attempted by "/root/syz-executor.2"[13184] 07:28:13 executing program 2: unshare(0x600) r0 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/mnt\x00') setns(r1, 0x0) clone(0x71204500, 0x0, 0x0, 0x0, 0x0) 07:28:13 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x8001, 0x7) r0 = socket$inet(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="05c0c77f75ea10ecf734ee60fcf27c995048fd94", 0x14}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 07:28:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 07:28:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x7}}, 0x20, 0x0, 0x0) [ 421.924599][T13189] IPVS: ftp: loaded support on port[0] = 21 07:28:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 422.276426][T13189] vxcan1 speed is unknown, defaulting to 1000 07:28:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 422.755734][T13223] IPVS: ftp: loaded support on port[0] = 21 07:28:15 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) r2 = dup2(r0, r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8990, &(0x7f0000000040)={'lo\x00'}) 07:28:15 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 422.904173][T13223] vxcan1 speed is unknown, defaulting to 1000 07:28:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 423.434499][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 07:28:16 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:17 executing program 2: unshare(0x600) r0 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/mnt\x00') setns(r1, 0x0) clone(0x71204500, 0x0, 0x0, 0x0, 0x0) 07:28:17 executing program 5: r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x4004) 07:28:17 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:17 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) ioctl(r0, 0x9374, &(0x7f00000000c0)) 07:28:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:17 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:17 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:17 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6673636f6e746578743d7322738922"]) 07:28:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 425.871318][T13295] IPVS: ftp: loaded support on port[0] = 21 [ 426.060126][T13295] vxcan1 speed is unknown, defaulting to 1000 07:28:18 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 426.368292][T13322] tmpfs: Unknown parameter 'fscontext' [ 426.402898][T13322] tmpfs: Unknown parameter 'fscontext' [ 426.458545][T13325] ------------[ cut here ]------------ [ 426.464291][T13325] WARNING: CPU: 1 PID: 13325 at mm/page_alloc.c:4999 __alloc_pages_nodemask+0x8a5/0xf90 [ 426.475865][T13325] Modules linked in: [ 426.479892][T13325] CPU: 1 PID: 13325 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 426.489191][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.499778][T13325] RIP: 0010:__alloc_pages_nodemask+0x8a5/0xf90 [ 426.506344][T13325] Code: 88 81 e3 00 20 00 00 45 85 ff 74 0c 41 f7 d7 41 21 df 0f 84 c4 03 00 00 45 31 e4 b8 00 00 00 00 41 bf 00 00 00 00 85 db 75 85 <0f> 0b 45 31 e4 31 c0 45 31 ff e9 76 ff ff ff 8b bd 2c ff ff ff 49 [ 426.526385][T13325] RSP: 0018:ffff8881626bb1e0 EFLAGS: 00010246 [ 426.532882][T13325] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 426.541219][T13325] RDX: 000000000000000a RSI: 0000000000000000 RDI: ffff8881626bb290 [ 426.549576][T13325] RBP: ffff8881626bb2e8 R08: ffffea000000000f R09: ffff88813fffa000 [ 426.557874][T13325] R10: 00000000638ab174 R11: ffff888161af8000 R12: 0000000000000000 [ 426.566248][T13325] R13: ffff888161af8a88 R14: 0000000000000015 R15: 0000000000000000 [ 426.574377][T13325] FS: 0000000000000000(0000) GS:ffff88813fd00000(0063) knlGS:00000000f556eb40 [ 426.583676][T13325] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 426.590583][T13325] CR2: 000000000815def0 CR3: 0000000162709000 CR4: 00000000001506e0 [ 426.598938][T13325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 426.607189][T13325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 426.615293][T13325] Call Trace: [ 426.618824][T13325] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 426.624939][T13325] ? kmsan_slab_alloc+0x8e/0xe0 [ 426.630123][T13325] ? kmem_cache_alloc_trace+0x8c7/0x1030 [ 426.636149][T13325] ? netlbl_cipsov4_add+0x14d0/0x51f0 [ 426.641790][T13325] ? genl_rcv_msg+0x1319/0x1610 [ 426.647012][T13325] ? netlink_rcv_skb+0x6fa/0x810 [ 426.652131][T13325] ? genl_rcv+0x63/0x80 [ 426.656642][T13325] ? netlink_unicast+0x11d6/0x14a0 [ 426.661939][T13325] ? __sys_sendmsg+0x714/0x830 [ 426.667011][T13325] ? __ia32_compat_sys_sendmsg+0x4a/0x70 [ 426.672828][T13325] ? __do_fast_syscall_32+0x127/0x180 [ 426.678494][T13325] ? do_fast_syscall_32+0x77/0xd0 [ 426.683690][T13325] alloc_pages_current+0x7b6/0xb60 [ 426.689161][T13325] ? __nla_validate_parse+0x371d/0x4ab0 [ 426.694988][T13325] kmalloc_order+0xaa/0x3e0 [ 426.699889][T13325] kmalloc_order_trace+0x80/0x1f0 [ 426.705100][T13325] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 426.711675][T13325] __kmalloc+0x416/0x550 [ 426.716225][T13325] ? __nla_validate+0x124/0x140 [ 426.721327][T13325] kcalloc+0x65/0xa0 [ 426.725661][T13325] netlbl_cipsov4_add+0x2b42/0x51f0 [ 426.731054][T13325] ? netlbl_unlhsh_netdev_handler+0x730/0x730 [ 426.737446][T13325] genl_rcv_msg+0x1319/0x1610 [ 426.742360][T13325] ? netlbl_unlhsh_netdev_handler+0x730/0x730 [ 426.748759][T13325] ? kmsan_set_origin_checked+0xa2/0x100 [ 426.754620][T13325] netlink_rcv_skb+0x6fa/0x810 [ 426.759759][T13325] ? genl_bind+0x4b0/0x4b0 [ 426.764384][T13325] genl_rcv+0x63/0x80 [ 426.768691][T13325] netlink_unicast+0x11d6/0x14a0 [ 426.773821][T13325] ? genl_pernet_exit+0x90/0x90 [ 426.779308][T13325] netlink_sendmsg+0x1740/0x1840 [ 426.784656][T13325] ____sys_sendmsg+0xcfc/0x12f0 [ 426.789831][T13325] ? netlink_getsockopt+0x1830/0x1830 [ 426.795550][T13325] __sys_sendmsg+0x714/0x830 [ 426.800352][T13325] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 426.806494][T13325] ? kmsan_get_metadata+0x116/0x180 [ 426.811876][T13325] ? kmsan_set_origin_checked+0xa2/0x100 [ 426.817820][T13325] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 426.824103][T13325] ? __msan_instrument_asm_store+0x104/0x130 [ 426.830401][T13325] ? kmsan_get_metadata+0x116/0x180 [ 426.835897][T13325] ? kmsan_get_metadata+0x116/0x180 [ 426.841280][T13325] __se_compat_sys_sendmsg+0xa7/0xc0 [ 426.846877][T13325] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 426.852554][T13325] __do_fast_syscall_32+0x127/0x180 [ 426.858061][T13325] do_fast_syscall_32+0x77/0xd0 [ 426.863089][T13325] do_SYSENTER_32+0x73/0x90 [ 426.867913][T13325] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.874426][T13325] RIP: 0023:0xf7f74549 [ 426.878752][T13325] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 426.898656][T13325] RSP: 002b:00000000f556e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 07:28:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1, 0x0, 0x0, 0xc) [ 426.907400][T13325] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 426.915674][T13325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.923798][T13325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.932049][T13325] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 426.940278][T13325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.948519][T13325] ---[ end trace 76b9064f410ed0c9 ]--- 07:28:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0xbbe7, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000080)) 07:28:19 executing program 4: futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ffffffff00000000000000000000000000000000000000000000eb3d099ef28cb94300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff"], 0x190) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(r1) 07:28:20 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:20 executing program 4: futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x12, 0x0, &(0x7f0000002d40)) 07:28:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0201a9ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffffa6000000e1000000887700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 07:28:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:21 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:21 executing program 4: futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:21 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_raw(r0, &(0x7f0000000400)=ANY=[], 0x4a00) read$char_raw(r0, &(0x7f0000004e00)={""/12213}, 0x3000) 07:28:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 429.147994][T13365] loop3: detected capacity change from 0 to 1 [ 429.286185][T13365] loop3: p1 p2 p3 p4 [ 429.290488][T13365] loop3: partition table partially beyond EOD, truncated [ 429.299721][T13365] loop3: p1 start 10 is beyond EOD, truncated [ 429.306011][T13365] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 429.321832][T13365] loop3: p3 start 225 is beyond EOD, truncated [ 429.328309][T13365] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 429.515175][T13365] loop3: detected capacity change from 0 to 1 07:28:22 executing program 2: unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x17, 0x0, 0x4) 07:28:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/softnet_stat\x00') preadv2(r0, &(0x7f0000002540)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x81, 0x0, 0x0) 07:28:22 executing program 4: futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:22 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) 07:28:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:23 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0xa, 0x6, 0x0) 07:28:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:23 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x11, 0x0, 0xc04a01) 07:28:23 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="9000000019001f4d154a817393278bff0a80a578020000000104740014000200ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 07:28:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:24 executing program 4: futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 431.771027][T13421] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. 07:28:24 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0) 07:28:24 executing program 3: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8081) 07:28:24 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:28:25 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:25 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x47169d9dbc2d0e22}, 0x0) io_uring_enter(r1, 0x393c, 0x0, 0x0, 0x0, 0x0) 07:28:25 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) 07:28:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:28:25 executing program 4: futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000000), 0x23200000) 07:28:25 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:25 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) 07:28:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x145042, 0x0) pwrite64(r1, &(0x7f00000003c0)="03", 0x1200, 0x4010040c000) 07:28:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:28:26 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:26 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x14}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:28:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x15) 07:28:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x1e000000, 0x0, 0x0, "91d5c02f156f20d3a6a0a484d94aa7e46fbdfe"}) 07:28:27 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, 0x0, 0x23200000) 07:28:27 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:27 executing program 2: uname(0x0) 07:28:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) clone3(&(0x7f0000000340)={0x40000000, 0x0, &(0x7f00000000c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x881) 07:28:27 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, 0x0, 0x23200000) 07:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000130001000000000000000000080000100100000010000080040000000800fcffffff0000d0002880080050"], 0xf8}], 0x1}, 0x0) [ 436.015657][T13494] IPVS: ftp: loaded support on port[0] = 21 07:28:28 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x80108906, 0x0) [ 436.474874][T13499] netlink: 'syz-executor.3': attribute type 40 has an invalid length. [ 436.484210][T13494] vxcan1 speed is unknown, defaulting to 1000 07:28:29 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:29 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, 0x0, 0x23200000) 07:28:29 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 437.000795][T13497] IPVS: ftp: loaded support on port[0] = 21 07:28:29 executing program 3: r0 = fork() r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}) 07:28:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 07:28:29 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 437.584606][T13497] vxcan1 speed is unknown, defaulting to 1000 07:28:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:31 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x17a, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x36) 07:28:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x40}, 0x0) 07:28:31 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 07:28:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x48}}, 0x0) 07:28:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 439.879095][T13587] ptrace attach of "/root/syz-executor.1"[13586] was attempted by "/root/syz-executor.1"[13587] 07:28:32 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='timerslack_ns\x00') read(r0, &(0x7f0000000000)=""/128, 0x80) 07:28:32 executing program 3: unshare(0x8000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x7fff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0xc, r1}) 07:28:32 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xc8a02, 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) 07:28:32 executing program 4: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 07:28:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000500)=ANY=[]) r4 = creat(&(0x7f0000000040)='.\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file2\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0xc0145401, 0x0) fstat(r4, &(0x7f0000008cc0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_aout(r6, &(0x7f0000000480)={{0xcc, 0x8, 0x4, 0x2a2, 0x37e, 0x20, 0x301, 0x5}, "f54b2452c5933c889bed1ffc78c26985182319cafbd1c2bcf51e490b995777eb260eaece3895e772dca1ebbb4f462aa08d680f93174e537bc94fcd4014fda97d4a8f039bb1a4fb88b37ab77a9df8c7bebfefb20b86c4371dda1044c40bb851d19e16f215c3fb7513a7a097dfa50faccb4e4fa561ab7688f3e5039b6d086c8f20a976c500d4040cfe42e9fea4f0e31a54ad15d9a68b70afa5e8a0e5c4eb613f19b5a2934f790db98634349accf25b5fdeb0cfc369", ['\x00', '\x00']}, 0x2d4) 07:28:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x38}, @timestamp_addr={0x44, 0x4, 0x16}, @generic={0x94, 0x2}]}}}], 0x20}}], 0x2, 0x0) 07:28:33 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x3c}}, 0x0) gettid() r0 = socket(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@hci={0x1f, 0x6488, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="f254294737bb0057", 0x5c8}], 0x1}, 0x0) 07:28:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000400)="c3", 0x1}], 0x1) 07:28:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 441.370683][T13618] loop1: detected capacity change from 0 to 270 07:28:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x10000000000000d2, 0xd9f, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 441.534503][T13618] FAT-fs (loop1): invalid media value (0x00) [ 441.541079][T13618] FAT-fs (loop1): Can't find a valid FAT filesystem [ 442.105957][T13623] FAT-fs (loop1): Unrecognized mount option "žòÃûu§ —ߥ¬ËNO¥a«vˆóå›ml ©vÅ" or missing value 07:28:34 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0xe3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) 07:28:34 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r5, 0x1) dup3(r4, r3, 0x0) [ 442.588137][T13615] not chained 140000 origins [ 442.592783][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 442.602952][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.613043][T13615] Call Trace: [ 442.616333][T13615] dump_stack+0x24c/0x2e0 [ 442.620692][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 442.626437][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 442.632093][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.637318][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 442.642978][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 442.649072][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.654302][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.659531][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 442.665355][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 442.671442][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.676660][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 442.682416][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 442.688520][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 442.693830][T13615] ? _copy_from_user+0x1fd/0x300 [ 442.698788][T13615] __msan_chain_origin+0x54/0xa0 [ 442.703750][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 442.708887][T13615] get_compat_msghdr+0x108/0x2b0 [ 442.713844][T13615] do_recvmmsg+0xdc1/0x22d0 [ 442.718371][T13615] ? psi_group_change+0x10e4/0x1440 [ 442.723669][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.728892][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 442.734711][T13615] ? kmsan_get_metadata+0x116/0x180 [ 442.739922][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 442.745571][T13615] ? __msan_poison_alloca+0xec/0x110 [ 442.750880][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 442.755671][T13615] __sys_recvmmsg+0x519/0x6f0 [ 442.760401][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.766508][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.772688][T13615] __do_fast_syscall_32+0x127/0x180 [ 442.777919][T13615] do_fast_syscall_32+0x77/0xd0 [ 442.782851][T13615] do_SYSENTER_32+0x73/0x90 07:28:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2272, &(0x7f0000001080)) [ 442.787374][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.793727][T13615] RIP: 0023:0xf7fbf549 [ 442.797818][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 442.817630][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 442.826067][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 442.834046][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 442.842010][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.849972][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 442.858022][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.866082][T13615] Uninit was stored to memory at: [ 442.871124][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 442.876851][T13615] __msan_chain_origin+0x54/0xa0 [ 442.881884][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 442.886993][T13615] get_compat_msghdr+0x108/0x2b0 [ 442.891924][T13615] do_recvmmsg+0xdc1/0x22d0 [ 442.896429][T13615] __sys_recvmmsg+0x519/0x6f0 [ 442.901188][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.907268][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.913420][T13615] __do_fast_syscall_32+0x127/0x180 [ 442.918630][T13615] do_fast_syscall_32+0x77/0xd0 [ 442.923472][T13615] do_SYSENTER_32+0x73/0x90 [ 442.927970][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.934314][T13615] [ 442.936625][T13615] Uninit was stored to memory at: [ 442.941641][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 442.947369][T13615] __msan_chain_origin+0x54/0xa0 [ 442.952384][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 442.957490][T13615] get_compat_msghdr+0x108/0x2b0 [ 442.962432][T13615] do_recvmmsg+0xdc1/0x22d0 [ 442.966927][T13615] __sys_recvmmsg+0x519/0x6f0 [ 442.971600][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.977662][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.983804][T13615] __do_fast_syscall_32+0x127/0x180 [ 442.988999][T13615] do_fast_syscall_32+0x77/0xd0 [ 442.993848][T13615] do_SYSENTER_32+0x73/0x90 [ 442.998360][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.004685][T13615] [ 443.006994][T13615] Uninit was stored to memory at: [ 443.011996][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 443.017711][T13615] __msan_chain_origin+0x54/0xa0 [ 443.022729][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 443.027840][T13615] get_compat_msghdr+0x108/0x2b0 [ 443.032779][T13615] do_recvmmsg+0xdc1/0x22d0 [ 443.037280][T13615] __sys_recvmmsg+0x519/0x6f0 [ 443.041951][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.048035][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.054188][T13615] __do_fast_syscall_32+0x127/0x180 [ 443.059397][T13615] do_fast_syscall_32+0x77/0xd0 [ 443.064269][T13615] do_SYSENTER_32+0x73/0x90 [ 443.068768][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.075106][T13615] [ 443.077415][T13615] Uninit was stored to memory at: [ 443.082504][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 443.088233][T13615] __msan_chain_origin+0x54/0xa0 [ 443.093165][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 443.098269][T13615] get_compat_msghdr+0x108/0x2b0 [ 443.103201][T13615] do_recvmmsg+0xdc1/0x22d0 [ 443.107697][T13615] __sys_recvmmsg+0x519/0x6f0 [ 443.112367][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.118437][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.124591][T13615] __do_fast_syscall_32+0x127/0x180 [ 443.129811][T13615] do_fast_syscall_32+0x77/0xd0 [ 443.134660][T13615] do_SYSENTER_32+0x73/0x90 [ 443.139185][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.145515][T13615] [ 443.147823][T13615] Uninit was stored to memory at: [ 443.152826][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 443.158628][T13615] __msan_chain_origin+0x54/0xa0 [ 443.163645][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 443.168753][T13615] get_compat_msghdr+0x108/0x2b0 [ 443.173684][T13615] do_recvmmsg+0xdc1/0x22d0 [ 443.178182][T13615] __sys_recvmmsg+0x519/0x6f0 [ 443.182853][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.188915][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.195155][T13615] __do_fast_syscall_32+0x127/0x180 [ 443.200353][T13615] do_fast_syscall_32+0x77/0xd0 [ 443.205196][T13615] do_SYSENTER_32+0x73/0x90 [ 443.210132][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.216463][T13615] [ 443.218771][T13615] Uninit was stored to memory at: [ 443.223789][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 443.229503][T13615] __msan_chain_origin+0x54/0xa0 [ 443.234433][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 443.239540][T13615] get_compat_msghdr+0x108/0x2b0 [ 443.244569][T13615] do_recvmmsg+0xdc1/0x22d0 [ 443.249067][T13615] __sys_recvmmsg+0x519/0x6f0 [ 443.253739][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.259812][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.265965][T13615] __do_fast_syscall_32+0x127/0x180 [ 443.271161][T13615] do_fast_syscall_32+0x77/0xd0 [ 443.276012][T13615] do_SYSENTER_32+0x73/0x90 [ 443.280514][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.286840][T13615] [ 443.289151][T13615] Uninit was stored to memory at: [ 443.294154][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 443.299984][T13615] __msan_chain_origin+0x54/0xa0 [ 443.304928][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 443.310033][T13615] get_compat_msghdr+0x108/0x2b0 [ 443.314965][T13615] do_recvmmsg+0xdc1/0x22d0 [ 443.319488][T13615] __sys_recvmmsg+0x519/0x6f0 [ 443.324185][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.330277][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.336427][T13615] __do_fast_syscall_32+0x127/0x180 07:28:35 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1111cc0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3eb, 0x10d882) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x10) r3 = syz_io_uring_setup(0x55d6, &(0x7f0000000040), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00004ad000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000340)) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000500)=r4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) fallocate(r3, 0x2, 0x1, 0xffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0xc, 0x4, "6a36b2bcbc0d497112ae7f387a3154b4613e351f0feb47e7e68bb3c603d9b358a2ad7ba68c1ca1861d7a53c5455c0c5b709c8be1cb1c165b9ae92b2f92ff9438", "ee0f8e202e873edfff76825c4b5310ac184c20af44ec67e289ce783247865d4a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/loop#\x00') pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)="e9304eac7898", 0x6}], 0x2, 0x4081002, 0x3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fallocate(r1, 0x11, 0x0, 0x100007e00) [ 443.341622][T13615] do_fast_syscall_32+0x77/0xd0 [ 443.346470][T13615] do_SYSENTER_32+0x73/0x90 [ 443.350969][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.357311][T13615] [ 443.359619][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 443.366444][T13615] do_recvmmsg+0xbf/0x22d0 [ 443.370855][T13615] do_recvmmsg+0xbf/0x22d0 [ 445.385017][T13615] not chained 150000 origins [ 445.389746][T13615] CPU: 1 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 445.399925][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.409996][T13615] Call Trace: [ 445.413290][T13615] dump_stack+0x24c/0x2e0 [ 445.417651][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 445.423403][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.428629][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.433848][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.439687][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 445.445774][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.450987][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.456816][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.462037][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.467867][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 445.473954][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.479175][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 445.484826][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 445.490908][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 445.496215][T13615] ? _copy_from_user+0x1fd/0x300 [ 445.501304][T13615] __msan_chain_origin+0x54/0xa0 [ 445.506266][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.511453][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.516416][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.520945][T13615] ? psi_group_change+0x10e4/0x1440 [ 445.526186][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.531408][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.537240][T13615] ? kmsan_get_metadata+0x116/0x180 [ 445.542457][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 445.548111][T13615] ? __msan_poison_alloca+0xec/0x110 [ 445.553419][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 445.558223][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.562926][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.569021][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.575198][T13615] __do_fast_syscall_32+0x127/0x180 [ 445.580419][T13615] do_fast_syscall_32+0x77/0xd0 [ 445.585291][T13615] do_SYSENTER_32+0x73/0x90 [ 445.589827][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.596179][T13615] RIP: 0023:0xf7fbf549 [ 445.600264][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.620071][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 445.628533][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 445.636528][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 445.644613][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.652603][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 445.660597][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.668604][T13615] Uninit was stored to memory at: [ 445.673629][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 445.679384][T13615] __msan_chain_origin+0x54/0xa0 [ 445.684350][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.689539][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.694510][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.699045][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.703750][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.709839][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.716016][T13615] __do_fast_syscall_32+0x127/0x180 [ 445.721244][T13615] do_fast_syscall_32+0x77/0xd0 [ 445.726118][T13615] do_SYSENTER_32+0x73/0x90 [ 445.730645][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.736998][T13615] [ 445.739327][T13615] Uninit was stored to memory at: [ 445.744343][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 445.750081][T13615] __msan_chain_origin+0x54/0xa0 [ 445.755035][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.760166][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.765123][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.769642][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.774344][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.780442][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.786625][T13615] __do_fast_syscall_32+0x127/0x180 [ 445.791847][T13615] do_fast_syscall_32+0x77/0xd0 [ 445.796727][T13615] do_SYSENTER_32+0x73/0x90 [ 445.801266][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.807616][T13615] [ 445.809941][T13615] Uninit was stored to memory at: [ 445.814958][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 445.820702][T13615] __msan_chain_origin+0x54/0xa0 [ 445.825664][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.830802][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.835754][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.840280][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.844978][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.851070][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.857261][T13615] __do_fast_syscall_32+0x127/0x180 [ 445.862486][T13615] do_fast_syscall_32+0x77/0xd0 [ 445.867361][T13615] do_SYSENTER_32+0x73/0x90 [ 445.871883][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.878231][T13615] [ 445.880554][T13615] Uninit was stored to memory at: [ 445.885573][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 445.891313][T13615] __msan_chain_origin+0x54/0xa0 [ 445.896264][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.901394][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.906346][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.910868][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.915558][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.921643][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.927826][T13615] __do_fast_syscall_32+0x127/0x180 [ 445.933045][T13615] do_fast_syscall_32+0x77/0xd0 [ 445.937914][T13615] do_SYSENTER_32+0x73/0x90 [ 445.942437][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.948798][T13615] [ 445.951124][T13615] Uninit was stored to memory at: [ 445.956141][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 445.961882][T13615] __msan_chain_origin+0x54/0xa0 [ 445.966842][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 445.971973][T13615] get_compat_msghdr+0x108/0x2b0 [ 445.976928][T13615] do_recvmmsg+0xdc1/0x22d0 [ 445.981452][T13615] __sys_recvmmsg+0x519/0x6f0 [ 445.986149][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.992237][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.998411][T13615] __do_fast_syscall_32+0x127/0x180 [ 446.003633][T13615] do_fast_syscall_32+0x77/0xd0 [ 446.008505][T13615] do_SYSENTER_32+0x73/0x90 [ 446.013028][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.019375][T13615] [ 446.021697][T13615] Uninit was stored to memory at: [ 446.026726][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 446.032463][T13615] __msan_chain_origin+0x54/0xa0 [ 446.037417][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 446.042550][T13615] get_compat_msghdr+0x108/0x2b0 [ 446.047502][T13615] do_recvmmsg+0xdc1/0x22d0 [ 446.052024][T13615] __sys_recvmmsg+0x519/0x6f0 [ 446.056726][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.062810][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.068984][T13615] __do_fast_syscall_32+0x127/0x180 [ 446.074209][T13615] do_fast_syscall_32+0x77/0xd0 [ 446.079084][T13615] do_SYSENTER_32+0x73/0x90 [ 446.083611][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.089964][T13615] [ 446.092287][T13615] Uninit was stored to memory at: [ 446.097304][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 446.103047][T13615] __msan_chain_origin+0x54/0xa0 [ 446.108003][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 446.113140][T13615] get_compat_msghdr+0x108/0x2b0 [ 446.118107][T13615] do_recvmmsg+0xdc1/0x22d0 [ 446.122639][T13615] __sys_recvmmsg+0x519/0x6f0 [ 446.127331][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.133419][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.139624][T13615] __do_fast_syscall_32+0x127/0x180 [ 446.144853][T13615] do_fast_syscall_32+0x77/0xd0 [ 446.149732][T13615] do_SYSENTER_32+0x73/0x90 [ 446.154264][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.160618][T13615] [ 446.162943][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 446.169613][T13615] do_recvmmsg+0xbf/0x22d0 [ 446.174050][T13615] do_recvmmsg+0xbf/0x22d0 [ 446.193980][ T8451] Bluetooth: hci4: command 0x0406 tx timeout [ 447.646604][T13615] not chained 160000 origins [ 447.651242][T13615] CPU: 1 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 447.661415][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.671507][T13615] Call Trace: [ 447.674918][T13615] dump_stack+0x24c/0x2e0 [ 447.679288][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 447.685113][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 447.690773][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.695988][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 447.701637][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 447.707726][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.712955][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.718179][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 447.724010][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 447.730115][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.735356][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 447.741026][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 447.747117][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 447.752420][T13615] ? _copy_from_user+0x1fd/0x300 [ 447.757378][T13615] __msan_chain_origin+0x54/0xa0 [ 447.762330][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 447.767462][T13615] get_compat_msghdr+0x108/0x2b0 [ 447.772419][T13615] do_recvmmsg+0xdc1/0x22d0 [ 447.776941][T13615] ? psi_group_change+0x10e4/0x1440 [ 447.782159][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.787376][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 447.793471][T13615] ? kmsan_get_metadata+0x116/0x180 [ 447.798684][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 447.804339][T13615] ? __msan_poison_alloca+0xec/0x110 [ 447.809646][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 447.814436][T13615] __sys_recvmmsg+0x519/0x6f0 [ 447.819138][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.825331][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.831511][T13615] __do_fast_syscall_32+0x127/0x180 [ 447.836732][T13615] do_fast_syscall_32+0x77/0xd0 [ 447.841605][T13615] do_SYSENTER_32+0x73/0x90 [ 447.846123][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.852470][T13615] RIP: 0023:0xf7fbf549 [ 447.856552][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 447.876180][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.884621][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 447.892604][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 447.900850][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.908924][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.916912][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.924906][T13615] Uninit was stored to memory at: [ 447.929930][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 447.935679][T13615] __msan_chain_origin+0x54/0xa0 [ 447.940637][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 447.945756][T13615] get_compat_msghdr+0x108/0x2b0 [ 447.950702][T13615] do_recvmmsg+0xdc1/0x22d0 [ 447.955218][T13615] __sys_recvmmsg+0x519/0x6f0 [ 447.959922][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.966093][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.972262][T13615] __do_fast_syscall_32+0x127/0x180 [ 447.977479][T13615] do_fast_syscall_32+0x77/0xd0 [ 447.982431][T13615] do_SYSENTER_32+0x73/0x90 [ 447.986948][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.993276][T13615] [ 447.995676][T13615] Uninit was stored to memory at: [ 448.000677][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.006391][T13615] __msan_chain_origin+0x54/0xa0 [ 448.011410][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.016518][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.021462][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.025962][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.030645][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.036709][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.042862][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.048059][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.052908][T13615] do_SYSENTER_32+0x73/0x90 [ 448.057412][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.063741][T13615] [ 448.066046][T13615] Uninit was stored to memory at: [ 448.071049][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.076765][T13615] __msan_chain_origin+0x54/0xa0 [ 448.081700][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.086806][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.091741][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.096241][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.100925][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.106992][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.113231][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.118447][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.123297][T13615] do_SYSENTER_32+0x73/0x90 [ 448.127894][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.134233][T13615] [ 448.136541][T13615] Uninit was stored to memory at: [ 448.141543][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.147256][T13615] __msan_chain_origin+0x54/0xa0 [ 448.152186][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.157293][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.162331][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.166830][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.171502][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.177568][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.183720][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.188913][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.193766][T13615] do_SYSENTER_32+0x73/0x90 [ 448.198267][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.204598][T13615] [ 448.206909][T13615] Uninit was stored to memory at: [ 448.211917][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.217641][T13615] __msan_chain_origin+0x54/0xa0 [ 448.222570][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.227676][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.232694][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.237194][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.241868][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.248193][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.254344][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.259582][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.264432][T13615] do_SYSENTER_32+0x73/0x90 [ 448.268937][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.275262][T13615] [ 448.277580][T13615] Uninit was stored to memory at: [ 448.282584][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.288298][T13615] __msan_chain_origin+0x54/0xa0 [ 448.293234][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.298343][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.303275][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.307775][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.312452][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.318519][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.324677][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.329876][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.334722][T13615] do_SYSENTER_32+0x73/0x90 [ 448.339220][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.345544][T13615] [ 448.347853][T13615] Uninit was stored to memory at: [ 448.352858][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 448.358582][T13615] __msan_chain_origin+0x54/0xa0 [ 448.363513][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.368622][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.373563][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.378073][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.382748][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.388815][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.394968][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.400163][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.405011][T13615] do_SYSENTER_32+0x73/0x90 [ 448.409509][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.415836][T13615] [ 448.418144][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 448.424797][T13615] do_recvmmsg+0xbf/0x22d0 [ 448.429207][T13615] do_recvmmsg+0xbf/0x22d0 [ 448.456224][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.462742][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.784282][T13615] not chained 170000 origins [ 448.788932][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 448.799110][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.809154][T13615] Call Trace: [ 448.812465][T13615] dump_stack+0x24c/0x2e0 [ 448.816783][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 448.822491][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 448.828128][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.833330][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 448.839034][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 448.845092][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.850274][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.855453][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 448.861328][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 448.867399][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.872678][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 448.878289][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 448.884337][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 448.889603][T13615] ? _copy_from_user+0x1fd/0x300 [ 448.894526][T13615] __msan_chain_origin+0x54/0xa0 [ 448.899553][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 448.904660][T13615] get_compat_msghdr+0x108/0x2b0 [ 448.909584][T13615] do_recvmmsg+0xdc1/0x22d0 [ 448.914072][T13615] ? psi_group_change+0x10e4/0x1440 [ 448.919340][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.924532][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 448.930319][T13615] ? kmsan_get_metadata+0x116/0x180 [ 448.935511][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 448.941124][T13615] ? __msan_poison_alloca+0xec/0x110 [ 448.946388][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 448.951135][T13615] __sys_recvmmsg+0x519/0x6f0 [ 448.955796][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.961848][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.967996][T13615] __do_fast_syscall_32+0x127/0x180 [ 448.973178][T13615] do_fast_syscall_32+0x77/0xd0 [ 448.978282][T13615] do_SYSENTER_32+0x73/0x90 [ 448.982766][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.989133][T13615] RIP: 0023:0xf7fbf549 [ 448.993416][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.013125][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.021567][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 449.029536][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 449.037516][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.045557][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 449.053522][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.061494][T13615] Uninit was stored to memory at: [ 449.066491][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.072205][T13615] __msan_chain_origin+0x54/0xa0 [ 449.077212][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.082306][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.087221][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.091713][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.096374][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.102426][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.108667][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.113853][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.118697][T13615] do_SYSENTER_32+0x73/0x90 [ 449.123203][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.129526][T13615] [ 449.131837][T13615] Uninit was stored to memory at: [ 449.136835][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.142539][T13615] __msan_chain_origin+0x54/0xa0 [ 449.147457][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.152568][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.157587][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.162073][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.166742][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.172890][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.179193][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.184396][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.189245][T13615] do_SYSENTER_32+0x73/0x90 [ 449.193743][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.200067][T13615] [ 449.202518][T13615] Uninit was stored to memory at: [ 449.207513][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.213220][T13615] __msan_chain_origin+0x54/0xa0 [ 449.218150][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.223253][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.228169][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.232755][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.237424][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.243478][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.249623][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.254906][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.259749][T13615] do_SYSENTER_32+0x73/0x90 [ 449.264233][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.270543][T13615] [ 449.272845][T13615] Uninit was stored to memory at: [ 449.277841][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.283542][T13615] __msan_chain_origin+0x54/0xa0 [ 449.288458][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.293564][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.298482][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.302969][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.307647][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.313715][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.319849][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.325044][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.329880][T13615] do_SYSENTER_32+0x73/0x90 [ 449.334362][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.340673][T13615] [ 449.342973][T13615] Uninit was stored to memory at: [ 449.347967][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.353671][T13615] __msan_chain_origin+0x54/0xa0 [ 449.358588][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.363682][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.368599][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.373085][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.377749][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.383814][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.389973][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.395152][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.399996][T13615] do_SYSENTER_32+0x73/0x90 [ 449.404483][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.410816][T13615] [ 449.413118][T13615] Uninit was stored to memory at: [ 449.418113][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.423812][T13615] __msan_chain_origin+0x54/0xa0 [ 449.428727][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.433823][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.438752][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.443236][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.447893][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.453942][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.460076][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.465256][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.470090][T13615] do_SYSENTER_32+0x73/0x90 [ 449.474594][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.481027][T13615] [ 449.483326][T13615] Uninit was stored to memory at: [ 449.488319][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 449.494022][T13615] __msan_chain_origin+0x54/0xa0 [ 449.498939][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.504030][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.508954][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.513464][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.518135][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.524198][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.530382][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.535565][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.540396][T13615] do_SYSENTER_32+0x73/0x90 [ 449.544879][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.551207][T13615] [ 449.553507][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 449.560151][T13615] do_recvmmsg+0xbf/0x22d0 [ 449.564552][T13615] do_recvmmsg+0xbf/0x22d0 [ 449.796129][T13615] not chained 180000 origins [ 449.800952][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 449.811089][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.821134][T13615] Call Trace: [ 449.824408][T13615] dump_stack+0x24c/0x2e0 [ 449.828726][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 449.834437][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 449.840051][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.845231][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 449.850846][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 449.856898][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.862082][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.867261][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 449.873050][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.879098][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.884275][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 449.889889][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 449.895936][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 449.901202][T13615] ? _copy_from_user+0x1fd/0x300 [ 449.906120][T13615] __msan_chain_origin+0x54/0xa0 [ 449.911054][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 449.916177][T13615] get_compat_msghdr+0x108/0x2b0 [ 449.921131][T13615] do_recvmmsg+0xdc1/0x22d0 [ 449.925629][T13615] ? psi_group_change+0x10e4/0x1440 [ 449.930816][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.935996][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 449.941792][T13615] ? kmsan_get_metadata+0x116/0x180 [ 449.946974][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 449.952590][T13615] ? __msan_poison_alloca+0xec/0x110 [ 449.957855][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 449.962602][T13615] __sys_recvmmsg+0x519/0x6f0 [ 449.967264][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.973316][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.979452][T13615] __do_fast_syscall_32+0x127/0x180 [ 449.984637][T13615] do_fast_syscall_32+0x77/0xd0 [ 449.989472][T13615] do_SYSENTER_32+0x73/0x90 [ 449.993957][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.000267][T13615] RIP: 0023:0xf7fbf549 [ 450.004316][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.023910][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.032313][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 450.040267][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 450.048222][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.056175][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.064128][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.072086][T13615] Uninit was stored to memory at: [ 450.077122][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.082827][T13615] __msan_chain_origin+0x54/0xa0 [ 450.087742][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.092835][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.097752][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.102240][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.106902][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.112953][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.119090][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.124276][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.129116][T13615] do_SYSENTER_32+0x73/0x90 [ 450.133602][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.139912][T13615] [ 450.142213][T13615] Uninit was stored to memory at: [ 450.147206][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.152922][T13615] __msan_chain_origin+0x54/0xa0 [ 450.157854][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.162973][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.167892][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.172378][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.177059][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.183114][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.189250][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.194443][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.199276][T13615] do_SYSENTER_32+0x73/0x90 [ 450.203760][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.210067][T13615] [ 450.212368][T13615] Uninit was stored to memory at: [ 450.217375][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.223077][T13615] __msan_chain_origin+0x54/0xa0 [ 450.228019][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.233123][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.238041][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.242526][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.247184][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.253231][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.259369][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.264551][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.269407][T13615] do_SYSENTER_32+0x73/0x90 [ 450.273890][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.280218][T13615] [ 450.282537][T13615] Uninit was stored to memory at: [ 450.287530][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.293233][T13615] __msan_chain_origin+0x54/0xa0 [ 450.298149][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.303240][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.308169][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.312654][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.317311][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.323361][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.329498][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.334688][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.339519][T13615] do_SYSENTER_32+0x73/0x90 [ 450.344003][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.350339][T13615] [ 450.352641][T13615] Uninit was stored to memory at: [ 450.357634][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.363336][T13615] __msan_chain_origin+0x54/0xa0 [ 450.368253][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.373346][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.378262][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.382747][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.387405][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.393464][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.399600][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.404785][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.409620][T13615] do_SYSENTER_32+0x73/0x90 [ 450.414102][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.420410][T13615] [ 450.422709][T13615] Uninit was stored to memory at: [ 450.427700][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.433411][T13615] __msan_chain_origin+0x54/0xa0 [ 450.438385][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.443520][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.448488][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.452977][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.457632][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.463677][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.469815][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.474996][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.479826][T13615] do_SYSENTER_32+0x73/0x90 [ 450.484306][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.490643][T13615] [ 450.492944][T13615] Uninit was stored to memory at: [ 450.497948][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 450.503649][T13615] __msan_chain_origin+0x54/0xa0 [ 450.508571][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.513662][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.518582][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.523070][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.527731][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.533880][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.540045][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.545296][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.550141][T13615] do_SYSENTER_32+0x73/0x90 [ 450.554669][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.561000][T13615] [ 450.563301][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 450.569948][T13615] do_recvmmsg+0xbf/0x22d0 [ 450.574349][T13615] do_recvmmsg+0xbf/0x22d0 [ 450.805611][T13615] not chained 190000 origins [ 450.810235][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 450.820471][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.830507][T13615] Call Trace: [ 450.833769][T13615] dump_stack+0x24c/0x2e0 [ 450.838093][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 450.843824][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 450.849446][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.854631][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 450.860249][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 450.866302][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.871484][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.876683][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 450.882472][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.888519][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.893698][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 450.899311][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 450.905360][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 450.910626][T13615] ? _copy_from_user+0x1fd/0x300 [ 450.915546][T13615] __msan_chain_origin+0x54/0xa0 [ 450.920484][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 450.925609][T13615] get_compat_msghdr+0x108/0x2b0 [ 450.930549][T13615] do_recvmmsg+0xdc1/0x22d0 [ 450.935037][T13615] ? psi_group_change+0x10e4/0x1440 [ 450.940227][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.945436][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 450.951234][T13615] ? kmsan_get_metadata+0x116/0x180 [ 450.956414][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 450.962028][T13615] ? __msan_poison_alloca+0xec/0x110 [ 450.967299][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 450.972060][T13615] __sys_recvmmsg+0x519/0x6f0 [ 450.976724][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.982777][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.988933][T13615] __do_fast_syscall_32+0x127/0x180 [ 450.994135][T13615] do_fast_syscall_32+0x77/0xd0 [ 450.998985][T13615] do_SYSENTER_32+0x73/0x90 [ 451.003477][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.009790][T13615] RIP: 0023:0xf7fbf549 [ 451.013839][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.033428][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 451.041833][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 451.049791][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 451.057778][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.065825][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 451.073800][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.081794][T13615] Uninit was stored to memory at: [ 451.086796][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.092518][T13615] __msan_chain_origin+0x54/0xa0 [ 451.097436][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.102531][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.107450][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.111936][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.116593][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.122651][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.128810][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.134003][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.138861][T13615] do_SYSENTER_32+0x73/0x90 [ 451.143356][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.149672][T13615] [ 451.151980][T13615] Uninit was stored to memory at: [ 451.157079][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.162784][T13615] __msan_chain_origin+0x54/0xa0 [ 451.167700][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.172792][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.177711][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.182201][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.186858][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.192910][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.199046][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.204226][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.209056][T13615] do_SYSENTER_32+0x73/0x90 [ 451.213564][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.219952][T13615] [ 451.222267][T13615] Uninit was stored to memory at: [ 451.227314][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.233027][T13615] __msan_chain_origin+0x54/0xa0 [ 451.237950][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.243047][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.247993][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.252533][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.257194][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.263295][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.269428][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.274651][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.279501][T13615] do_SYSENTER_32+0x73/0x90 [ 451.283983][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.290293][T13615] [ 451.292594][T13615] Uninit was stored to memory at: [ 451.297601][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.303302][T13615] __msan_chain_origin+0x54/0xa0 [ 451.308217][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.313309][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.318227][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.322715][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.327389][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.333451][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.339615][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.344818][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.349664][T13615] do_SYSENTER_32+0x73/0x90 [ 451.354176][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.360498][T13615] [ 451.362800][T13615] Uninit was stored to memory at: [ 451.367795][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.373534][T13615] __msan_chain_origin+0x54/0xa0 [ 451.378494][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.383591][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.388508][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.392995][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.397664][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.403730][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.409892][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.415077][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.419922][T13615] do_SYSENTER_32+0x73/0x90 [ 451.424403][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.430727][T13615] [ 451.433028][T13615] Uninit was stored to memory at: [ 451.438027][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.443724][T13615] __msan_chain_origin+0x54/0xa0 [ 451.448641][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.453738][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.458676][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.463168][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.467840][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.473905][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.480051][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.485232][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.490065][T13615] do_SYSENTER_32+0x73/0x90 [ 451.494555][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.500873][T13615] [ 451.503175][T13615] Uninit was stored to memory at: [ 451.508168][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 451.513869][T13615] __msan_chain_origin+0x54/0xa0 [ 451.518784][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.523971][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.528900][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.533380][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.538036][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.544081][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.550216][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.555403][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.560272][T13615] do_SYSENTER_32+0x73/0x90 [ 451.564766][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.571084][T13615] [ 451.573393][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 451.580085][T13615] do_recvmmsg+0xbf/0x22d0 [ 451.584492][T13615] do_recvmmsg+0xbf/0x22d0 [ 451.800583][T13615] not chained 200000 origins [ 451.805308][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 451.815499][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.825583][T13615] Call Trace: [ 451.828846][T13615] dump_stack+0x24c/0x2e0 [ 451.833165][T13615] kmsan_internal_chain_origin+0x6f/0x130 [ 451.838866][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 451.844481][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.849683][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 451.855296][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 451.861347][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.866546][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.871741][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 451.877572][T13615] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.883634][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.888958][T13615] ? kmsan_set_origin_checked+0xa2/0x100 [ 451.894582][T13615] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 451.900628][T13615] ? kmsan_unpoison_shadow+0x74/0xa0 [ 451.905908][T13615] ? _copy_from_user+0x1fd/0x300 [ 451.910841][T13615] __msan_chain_origin+0x54/0xa0 [ 451.915765][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 451.920866][T13615] get_compat_msghdr+0x108/0x2b0 [ 451.925791][T13615] do_recvmmsg+0xdc1/0x22d0 [ 451.930295][T13615] ? psi_group_change+0x10e4/0x1440 [ 451.935478][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.940659][T13615] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 451.946448][T13615] ? kmsan_get_metadata+0x116/0x180 [ 451.951626][T13615] ? kmsan_internal_set_origin+0x82/0xc0 [ 451.957246][T13615] ? __msan_poison_alloca+0xec/0x110 [ 451.962513][T13615] ? __sys_recvmmsg+0xb5/0x6f0 [ 451.967263][T13615] __sys_recvmmsg+0x519/0x6f0 [ 451.971930][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.977981][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.984119][T13615] __do_fast_syscall_32+0x127/0x180 [ 451.989302][T13615] do_fast_syscall_32+0x77/0xd0 [ 451.994136][T13615] do_SYSENTER_32+0x73/0x90 [ 451.998623][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.004934][T13615] RIP: 0023:0xf7fbf549 [ 452.008983][T13615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.028571][T13615] RSP: 002b:00000000f55985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 452.036967][T13615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 452.044934][T13615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 452.052887][T13615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.060838][T13615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 452.068796][T13615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.076758][T13615] Uninit was stored to memory at: [ 452.081755][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.087458][T13615] __msan_chain_origin+0x54/0xa0 [ 452.092377][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.097518][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.102529][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.107019][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.111678][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.117728][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.123868][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.129049][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.133881][T13615] do_SYSENTER_32+0x73/0x90 [ 452.138370][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.144691][T13615] [ 452.146991][T13615] Uninit was stored to memory at: [ 452.151982][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.157683][T13615] __msan_chain_origin+0x54/0xa0 [ 452.162600][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.167692][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.172619][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.177108][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.181889][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.187938][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.194091][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.199270][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.204102][T13615] do_SYSENTER_32+0x73/0x90 [ 452.208588][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.214898][T13615] [ 452.217284][T13615] Uninit was stored to memory at: [ 452.222275][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.227991][T13615] __msan_chain_origin+0x54/0xa0 [ 452.232922][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.238014][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.242943][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.247428][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.252096][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.258147][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.264282][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.269465][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.274302][T13615] do_SYSENTER_32+0x73/0x90 [ 452.278795][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.285105][T13615] [ 452.287407][T13615] Uninit was stored to memory at: [ 452.292400][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.298098][T13615] __msan_chain_origin+0x54/0xa0 [ 452.303014][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.308112][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.313044][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.317532][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.322190][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.328243][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.334379][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.339561][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.344407][T13615] do_SYSENTER_32+0x73/0x90 [ 452.348897][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.355208][T13615] [ 452.357510][T13615] Uninit was stored to memory at: [ 452.362510][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.368211][T13615] __msan_chain_origin+0x54/0xa0 [ 452.373150][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.378246][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.383172][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.387656][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.392314][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.398363][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.404501][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.409696][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.414531][T13615] do_SYSENTER_32+0x73/0x90 [ 452.419026][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.425340][T13615] [ 452.427643][T13615] Uninit was stored to memory at: [ 452.432634][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.438334][T13615] __msan_chain_origin+0x54/0xa0 [ 452.443274][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.448368][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.453286][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.457770][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.462428][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.468477][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.474614][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.479815][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.484661][T13615] do_SYSENTER_32+0x73/0x90 [ 452.489147][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.495458][T13615] [ 452.497759][T13615] Uninit was stored to memory at: [ 452.502750][T13615] kmsan_internal_chain_origin+0xad/0x130 [ 452.508450][T13615] __msan_chain_origin+0x54/0xa0 [ 452.513367][T13615] __get_compat_msghdr+0x6db/0x9d0 [ 452.518459][T13615] get_compat_msghdr+0x108/0x2b0 [ 452.523378][T13615] do_recvmmsg+0xdc1/0x22d0 [ 452.527863][T13615] __sys_recvmmsg+0x519/0x6f0 [ 452.532518][T13615] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.538566][T13615] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.544704][T13615] __do_fast_syscall_32+0x127/0x180 [ 452.549885][T13615] do_fast_syscall_32+0x77/0xd0 [ 452.554805][T13615] do_SYSENTER_32+0x73/0x90 [ 452.559290][T13615] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.565599][T13615] [ 452.567899][T13615] Local variable ----msg_sys@do_recvmmsg created at: [ 452.574542][T13615] do_recvmmsg+0xbf/0x22d0 [ 452.578945][T13615] do_recvmmsg+0xbf/0x22d0 07:28:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0, 0x500}, 0x0) 07:28:45 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:45 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1111cc0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3eb, 0x10d882) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x10) r3 = syz_io_uring_setup(0x55d6, &(0x7f0000000040), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00004ad000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000340)) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000500)=r4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) fallocate(r3, 0x2, 0x1, 0xffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0xc, 0x4, "6a36b2bcbc0d497112ae7f387a3154b4613e351f0feb47e7e68bb3c603d9b358a2ad7ba68c1ca1861d7a53c5455c0c5b709c8be1cb1c165b9ae92b2f92ff9438", "ee0f8e202e873edfff76825c4b5310ac184c20af44ec67e289ce783247865d4a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/loop#\x00') pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)="e9304eac7898", 0x6}], 0x2, 0x4081002, 0x3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fallocate(r1, 0x11, 0x0, 0x100007e00) 07:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) 07:28:45 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x6fc72d0f, 0x1000000}) 07:28:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:45 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653078100000000000000b097eaa769be6d28c41bd34e677d114b655ef5a2f96391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc4ad2b0ca", 0x63}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:28:45 executing program 1: set_mempolicy(0x2, &(0x7f00000001c0)=0xc15f, 0x7f) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local}}}], 0x38}}], 0x1, 0x0) [ 453.693454][ T35] audit: type=1804 audit(1625383726.058:97): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir852724208/syzkaller.yGlQFJ/99/cgroup.controllers" dev="sda1" ino=14560 res=1 errno=0 07:28:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 453.930921][ T35] audit: type=1804 audit(1625383726.198:98): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir852724208/syzkaller.yGlQFJ/99/cgroup.controllers" dev="sda1" ino=14560 res=1 errno=0 [ 454.017331][T13716] ptrace attach of "/root/syz-executor.4"[13715] was attempted by "/root/syz-executor.4"[13716] 07:28:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b40)=@getpolicy={0x64, 0x15, 0x40b, 0x0, 0x0, {{@in=@loopback, @in=@multicast2}, 0x6e6bb2}, [@XFRMA_SET_MARK_MASK={0x8}, @policy_type={0xa}]}, 0x64}}, 0x0) 07:28:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x3d}}) 07:28:46 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 454.171584][ T35] audit: type=1326 audit(1625383726.418:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13708 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31549 code=0x7ffc0000 [ 454.194899][ T35] audit: type=1326 audit(1625383726.418:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13708 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31549 code=0x7ffc0000 07:28:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) [ 454.220021][ T35] audit: type=1326 audit(1625383726.438:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13708 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7f31549 code=0x7ffc0000 07:28:46 executing program 1: r0 = syz_io_uring_setup(0x134e, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2aa8, &(0x7f0000000100)={0x0, 0x0, 0x33, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 07:28:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffe78) 07:28:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4b63, 0x3) 07:28:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f00000000c0)={'sit0\x00', 0x0}) 07:28:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) 07:28:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) 07:28:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) socket$packet(0x11, 0x4000000000002, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x0, @remote={0xfe, 0x10}}, 0x80, 0x0}}], 0x1, 0x0) 07:28:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:48 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:48 executing program 4: setreuid(0x0, 0xee00) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') setns(r0, 0x0) 07:28:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) 07:28:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x147e, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r2) r3 = syz_io_uring_setup(0x147e, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) fstat(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r4) 07:28:48 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$incfs(r0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r1) 07:28:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:49 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf5, &(0x7f0000000200)="8d31e183156939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f8bb2965cd7e1292aaa6375f12e594a37c9686d403d3a82d09ec2e57d3c3ec2117496b2dd4837334f73c37edfd46003eb96a9c79d3de0cab4645adde76e8ac90dba5bdc53cdc3235210b2e21df4f23e22471e2d53415f8f4151d0b915d0c68708733778513261f1e9a548b33b5e8a96381e1d1ff7adcc95d49b4e5a7f1497d726ba6d35a1c89c4b200f63c0b8a455a19c00994f30c13cd0c08ac368d2d3e0423f0959abbe34ea129b"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000400)={0x200000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x1a}, &(0x7f00000001c0)=""/46, 0x2e, &(0x7f0000000380)=""/27, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) tkill(r1, 0x34) 07:28:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) 07:28:49 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x0, @remote}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @can, 0x6, 0x0, 0x0, 0x0, 0x58}) 07:28:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) [ 457.175095][T13799] ptrace attach of "/root/syz-executor.4"[13798] was attempted by "/root/syz-executor.4"[13799] 07:28:49 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x7fff, 0xff) unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 07:28:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:28:50 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [{}], {0x10, 0x1}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r2, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) 07:28:50 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 07:28:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 457.828877][T13816] IPVS: ftp: loaded support on port[0] = 21 07:28:50 executing program 3: set_mempolicy(0x1, 0x0, 0x0) syz_io_uring_setup(0x6b3d, &(0x7f0000001140)={0x0, 0x0, 0x20}, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000011c0), &(0x7f0000001200)) [ 458.269064][T13816] vxcan1 speed is unknown, defaulting to 1000 07:28:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b4a, 0x0) 07:28:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 458.664210][T13817] IPVS: ftp: loaded support on port[0] = 21 07:28:51 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) 07:28:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:28:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3ffffffff0000004d2f58797559478200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) [ 459.213588][T13817] vxcan1 speed is unknown, defaulting to 1000 07:28:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:28:52 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x7fff, 0xff) unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 07:28:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x8, 0x0, &(0x7f0000001200)) 07:28:52 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) 07:28:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:28:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:28:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:28:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000002140)='./file0\x00', 0x400017e) 07:28:53 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) 07:28:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) [ 461.156619][T13912] IPVS: ftp: loaded support on port[0] = 21 07:28:53 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x5, 0x0, r1, 0x0}]) 07:28:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:28:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) [ 461.742658][T13912] vxcan1 speed is unknown, defaulting to 1000 07:28:55 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 07:28:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001480)="ff", 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="1e", 0x1}], 0x1) 07:28:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x36, 0x0, &(0x7f0000000040)) 07:28:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x1, 0x0, 0x0) 07:28:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xfffffffc, 0x4) 07:28:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 07:28:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:55 executing program 1: select(0x82, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x0, 0x9}, &(0x7f0000000140)={0x77359400}) 07:28:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000001a40), 0x4) 07:28:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x2, 0x4e23, @dev}, 0x10) 07:28:56 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 07:28:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4) 07:28:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000001a40), 0x4) 07:28:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) 07:28:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x140}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000900)) 07:28:57 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x50, &(0x7f0000000200)="8d31e183156939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f8bb296"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 07:28:57 executing program 1: set_mempolicy(0x4002, &(0x7f00000000c0)=0xf12, 0x99) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/242, 0xf2}], 0x1, 0x0, 0x0) 07:28:57 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000001a40), 0x4) [ 465.343213][T14015] ptrace attach of "/root/syz-executor.3"[14014] was attempted by "/root/syz-executor.3"[14015] 07:28:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) 07:28:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) 07:28:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x12d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x10) 07:28:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 466.130306][T14029] ptrace attach of "/root/syz-executor.0"[14028] was attempted by "/root/syz-executor.0"[14029] 07:28:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f107000000364602812c66538d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) 07:28:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)}, {0x0, 0x0, 0x40011580}], 0x0, &(0x7f0000000080)) 07:28:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x81000000, 0x0) ioctl$SG_IO(r0, 0x80086601, 0x0) 07:28:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) 07:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x70, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x70}}, 0x0) [ 466.583166][T14038] loop3: detected capacity change from 0 to 264192 07:28:59 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:28:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCMBIC(r0, 0x540c, 0x0) [ 466.772837][T14038] EXT4-fs error (device loop3): ext4_fill_super:4943: inode #2: comm syz-executor.3: iget: root inode unallocated [ 466.785678][T14038] EXT4-fs (loop3): get root inode failed [ 466.791442][T14038] EXT4-fs (loop3): mount failed [ 466.982147][T14038] loop3: detected capacity change from 0 to 264192 [ 467.083527][T14038] EXT4-fs: failed to create workqueue [ 467.089251][T14038] EXT4-fs (loop3): mount failed 07:28:59 executing program 4: unshare(0x20000400) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 07:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x44}}, 0x0) 07:28:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) 07:28:59 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:28:59 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:00 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x44}}, 0x0) 07:29:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) 07:29:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2202, 0x0) [ 468.042878][T14073] tmpfs: Bad value for 'gid' 07:29:00 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 468.086256][T14074] tmpfs: Bad value for 'gid' 07:29:00 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x44}}, 0x0) 07:29:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 468.679466][T14091] tmpfs: Bad value for 'gid' 07:29:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="67530700ae897094e71b0fa1f1070000003646020919dc864c42abbdfeab44bfcc83c3be704701d08b81fb83ce1e3216e0094a385b4351a67c08bf37254b7f7acbe7ea0b22f69f2e06ebb2297e6535ba25d33c7290d57ad867576334fb4f391e7603411ac0ab2b3dd5f5d15929e74033ba07a8e3be9aaf939dbb058f3a9091056a5ae651be328df4a64d81b769599f0700000008687c5a2fa7ff850d4bfe5230b1eb7f0f210436c9ef653007a7c2e78f83338b02d5436d16f2c619bac91a1dc89af2dd8a569678be5881a7eb9c72ea95615356c6827cb431c55c51", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 07:29:01 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000000)) 07:29:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) [ 469.283803][T14102] ptrace attach of "/root/syz-executor.4"[14100] was attempted by "/root/syz-executor.4"[14102] 07:29:01 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000015c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000000740)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:29:01 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:01 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 469.533321][T14106] tmpfs: Bad value for 'gid' [ 469.782221][T14115] ptrace attach of "/root/syz-executor.4"[14114] was attempted by "/root/syz-executor.4"[14115] 07:29:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, 0x2b, 0x0) 07:29:02 executing program 3: clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x100) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x1, 0x0, 0x0, @tick=0x97b0, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x1f, 0x4, 0xf8, 0x5, @time={0x8000, 0x2}, {0x7, 0x9}, {0x9d, 0x41}, @control={0x65, 0x8000, 0x2}}, {0x6, 0x6, 0x80, 0x7, @tick=0x80000000, {0x20, 0x7f}, {0x2, 0x5}, @addr={0x8, 0x1}}, {0x81, 0x77, 0x3b, 0x0, @time={0x8}, {0x8, 0x2}, {0xb9, 0x9}, @note={0x2, 0x2, 0x80, 0x40, 0x1}}, {0x40, 0x0, 0x3, 0x4, @time={0x2, 0x9000000}, {0x3, 0x1}, {0x1, 0x5}, @addr={0x0, 0x26}}, {0x79, 0x8, 0xe4, 0x0, @time={0x5fcabc43, 0xbd}, {0x7, 0x5f}, {0x1, 0x1}, @connect={{0x9e, 0x32}, {0x5, 0x81}}}], 0xc4) clone(0xe4241200, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 07:29:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:02 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:02 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 470.447459][T14129] IPVS: ftp: loaded support on port[0] = 21 [ 470.589834][T14129] vxcan1 speed is unknown, defaulting to 1000 07:29:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="02000080005ee686e65a4d"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 470.777164][T14141] tmpfs: Bad value for 'gid' [ 470.831597][T14138] ptrace attach of "/root/syz-executor.3"[14135] was attempted by "/root/syz-executor.3"[14138] 07:29:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) [ 470.956916][T14135] IPVS: ftp: loaded support on port[0] = 21 07:29:03 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:03 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18}, 0x18) [ 471.334083][T14155] ptrace attach of "/root/syz-executor.4"[14154] was attempted by "/root/syz-executor.4"[14155] 07:29:03 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1000) r1 = fork() r2 = pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 07:29:03 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 471.524697][T14160] tmpfs: Bad value for 'gid' [ 471.683697][T14135] vxcan1 speed is unknown, defaulting to 1000 [ 472.308737][T14211] tmpfs: Bad value for 'gid' 07:29:04 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r2, 0x4, 0x42c00) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 07:29:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:04 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:04 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:05 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:05 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 473.250697][T14228] tmpfs: Bad value for 'gid' 07:29:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:05 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=')', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001280)="ce", 0x1}, {0x0}, {&(0x7f0000001540)="d4", 0x1}], 0x4}}, {{&(0x7f0000001900)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=[@tclass={{0x14}}, @dontfrag={{0x14}}], 0x5000}}], 0x5, 0xfcc4) 07:29:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) [ 473.900703][T14242] tmpfs: Bad value for 'gid' 07:29:06 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:06 executing program 3: pselect6(0xca9a3b, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 07:29:06 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000100)) 07:29:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:06 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x1d, 0x2, &(0x7f0000ffc000/0x4000)=nil) 07:29:07 executing program 4: r0 = epoll_create(0xe9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) write$sndseq(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000004}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 07:29:07 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:07 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f3814f9f407000903018000200000000000000000000800020040000000", 0x24) 07:29:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}]}]}, 0x5c}}, 0x0) 07:29:08 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:08 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15a, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:29:08 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x104, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x34) 07:29:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:09 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:09 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:09 executing program 3: setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0x0]) 07:29:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:09 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:09 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ff, 0x0, "00200030000009d7001ce1ffffffff6382ece9"}) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "000800230000000010ff72edc3cf120000ffff"}) 07:29:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000380)={[{@utf8}]}) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r1, &(0x7f0000000200)=""/96, 0x60) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) 07:29:12 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:12 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) [ 480.023280][T14343] tmpfs: Bad value for 'gid' 07:29:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:12 executing program 3: rseq(&(0x7f0000000240), 0x20, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), 0x0) 07:29:12 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:12 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 480.362769][T14350] loop4: detected capacity change from 0 to 270 07:29:13 executing program 4: sched_setattr(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) [ 480.894938][ T4679] Bluetooth: hci5: command 0x0406 tx timeout 07:29:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 481.005739][T14367] tmpfs: Bad value for 'gid' 07:29:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0xfffffffffffffff0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6aa35543bd38d32b7c90d648e16c5e3b99e61a2858765e533ea18b4450f79e733257075f2f94ced8d75d51807cddd21499583577b260d0aae53f3c0e12a606a065caf857a9cf2092ae96e498fd38e357afee5ed8826d168ade8b69ed90ea51a23a2502180a7f28d443371fc8ae5bd650f5009"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:29:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:13 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:13 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0xfffffffffffffff0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x34, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6aa35543bd38d32b7c90d648e16c5e3b99e61a2858765e533ea18b4450f79"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 481.577584][T14380] ptrace attach of "/root/syz-executor.3"[14379] was attempted by "/root/syz-executor.3"[14380] 07:29:14 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@mmap}], [], 0x6b}}) 07:29:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) [ 481.854637][T14384] tmpfs: Bad value for 'gid' 07:29:14 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 481.994407][T14389] ptrace attach of "/root/syz-executor.4"[14388] was attempted by "/root/syz-executor.4"[14389] 07:29:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@empty}, {}, {}, 0x0, 0x0, 0x0, 0x6}, {{@in6=@mcast2}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, "ed105400000000003ec13e2000"}) 07:29:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) statx(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)) 07:29:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:15 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:16 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:17 executing program 0: open(0x0, 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000100)) 07:29:18 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x5}, {0x25}, {0x6}]}) 07:29:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77518017}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:18 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:18 executing program 0: open(0x0, 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 485.934326][ T35] audit: type=1326 audit(1625383758.290:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14444 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x0 07:29:18 executing program 0: open(0x0, 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:18 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:18 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 07:29:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:18 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{}, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x7}}}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:29:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:19 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:19 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:19 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) 07:29:19 executing program 3: process_vm_writev(0x0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/197, 0xc5}], 0x4, &(0x7f0000003880)=[{&(0x7f0000000180)=""/254, 0xffffff3f}], 0x1, 0x0) 07:29:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:19 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:19 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:20 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) 07:29:20 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f000000100005016669cd6531000000100000001000050166696c6532000000100000001000050166696c65330000001100000094", 0x71, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) openat$incfs(r0, &(0x7f0000000480)='.pending_reads\x00', 0x3c0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:29:20 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:20 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 488.506931][T14504] loop3: detected capacity change from 0 to 4096 07:29:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x54}}, 0x0) [ 488.573024][T14504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 07:29:21 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 488.763722][T14510] tmpfs: Bad value for 'gid' 07:29:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) poll(&(0x7f0000000040)=[{r1, 0x851d}], 0x1, 0x403) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x9}) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x8) 07:29:21 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:21 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 489.367492][T14521] 9pnet_virtio: no channels available for device syz 07:29:21 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 489.418674][T14523] 9pnet_virtio: no channels available for device syz 07:29:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x54}}, 0x0) [ 489.831437][T14529] tmpfs: Bad value for 'gid' 07:29:22 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:22 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:22 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 490.095472][T14543] 9pnet_virtio: no channels available for device syz 07:29:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x54}}, 0x0) 07:29:23 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 490.753217][T14553] tmpfs: Bad value for 'gid' [ 490.780544][T14554] 9pnet_virtio: no channels available for device syz 07:29:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'macvtap0\x00', @ifru_ivalue}) 07:29:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:23 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:23 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:23 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 491.413969][T14568] 9pnet_virtio: no channels available for device syz 07:29:23 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 07:29:24 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x68}}, 0x0) 07:29:24 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 492.072099][T14589] 9pnet_virtio: no channels available for device syz [ 492.099882][T14590] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 492.193216][T14595] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 07:29:24 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:24 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:29:24 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44}, {0x6}]}) 07:29:25 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x60}}, 0x0) 07:29:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) [ 492.900935][T14609] 9pnet_virtio: no channels available for device syz [ 492.959323][ T35] audit: type=1326 audit(1625383765.320:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14608 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x0 07:29:25 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:29:25 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:25 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d6", 0x53}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:29:25 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) [ 493.715620][T14629] 9pnet_virtio: no channels available for device syz [ 493.727022][T14631] ptrace attach of "/root/syz-executor.3"[14630] was attempted by "/root/syz-executor.3"[14631] 07:29:26 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653078100000000000000b097eaa769be6d28c41bd34e677d114b655ef5a2f96391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc4ad2b0cae5170871c145045174ad6edb6b0a183dd660eb94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507294a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d1437676", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:29:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:26 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:29:26 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:26 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 494.236127][T14642] ptrace attach of "/root/syz-executor.3"[14641] was attempted by "/root/syz-executor.3"[14642] 07:29:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="39000000130003475fae7cdac52541300600000001000000450000002500000019001a00040002000200000000000006040000000000000000", 0x39}], 0x1) 07:29:26 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:26 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) [ 494.602728][T14659] 9pnet_virtio: no channels available for device syz 07:29:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18}, 0x18) 07:29:27 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x153, &(0x7f00000002c0)="c4c691019919da078a0098d1e0a59320ff79b040f762910016775a8454cc16dc38f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689bce0e2db60713a3a7eeba5c9c6a47312334c2a97a4837714569255344e22045dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2c43a2316418ba9eb1f8fac5771967650c7016af47d3160960f4dc0f5e233b32d191e7e4038ed607016ac06e8214ed7d77cea361915907969ff9f43a5aba17ec18f82611bd8eaa876fcc5ff9eac52567ecc1e30746c21060f7aeee1160a26ea18d388ae82180105572516041514566de0d50c3f8c39388cc5b3aab2edc6a68af8873f3ddf84521a31ffdc0f3d96521fd6d5707adcdc066169672d06bee71dc1993f83c79c76ff9a270880bd60ff3b1fadffbb1c862c6bfad57922cc7af"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 07:29:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:27 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 07:29:27 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r0}}]}) 07:29:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18}, 0x18) 07:29:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) [ 495.816199][T14687] ptrace attach of "/root/syz-executor.3"[14685] was attempted by "/root/syz-executor.3"[14687] 07:29:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 07:29:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) 07:29:28 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 07:29:28 executing program 4: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:28 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18}, 0x18) 07:29:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) 07:29:29 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0xfffffffffffffff0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2a, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6aa35543bd38d32b7c90d648e16c5e3b99e61a285"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:29:29 executing program 4: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:29 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:29 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 497.160902][T14724] ptrace attach of "/root/syz-executor.3"[14722] was attempted by "/root/syz-executor.3"[14724] 07:29:29 executing program 3: r0 = syz_io_uring_setup(0x533, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0) listen(r3, 0x0) io_uring_enter(r0, 0x56b0, 0x0, 0x0, 0x0, 0x0) 07:29:29 executing program 4: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) 07:29:29 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:30 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:30 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000), 0x271) 07:29:30 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) 07:29:30 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 498.564066][T14765] 9pnet_virtio: no channels available for device syz 07:29:31 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/204, 0x18) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000480)=""/66, 0x42) getdents(r0, &(0x7f0000000140)=""/45, 0x2d) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) 07:29:31 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:31 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) 07:29:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:31 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) [ 499.436000][T14780] 9pnet_virtio: no channels available for device syz 07:29:31 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)=0x3e) 07:29:32 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:32 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f00000038c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, r4}}}], 0x40}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x29, 0x7, 0x53, 0x101, 0x14, @mcast2, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10001, 0x7}}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f00000038c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, r7}}}], 0x40}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b, r7}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000140)=""/181) 07:29:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:32 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:32 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 500.358384][T14806] 9pnet_virtio: no channels available for device syz 07:29:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 07:29:33 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:33 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:33 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) unshare(0x400) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 07:29:33 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, 0x0}}], 0x1, 0x0) 07:29:33 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:33 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18}, 0x18) 07:29:34 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:34 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) unshare(0x400) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 07:29:34 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:34 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 07:29:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffff125c, 0x0, 0xffffffffffffffff}) 07:29:34 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:34 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r1}}]}) 07:29:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) 07:29:35 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) unshare(0x400) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 07:29:35 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 07:29:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:35 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:35 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 07:29:35 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000340)) 07:29:35 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 07:29:35 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 07:29:35 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) unshare(0x400) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 07:29:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) [ 503.966996][ T35] audit: type=1800 audit(1625383776.330:104): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=14848 res=0 errno=0 07:29:36 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 07:29:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 07:29:36 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000340)) 07:29:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:36 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:36 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)) 07:29:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) [ 504.797622][ T35] audit: type=1804 audit(1625383777.150:105): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir849576243/syzkaller.gBhiqy/123/cgroup.controllers" dev="sda1" ino=14825 res=1 errno=0 07:29:37 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000340)) 07:29:37 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)) 07:29:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x541b, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x3, 0x0, "493559c8867c5a89"}) 07:29:37 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, 0x0, 0x0) 07:29:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:38 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000340)) 07:29:38 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)) 07:29:38 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x30, 0x0, 0x0) 07:29:38 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:38 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:38 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 07:29:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, 0x0, 0x0) 07:29:39 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) [ 506.809409][T14963] 9pnet_virtio: no channels available for device syz 07:29:39 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0xa, &(0x7f00000002c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:29:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:39 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 07:29:39 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid}]}) 07:29:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_ROPEN(r1, 0x0, 0x0) 07:29:39 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) [ 507.544962][T14982] 9pnet_virtio: no channels available for device syz 07:29:40 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:40 executing program 5: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 07:29:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0xb, 0x0, &(0x7f0000000040)) [ 507.972481][T14991] 9pnet_virtio: no channels available for device syz 07:29:40 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 07:29:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FIONREAD(r0, 0x401c5820, &(0x7f0000000000)) 07:29:40 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:40 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 508.464880][T15002] 9pnet_virtio: no channels available for device syz 07:29:41 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1078c5, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c577) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r1, 0x0, 0x5) 07:29:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$snapshot(r0, &(0x7f00000000c0)='\n', 0x200000c1) 07:29:41 executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 508.887521][T15011] 9pnet_virtio: no channels available for device syz 07:29:41 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd2710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 07:29:41 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200), 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 509.086459][ T35] audit: type=1804 audit(1625383781.451:106): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir849576243/syzkaller.gBhiqy/128/file0" dev="sda1" ino=14148 res=1 errno=0 [ 509.395832][T15023] 9pnet_virtio: no channels available for device syz [ 509.541196][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.547818][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 07:29:42 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8) 07:29:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 509.893008][ T35] audit: type=1804 audit(1625383782.251:107): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir849576243/syzkaller.gBhiqy/128/file0" dev="sda1" ino=14148 res=1 errno=0 07:29:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) 07:29:42 executing program 2: syz_io_uring_setup(0x3246, &(0x7f00000005c0), &(0x7f00005df000/0x3000)=nil, &(0x7f0000ea1000/0x4000)=nil, &(0x7f0000000700), 0x0) syz_io_uring_setup(0x41a3, &(0x7f0000000640), &(0x7f0000867000/0x9000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7976, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000d57000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000400)) 07:29:42 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200), 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:42 executing program 5: migrate_pages(0x0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000100)=0x100000001) 07:29:42 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x1b0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 07:29:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) 07:29:43 executing program 5: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000048000), 0x247ffffd) 07:29:43 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200), 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)={0x9}, 0x9) 07:29:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:43 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 511.222095][T15054] ptrace attach of "/root/syz-executor.0"[15053] was attempted by "/root/syz-executor.0"[15054] 07:29:44 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setreuid(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:29:44 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:44 executing program 5: r0 = io_uring_setup(0x233d, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x7) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff], 0x300) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 07:29:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0x117, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x30}}, 0x0) 07:29:44 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:44 executing program 2: socket$inet_udplite(0x11, 0x2, 0x88) 07:29:45 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:45 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x17e, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x34) 07:29:45 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) 07:29:45 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:45 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/175}, 0xb7, 0x1, 0x2000) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) 07:29:45 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000040)="7fdf5b6da81452289c7d9252bc0a7393aead8ab84526061744ce856b88394ddac08827e5849bc2d9415a8b6230e85247a20c6ec19b3b579ae1864cd193e388a467670e3bc2dcfb7a4b7308d892e90749b2ec2db1c3d8f06905f64ae7", 0x5c}, {&(0x7f0000000100)="91b7b747f9dde6ffcf4792a9035d6376c279de3f3de248be284495b0ebdc75e3f51c150315136360b69ad3e13ddd066cacecc98167120d4bb8b86e8de89689382d21c0cc41e1a4b65568d00403fb96a312a14b04228ae5cf1f6d751c447edf7801457a91c77f1d0c8e0e7c528de807c5f6e4173faa2383ea8e0ac8339b73691d25d31936e8f9bc5fae4f0b25a9f7b5aa812e6154741bbb6f66ecabf82105e9c925692280d742ec38c0dbd37a92b8116d054691984e5d522c44c746ab94", 0xbd}, {0x0}, {&(0x7f0000000480)="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", 0xd80}, {&(0x7f0000001480)="6d949daa7c060fe7ae040ebdb70ade87e763e28b878ccf44494db59d74e0cbfe8d1042427001373f8bdf09d838d9c70da9601abe8375087b7d962daa1254bebadaf8e8a23be30e778e6e2cbc690e2b806e63a66d232f8907de3831d96ad11baa35d9b5352da600994c700e9744443076fd4cfa81af5710a0543afcfaca6fd6c11a30ead9195cb1db48c65e376f8f7963488939eef9335e5ed314260c9f2515b048f6d778192024786d180b330121b764eccdce9820a9b3412d39", 0xba}, {&(0x7f0000001680)}], 0x6, 0x2) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) [ 513.118375][T15098] ptrace attach of "/root/syz-executor.4"[15096] was attempted by "/root/syz-executor.4"[15098] 07:29:45 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="190700000000000000001f00000004000180"], 0x18}}, 0x0) 07:29:46 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f00000009c0)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @loopback}, @hci, 0x3f, 0x0, 0x0, 0x0, 0x9}) 07:29:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee00, 0x0) ioctl$VT_GETSTATE(r0, 0x4b3c, 0x0) 07:29:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:46 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x404b80, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000c07) inotify_rm_watch(r0, r1) r2 = socket$inet(0x2, 0x3, 0x81) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x3}, {0x2, 0x0, @broadcast}, 0x20c, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}) 07:29:46 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) 07:29:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e00)={'lo\x00', &(0x7f0000000dc0)=@ethtool_rxfh={0x4d, 0x0, 0x0, 0x0, 0x0, "7b51e3"}}) 07:29:47 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:47 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7a, &(0x7f0000000200)="8d31e183156939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f8bb2965cd7e1292aaa6375f12e594a37c9686d403d3a82d09ec2e57d3c3ec2117496b2dd4837334f73c37edfd4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x34) 07:29:47 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000040)={'macvtap0\x00', @ifru_ivalue}) 07:29:47 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/65, 0x41, 0x8c2) 07:29:47 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:47 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000380), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378", 0x1c, 0x4e0}, {0x0, 0x0, 0x21c16655b}, {&(0x7f0000012600), 0x0, 0x6}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') name_to_handle_at(r0, &(0x7f0000001080)='./file1\x00', &(0x7f0000001540)=ANY=[@ANYBLOB="1c000000810000000000000000000001000000"], &(0x7f0000001100), 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x68) fcntl$setstatus(r1, 0x4, 0x46802) truncate(&(0x7f0000000140)='./file0\x00', 0x101) writev(0xffffffffffffffff, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000140)="57529ae5cf4353342e5448c97797710b3bc558035782bcd73e65af7187f5d9148d9c23094325a7ba91f4f4439a5b770b3ec72e991b3b57694685cc3e2a91280bf0f01402d767a2799622ad57ab92b6ee6d2d76d1f97107017cb038edc177a0cc1ce4b6ec009336038d212c8599384379c139f96c93fe0f4df6a4d76c0153970c33db1b93169b7327bb0e388bd5c22756bc31ec8faf2828b976964452e502e7cea5c326b36dee09bda7e20dd8c79f196977ce42b451ab6d21fde2cb3f115c900216dc7f9c9850ca62a2fb21b7adf08d44beb4d3f140fdd38850de14e2c9dde8522b625873aa68d524b2b44ce078611d55b3e5a5e41501f442483a971e2305e5daae267771a203d5e40c2966a150d4375abb78d5487f9a061799555e2ba4a229e75df00ad55e823e0b60b1ba4097081bfceaa4bb71611eabad25ad088fa884ee02e890d0003c86f76297045df7272d68b92be347f56c1e7b39a8e1cdc5472af55e106e5b5bccc5b7bc76538ee9a6880d3a6334ae3482662769f59c10cc261deb0a1f8e87d1d5f28a200dfe57c269edb151ce74cefd551316513895dccafc64aa9cd81869fd14a300aac00c07c638fbe85b3b273bd8aa78cf220c4eb83b53a468934aac94c722ea8d34b08f61f12d74d3d49aa4d078705ee1daa9c4580e02b975be58e999f4f19a53577eb30e1ccc3d4296d7d0d54190f9bbc537b62c75fe244d369c37843e7a3f0e0011682c9eca6ea302b46476bcbedfdd9650e359d8f159965f24f52523d55c88363c0d1fee53b9643cecac9c680f42d0842caaf6eb84b3632d7b97ce95d060bf050802a461fb20fe063e002e40f057ecdd4739b51ad4aa2cbf0bc6c91638c053aa8ef0ab455cb93530246972b2dd899df62225c415df7f9d9ad6863df2592a21b95ee9dfab289e2829d14e28a30c2c5bd1a5da3d825391f8a141e377a565f78dad73e5ed875db35218c94fea626e1ca47c5bf8f9c93dd8c7043ff2143b6be07c5c4339d45174961d2acc441827c5323783d988fc6245c48006afb637e614e3859ce8e14f2dd02a0f31ef4579481d1954caedc305f41eb30be85afd84422f9ab762a7448ff415178dc504deecd5e9e8610ce3dca73dfb5a71b9de33010e0c89428092719b07c87f9e5513f8e76520a9e5d81451efe9cc3b0b909e441f47d0e4678338798b6e4da2091612207be397c5a20740a020c766e1fbac2cb672d143c63bf807aedb05ee0b05e838e00f48b03fd7ecffec1c50e786a093212e3ed0351c94fda7dc665c1efa7c873f92f79f1005d846666779873016a011baa24e6429048ff3d603d264afbb4a238589d8e4c4e131358e41ab35b25212638625aab72825d91acfe9e29f524a132b38ee2697a2924a71f85405fa6e60a13cb95416ee1950524581304a664ff6164f7b7db38dfa2a35be31c5ab4c927bc7e84a59428deb1dc414d7f4893eef060f471095d52ebbffbdc3b16080e2987daad87199a60fbf761c119b44ced5b2ce2f0b5daeab716ced63eb44ea809dc03e3df73eacecd8007400648c236dbc270fd2e2607485b0418ca99e3a65ee89939ad9a64d965ef623a6c5b36f6c3eea3509e4af11a27331b1215c8cdc6087cd5f856a29de5d03e4a5397514fa1fdb6f094cc28d40be974e1306a0c1a79dc8eb108127f71f0d27c8ffd00be1490ac875a82e1ddf11e8e23ebb16e2d72d8b1da60edb7b56ea4ea011a4178bbf26398608eee88336ccf9d88840c51bfb4094fec11fefe5eab176e080c1c34ca95bd8ff2e999789728ae1f7231b7521f81fbeb29df747975832f223198588d8a9a41f4c08ffe593903834bbb1a98f991f0dd1bec717b70b4e3924d1410f375b00fc86b1f579b5a8771d89c16b41f7faf59998a7139a32d4dec19595bf55f2894ccd931850c8d06f2d3cb8f409f2553fee2792178b7032f72ce0e5b7b54bf8ee51e3c95903a02060de853a6c48de84b2a99017aa3945a7c2c2e312b17fbaf3a1eefd7768504dfeda7d21c5c2248d8b118a65ea08a7ab15dc61d2600667327a89d93a330c158d1a983a189af1be8da2d74b8169d12e57a3db499684b92604f70fe98608910cb213c4b336f99751507b048aac42896e8e8e7ba5650aca0da5d5c3c3d7a6f01dbc9c77247da915f185990ab210d45f2f4439a84315d9462127ab69f8fbf2236259426b1de20ad6e7fab6be67ea4f54ff5b11481ab5e2ece4d683aa6909f07110122ae2433c5fbc74d459a9545502811f551af261cc3378dbbc943d7c26e4fef609b182505c752390ea8ab0bb1179dfabcc8fb9b9867f46e026b76a16e2b1d106927f7a08c2b61373b408bca0b163acf1814bf9d1772b492cbffb964ded5fec5c0874b220718f841e6d1edfe5d97e15288e8af5192a0e9ec3998eef9eadd3a62fb67ef73dd6571048f3db19c33f29bc9fb066c1e5d177911465535647b7c05407383b53ecec09b56a476183eb4a0dd5f1911c3da2103ade3c8ac690ffaa87b293bb511cbc63fd58dd1446966b60a092019fe3939632a47215c1917a53bdd849085e6118ba2cf71802370a8296831898313dd499566b831c7bff8676e5a1705842e7de4814138d6b2daaf27eeafd07b29000f71593b91de07d372003042c54301ab7de8d7d43c3569350de8c5c3bd881f63ea109b4427f8ea919c33454da5e82df905f20f1ee4230ef6fc0d777e7a178e8bd9dcdb42d94f722ab1009b927625826a72ac3165b38978a23b9f130e69473878fdd5374b6074fd910f66aac79f1ceddf9feb832d11e189119d87c1631c45e1662aeabd8228d0d5c40e22dfc8d982d5dc0104446203dbf709917fce75f62fa9aaefbfd37ff9d886f5ee8508163b25e22ef6b9a5f67d35f6cc79c50f5e9b22e5ea898b3ee1c6a658b589e20d19e6cb51f1b371dac312363ffb799dcfcbd8f07a1ac39abae3ee61e1dfa47f4099f15244a450187cf5002d46df7041022282bdfe6d16383ae1fdd9b10026db65691ee256e2c781c923dcf0f651742d313d98c8475535f22a2568ae57e3ebad6874f5e3ada38aabeecbf1967895fd72a1ea42e5dddf0d97ad6d4db2707731929e06859b28a13a0e00a14e908cb7c54655ebca882ad40998c8f49d313531e60361714e48b7c38112db0e9d9983a64c1b27c25599c9b6db2b73fb117fe3f4883ef5fc702cbf096ddb66e8e3600c264fd83de603a8aafa9b9e1bc7269697e6c3064ea464cbe020e611b6fc683bcf58e3ece29ff79dbecade585c46d0696f8fab63bfdc890e2e5dca0d589462db2586771625ffa5a0b6686dc1def23c338c8530de194bc119640dcff2697b7f350657e7d333f177506b56782a4970a2f3e5f338703baa9dbbe9a38ed1fe7ab78bab05699d816f623f0c452c00e4e37afe4d1f6929590ec2295e2d76b194f9a6e8c1c88c1505a9fe78f78aed1002a6fdb94670fd6bdcc8ffc7145bc39ed8d643f08d1faf10427e81ae9b28228349a28f46740ec805992b2edc2398cce16cf53a0676431abbd71ef96dac91e41c570307882b1fd98158cdba7382dfb8da4a681e2076eff20fad70040ea898e6491e4028559acd26db7aa40b86031d96cd03df509f48d385d604b7eb9d34edf62d5d176165dccecf9ea471bce57d4ea661856e38697b0d176cd6cc227a745938878f8175389f23b946deff827b7cb76cb233d2ce233d2e050f440f6b6ab453bda3726354063af4eceff96f27598f62101e10c6a699b06fc847ded6dd8396732ebdb3b511003124e766a7783ac420cfc706c40729baf9b6bd38e521ff4c3411c821a5735b88b86637dcaf06fc432d47a36a1512c43488b6b20f9e5f76ee342a840e80d6aff4f0b3fb04795160d89162a9ebb716938597e82bf93321e37621699af716d59381ea61e07320ccf2a701373dc2e85899702e28928b7babb3985290675637882a9e97a8829006330b2cafd296e6fa5cd0a51d60037cc7353c366a1cb65fc1a10085c13ee6e74752f0a360b5f0d12bfab0e51c28d9e7510a1b869c487a2a5c96ee1c5e033c1d5956e8d183d224af6072e1815eef0bf72cd2983d76185588896a695619f02453a3b8db5b8baa75649fea9f135f1ed1df8ff0fcd6245dca6c64f12016295bd3882467d4fbd16070874216803696a83b0d665d18f12c9e8195f8f03ab6403a94c674b64b634a041421ad14b861e0a0496bce165757a99571ecdac806ba37c136fdba3c0b6091b30c727948625b0a6a518c73eb807d2dbd639edf3214e0a501017508055b4193a82b3fe0bdbe655a7686f61d2f45fa31fe474069d601dff11b946f446b72d7e4163f402c7b78b7ae46c8c51e97d1a654c265d099899344b3d565ac97f6016fdf36fe2354fba786d8ebeabdf640b09d3544d257d42372dbf4f5ba32b51b8d9e564512b4927ac7550c5002e99d5d55917a6a1b32ef88c88c4e85ba76ab3868ab5b0cd55957d9f9a239afd6390b9f56003981c7c28c01407be22ead86513ce67a24cacf4fda9d5aab1330b8aa4446e2594519e80008b75f2f6a5fff1a0ce8d895a88950c568b72377e44539e8d5e0110fc6f7a78694f11ae356dd9032dae57fd6c9b9b382a38151b72a000905c487bf91d3b070c0379a48938fe1d108f4aeafb13ce4c4379608ed0e975239f6a6f7419f535bd9c0b34c4676cb9243360d19626331d5586c533e1a8a96a31b22becb59a6f26824b026dc70797b994b32168f606308febe2cf73d0f3b3cdfdea8ce8b6c32c96a3e14f8f88d91f8b95f0b8af8f7c1c47317baa06da3a104877125ee78a3d03ecdab4a3cbd096f0d8ef0191c988a05740151158fc03de5ec520281bbd76ed2b8016ca6fa685fcad110971d8bfc42b6b63a62f3cd3ce65ca4cc060e806cc382b29ef51be6b8a9b8ae5f4e01f13d28662b79b94872fa38be0e76571beca5264eae0e11da2fc21d4d680898ed91a14bacaa3c5c476124147a0238bd2033d7cb943484261883d3a77b02fd882d6d998391025447c2d6b7d0ef4bcaff37560d9fcc4fce7abd27d0bf3d393c28beace26a8b93678d76d56bae372714fe115c54710c08b3c2332459f8424bcd90c55eba2beb6a0eea9df889377ad3cd15bf2da6fc9e207c9d8d5f0c1da43c4e54d6ae19dd0feae4aa2ec2b75dd8087fbf7c2ad0e329b01bc37190b24d94bc98f6c591514087f66e1dc7c5b574b7a5c6440ea0fe4edec7d9e1fa9f2304e1cb51feaa77bd473e09b624b1a2a1ef28a6cbce8d6e4c9977fb989237274018eb425efecb1a1e0b19d7c5539796ae1da608b138db6f56de92d046ac98d14b868733c8ecf2445540715b836769a4297446ed4e41948ce7b1853e720ee848b1a", 0xec1}, {&(0x7f0000000000)="c1", 0x1}], 0x3) getdents64(0xffffffffffffffff, &(0x7f0000001480)=""/156, 0x9c) io_setup(0x3, &(0x7f0000001580)=0x0) r3 = perf_event_open(&(0x7f00000020c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[0x0]) creat(&(0x7f00000004c0)='./file0/file0\x00', 0x1c8) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000001140)=""/25, 0x19}, {&(0x7f0000001180)=""/41, 0x29}, {&(0x7f0000001280)=""/172, 0xac}, {&(0x7f0000001340)=""/143, 0x8f}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x7, 0x5, 0x6) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7d0000, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10b042, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000001040)) writev(r4, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000140)="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", 0xec1}, {&(0x7f0000000000)="c1", 0x1}], 0x3) close_range(r4, r1, 0x2) 07:29:48 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) clone3(&(0x7f0000000340)={0x40000000, 0x0, &(0x7f00000000c0), 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) lstat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x881) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) 07:29:48 executing program 4: r0 = syz_io_uring_setup(0x701d, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x200000, 0x0, 0x12, r0, 0x8000000) getgroups(0x1, &(0x7f0000000080)=[0xee00]) 07:29:48 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 516.142690][T15169] loop5: detected capacity change from 0 to 255589 07:29:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:48 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 516.531039][T15170] IPVS: ftp: loaded support on port[0] = 21 [ 516.815840][T15170] vxcan1 speed is unknown, defaulting to 1000 [ 517.409387][T15178] IPVS: ftp: loaded support on port[0] = 21 07:29:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) 07:29:49 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000003240)) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4004c0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xa, 0x13, 0x1, "06b2c1a737107fd19bf56a2dd5d849c034fdadf799562a8815efbe4c5927ada8cf05b5537e5b242eae6716c7c9c41898e3721b35fc6413a5d2e5d1c2f9e80120", "5ab681b5db3bfdf9afdbaae5393c7c3338b88645a77e816f3518d3d2715dfc3620168d2a0289b2e60e032da326f76ec43fce520a3b0b73ba85e11aa6d67682f4", "5fd77f791f6358e761bde2c2c7cf1169bd7cd2cb5681aa3d9df8ae614332b0ec", [0x4d69, 0x400]}) 07:29:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:50 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 518.029067][T15178] vxcan1 speed is unknown, defaulting to 1000 07:29:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="a85afa16d87ec287222319"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:29:50 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 518.946393][T15241] ptrace attach of "/root/syz-executor.4"[15240] was attempted by "/root/syz-executor.4"[15241] 07:29:54 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x40000) 07:29:54 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:54 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug', 0x0, 0x0) close(r0) 07:29:54 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) eventfd2(0x0, 0x0) 07:29:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:54 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:55 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:55 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x6}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) syz_io_uring_setup(0x7c90, &(0x7f0000000200)={0x0, 0x57b, 0x4, 0x0, 0x1bc, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 07:29:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x102}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:29:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:55 executing program 2: set_mempolicy(0x1, &(0x7f0000000080)=0x1, 0x7) timerfd_create(0x8, 0x0) [ 523.236931][T15294] ptrace attach of "/root/syz-executor.4"[15293] was attempted by "/root/syz-executor.4"[15294] 07:29:55 executing program 4: unshare(0x40000400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000140), 0x4) 07:29:55 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:29:56 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 523.805956][T15307] IPVS: ftp: loaded support on port[0] = 21 07:29:56 executing program 2: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40284504, &(0x7f00000000c0)=""/49) [ 523.966703][T15307] vxcan1 speed is unknown, defaulting to 1000 07:29:56 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(..#-)\x00') 07:29:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 524.629626][T15309] IPVS: ftp: loaded support on port[0] = 21 07:29:57 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:29:57 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000010b04000000000000000002000000180001801400018008000100ac14030008"], 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 07:29:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:29:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)={0x0, "083c4fda5a0de7f32cf05a0f6a73a4d4ba5d161d6308f9c44fccd924b508527b276fa021656faa892b8a8ff8c8b293d3047f91e991f2f655bed1e400f815328f"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x0) 07:29:57 executing program 0: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 525.287071][T15309] vxcan1 speed is unknown, defaulting to 1000 07:30:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:30:00 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="bfde55011b00285f3a1c26"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:30:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:00 executing program 0: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:00 executing program 2: r0 = fork() setpgid(r0, 0x0) fork() setpgid(0x0, r0) 07:30:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3d, 0x0, 0xc04a01) [ 528.167413][T15407] ptrace attach of "/root/syz-executor.5"[15404] was attempted by "/root/syz-executor.5"[15407] 07:30:00 executing program 0: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:00 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/145}, 0x99, 0x0, 0x1000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xfc, 0x0) 07:30:01 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10b801, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 07:30:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r1, 0x0) 07:30:01 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:01 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000001140)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) 07:30:02 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', 0x0}) 07:30:02 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$inet(0x2, 0x3, 0x81) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, 0x20c, 0x0, 0x0, 0x0, 0x200, 0x0, 0x100000000000005, 0x2, 0x2}) 07:30:02 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x0, 0x12, r1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) 07:30:03 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:03 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f3609000000e8c94ef56691ee54be0e1c2074ed26c1c6fe76ce15e2", 0x1d) 07:30:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:03 executing program 5: r0 = socket$inet(0x10, 0x80003, 0x0) set_mempolicy(0x1, &(0x7f0000000100)=0x1, 0x100) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0000050c1008000800080004000900", 0x24}], 0x1}, 0x0) 07:30:03 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:04 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'macvtap0\x00', @ifru_ivalue}) 07:30:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653078100000000000000b097eaa769be6d28c41bd34e677d114b655ef5a2f96391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc4ad2b0cae5170871c145045174ad6edb6b0a183dd660eb94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507294a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143767692731ed21fb541b7a2cc83eb76be0952aea033004c34140785d3135a259470f3b7daea", 0xe1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:30:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:04 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 532.745184][T15488] ptrace attach of "/root/syz-executor.4"[15486] was attempted by "/root/syz-executor.4"[15488] 07:30:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 07:30:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_udplite(0x11, 0x2, 0x88) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x5) 07:30:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="02000043db5efb5392114b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:30:06 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:06 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 534.184486][T15517] ptrace attach of "/root/syz-executor.5"[15515] was attempted by "/root/syz-executor.5"[15517] 07:30:06 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019740)=""/102377, 0x18ff8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x19, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6aa3554"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:06 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4004, 0x0, 0x13, r0, 0x0) 07:30:06 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da4"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:07 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xfe, &(0x7f00000001c0)="c4c691019919da078a0098d1e0a593b04022ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0fb4aabebae8dc5dffbcd48a09002173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4e07996dae6cdf25826d99ee428850387988c5e17eeb9a72c9a652cd78fa0b98d95efba4e581ec991fc952af3eeae37e7c1e6116b9dc29d7e0e571b3594a73ff228abd7f6cc0f10bf553546d4067fa32c452902d01615e7486d2414d406e48dfc46683336a84960889dcb332bfc62b8f9e22e33185966c280b0c30546e3d7df438ac38c4083250f4baeb9f6e6dca3d10469350821ae7a9ea46aad9913cf024702d06214"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xb}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x24) [ 534.766867][T15529] ptrace attach of "/root/syz-executor.5"[15527] was attempted by "/root/syz-executor.5"[15529] 07:30:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001d005f0214fffffffffffff80700000002000000000000000800090002000000", 0x24) 07:30:07 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:07 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 07:30:07 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da4"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 535.436240][T15545] ptrace attach of "/root/syz-executor.2"[15544] was attempted by "/root/syz-executor.2"[15545] 07:30:07 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x174, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x34) 07:30:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x5}, 0x14}}, 0x0) 07:30:08 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 07:30:08 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da4"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:08 executing program 5: migrate_pages(0x0, 0x66, 0x0, &(0x7f0000000180)) 07:30:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:08 executing program 2: open$dir(&(0x7f0000000340)='./file0\x00', 0x441, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x20, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00', 0x0, 0x2) 07:30:08 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:09 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe", 0x3b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000400", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100002"], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:30:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000001180)) 07:30:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 537.588958][T15590] ptrace attach of "/root/syz-executor.5"[15589] was attempted by "/root/syz-executor.5"[15590] 07:30:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f0000000080)={'sit0\x00', 0x0}) 07:30:10 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:11 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 07:30:11 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:11 executing program 2: r0 = memfd_create(&(0x7f0000000e80)='\xff\x00l\x1e\xa0\x1b\xecZ\x9e8\xad\xb1\xf1\x8fq\xa0f\xd0Cy\xee$\x7fE\xb1\xd7\xcd\xddG\xd86z\x7f\x06\xd8\x03u=\xf3EH\x8d\x14\xdb\xee\x82\xca\xda\xff\xecr\x17V\xe2\xfa\xbc?f2\xc9\'\xb6\x1a\xf2\xb3\x83\xec\xf3!\xd0\x8aiY\\\xe2\xc9\r\xe5\xc5\xb7Z\xf8\x15\x83$\xb2\x14\xca\xad\x16\x1a\xad\xed\xd7{\x14TE\xe1\xdeu\xdba@\xb74x\x8bJ\xe4\x11\x9b\x98\xceX\xf3e\x9b\xcb\x9fmO\xbb\f\x88\xab\xf8(\xb8\xd3\x03\xe6F\x10\xd7t=\"E(\xa8\x10\x9e6\"*\xb6\x8d\'3$\xc0\x9c\x05D\xdd\xd1xp\xdfB\xd8|\x9a\xc7\x8b\x8a\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00LR\x81@\x8e\xd5\xd6}gn\x0e\x12+\x9d\xc6y\xb7\xb5\xa2\fe\xde\x7f\xff(\xc1R\xfe\xf3\x9a\x1e\xb3\xc0\xec\x1e|-\x9a\x99\x8f\'\x0e\x0f\x99p\xfc_I\x90\x8f\xdb\xf2\x03\x16\xf2\x19\xff\x9b\xf0+\xc34\"g\xaf$\xdc\xaad\xca\xed\xb0G\x9b\xd6\xfe\x97\x87$\xf5$\xe7\x13\xd4\x99\xcf\xce7C\xefL\xc8\xf5\xe1\xae\x13l\xef\xc1\x87\xe0\xda\xc8\xe5O\x1c\xdc\xe6\xe1zKT\x15>\x92\xbe\x10\x8e\x95\xeb\x9a\xe5\xa1oB\xb8H\x10\xcb\x00\xca\xed\x9b\t\xbdm\xf0\xdd\xc0\xabzi{\x98y\xa6\x06\x8e\xd4\x16\x7f\xad\xb6\xef\x91m\xfa\xfdw\aP\xec:1\xa73^\xaf\xb4^q\xd1\xc8\x870xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:11 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 539.203511][ T35] audit: type=1326 audit(1625383811.571:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.370796][ T35] audit: type=1326 audit(1625383811.601:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.394046][ T35] audit: type=1326 audit(1625383811.611:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.417905][ T35] audit: type=1326 audit(1625383811.611:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.441110][ T35] audit: type=1326 audit(1625383811.611:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.464365][ T35] audit: type=1326 audit(1625383811.621:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.487430][ T35] audit: type=1326 audit(1625383811.621:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.510456][ T35] audit: type=1326 audit(1625383811.621:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f4b549 code=0x7ffc0000 [ 539.533469][ T35] audit: type=1326 audit(1625383811.621:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 07:30:11 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@afid}]}}) [ 539.556515][ T35] audit: type=1326 audit(1625383811.631:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x7ffc0000 07:30:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000006800050900408116d001000017140000", @ANYRES32=0x0, @ANYBLOB="040004"], 0x1c}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x30000033fe0, 0x0) 07:30:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:12 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 07:30:12 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:12 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d809905"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffe}}) 07:30:12 executing program 5: r0 = syz_io_uring_setup(0x75ca, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 07:30:12 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x5452, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}, 'syzkaller0\x00'}) 07:30:13 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:13 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d809905"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0xfffffffffffffff0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1b, &(0x7f0000000140)="f47970da2fd541e0656cbb3cb7dde51f5e8a8f5fdaf6aa35543bd3"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:30:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}], 0x20}, 0x0) 07:30:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) 07:30:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 541.586732][T15662] ptrace attach of "/root/syz-executor.4"[15660] was attempted by "/root/syz-executor.4"[15662] 07:30:14 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:14 executing program 4: open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 07:30:14 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d809905"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080), 0x4) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103, "ed105400000000003ec13e2000"}) 07:30:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x14d882) fallocate(r0, 0x11, 0x600, 0x100007e00) 07:30:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:14 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:14 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e6"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:15 executing program 4: unshare(0x62000200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad/\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 07:30:15 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e6"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:15 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 543.488938][T15695] IPVS: ftp: loaded support on port[0] = 21 07:30:16 executing program 5: clone3(&(0x7f00000005c0)={0x8020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0], 0x1}, 0x58) [ 543.754470][T15695] vxcan1 speed is unknown, defaulting to 1000 07:30:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:16 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e6"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 544.298319][T15696] IPVS: ftp: loaded support on port[0] = 21 [ 544.467824][T15696] vxcan1 speed is unknown, defaulting to 1000 07:30:16 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:30:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:18 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:18 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:18 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:30:18 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x13) 07:30:19 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:19 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x95}, 0x20) 07:30:19 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:19 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) unlink(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000080)='./file1\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x225a9375f8d792eb, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) wait4(0x0, 0x0, 0x0, 0x0) 07:30:20 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc1, &(0x7f0000000200)="8d31e183156939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f8bb2965cd7e1292aaa6375f12e594a37c9686d403d3a82d09ec2e57d3c3ec2117496b2dd4837334f73c37edfd46003eb96a9c79d3de0cab4645adde76e8ac90dba5bdc53cdc3235210b2e21df4f23e22471e2d53415f8f4151d0b915d0c68708733778513261f1e9a548b33b5e8a96381e1d1ff7"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 07:30:20 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:20 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) 07:30:20 executing program 4: r0 = socket$inet(0x2, 0x3, 0x81) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) 07:30:20 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 548.279542][T15798] ptrace attach of "/root/syz-executor.5"[15796] was attempted by "/root/syz-executor.5"[15798] 07:30:20 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000840)="16884896426f2eead5b120e784fbc47c08d686b142c814c72f0edace1bafc2d7cc177b8acdc0cd7ab2f5095463b2d81c069bbedff5d5e10ac280dc6616394b", 0x3f}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x8, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92e6725240b5b87cff1866be0bec480ebc5c2189e00", [0x0, 0x100000000002d]}) open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) r3 = syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="b82a2842bc275467e8a6510cdbd4378d8bc4b44b344a60382329887eed1fcd14831ebe0ac63d6c7df6c81ff35aba392ec8f16f64cd5c27db5172c4da0726dedcd49d72e2fdb5af9b66732523fefb798d187da75401be87", 0x57}], 0x8, &(0x7f0000000580)={[{@fat=@fmask={'fmask', 0x3d, 0x7}}, {@nodots}, {@nodots}, {@dots}], [{@fowner_lt={'fowner<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, './cgroup.net/syz0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.^\xc5'}}]}) sendfile(0xffffffffffffffff, r3, &(0x7f0000000500)=0x80000000, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x5, 0x64, 0x5, 0x0, 0x9, 0x50688, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x30, 0xf69, 0x7, 0x3, 0x9, 0x2, 0x633b, 0x0, 0x55d1, 0x0, 0xfffffffffffffff9}, r4, 0x0, r0, 0x26a0f323d95593ec) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da3800", "5e0930cceae5cf1780ed6d9677f412287b88d50844d8c2ce00", [0xffffffff, 0x61]}) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:30:20 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:21 executing program 2: unshare(0x40000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x302b, 0x6) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 07:30:21 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0201a5ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffffa6000000e1000000887700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 07:30:21 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 548.958454][T15808] loop7: detected capacity change from 0 to 1036 07:30:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 549.280678][T15808] FAT-fs (loop5): Unrecognized mount option "fowner<00000000000000060928" or missing value [ 549.436213][T15823] IPVS: ftp: loaded support on port[0] = 21 07:30:21 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 549.590730][T15823] vxcan1 speed is unknown, defaulting to 1000 [ 549.616112][T15826] loop4: detected capacity change from 0 to 1 [ 549.734824][T15821] FAT-fs (loop5): Unrecognized mount option "fowner<00000000000000060928" or missing value [ 549.747005][T15826] loop4: p1 p2 p3 p4 [ 549.751203][T15826] loop4: partition table partially beyond EOD, truncated [ 549.761596][T15826] loop4: p1 start 10 is beyond EOD, truncated [ 549.768617][T15826] loop4: p2 size 1073872896 extends beyond EOD, truncated [ 549.779431][T15826] loop4: p3 start 225 is beyond EOD, truncated [ 549.786006][T15826] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 550.079876][ T2034] blk_update_request: I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 550.092186][ T2034] Buffer I/O error on dev loop7, logical block 32, lost async page write [ 550.252945][T15825] IPVS: ftp: loaded support on port[0] = 21 07:30:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="238430c8f787fc66dd60ecc4a9c25a2d0f334821142c0dd7efce05c53916cedea0f14c4138e3aa5e77da08a4eb0982a4e8121072f8d1203197b810667658410e85dba9a0c937cde01652237a308b6f74a05318fab221c9f35422a2f833a1c31a00c85e15f864ec05122a5e93", 0x6c}, {&(0x7f0000000440)="15afd5a08942fc66b984fe3d1cc3bc9cae1413a786aeea3f36689c1bbef72783aad9e82ebf4b677deb9f8182f8f46619039419987b08234b63827e0b90e1fe3e0a0eaa3e7056c3c450a9d744120861a7b90783daf4f1900b2d387a6bd757c87827b0193e1f6fe0974bee2c3ef44c6112a77e8b8b9e5ed68c064894de924daa551a1c2b4fa3759383db8bbd08fc2d46c96efa3444ecbfaed430da9e89ab9a19a98da22edba9a1ec6e405f12e23a311f9760eb0d856e836260aab0915679b9110de291a73c09412fa03a926c6ec7c52bdd01cdd656fb08e6de76e0fda90c30ff307e596eb36e5031240dfe62a2fb838e253baee2ac36639c5aa2eccb08da0e4c5bce61e7647b46cae4dd22d5faccb7851b435545a44e4617753ef54e2a5d2ca1388ba8375e2f5a8dea822af4b0c39150f90527c74a79d9d902cb1c8d9836172ac1564abc64764c343c10dd5f85fdf72091cd56d86971dd9cd7c1996eb3175c03780973ea73c3cc3975fff5cc16a7afa0c17fc7ed0c6d675f0b263e00e1735c7b5fcb6d0b94055ab579ebf3d8ec73eeb6b594de7893ccc99153faf4ead69a7d70a4f68bd667446a3d72814072e7928621a425fec9788452150af62de3a73fc134de9cac4f06ea4bc8b3968aef4350ef44dd6e7450aec9a12855fcf3fabd04348d7a66369ef3c4814a67caebe5086b1e1c6c54038936abf54d97026eeb264cbeddbb356ef703c06271744971f29042f0dc2bfbc0ae299d5ff0285bb72b79e6d53a2a035566b89c1f66490cf606b5a0b56eb0be6751d82767286d00d54d6ee04e00c49a593fc2fd9aa2cc56edbe86ccd7da44c11ea8d15dda39394f3a3bf38775253540a3f761ab6d44565cbfd68b77d3f9b18d1c1b7022ad0b6fdd9c108b0ece324b9b68f5ac58d4e44aaba8c0f9d6d9757ff3e405879c29a618fb6afe68ce712cc0c43e1de8e9908de2fdd239fddffb252aac7a66ca59d4756aaafcac4a3f5bfe49543e3de8e765e961f8226bd8f3a1d3db5d2838ee64c0d8cefc2b688190fa445ffa9ac4f4235c2503e1b9fbf6eb4afdfc749a7b8bb272557a42687590a285c7a90e82df32d797638df6155025576b553da742f4668723c21c24dac76c4953fdbfbda3fcb86acdff2abbc825f23e11b33cf7daac61c083fedd2a0a9f13e6a0e6ed092c1bc028588c356c637749f16e743c737d05762699f445b921f699941933a9a6a983241727be175c243508aa0c90698b864745a8c2e3824baaea33b8180c8459c47b4bcbaf988d9ad24cd41c5ec8387363b36e8531d6b0663840f710009bcbc9af497bd4d065b6f65beffc60ef03fa179ca88ec686684f7b6c865059e2742f9d96ee2a96924a745f771354f9df1c7e10424baa4f4670109ff904de346f009f4968bc3e491a39c3c2d418dc6f47b0d93d722e91bdb5b01ff8cb9095745ceff4874a02bff5efe5d7bbb5500717c329eda8d7fa6385eda25abadabc8fe68c4af2eaf749deb24fd659a6131e175b8e316c330d51c65a9323fb1db5852926cc8b1a7296cd70e20aebc8c80f120a31020c3af09263c6b575f08ea35789c307cf2aaaaa6b80c6d9980d3eb6acb1388971452e6954d3218308501ace879d1bdee43794bef13ee4650f0cef7851608be927c8caebab9ca2b2f31d9963e8402c231d226291b325b00928fe2c9e25be0dcfeb455dea7281a6560e09b5f1324e76718624449d0ffe54fb0adcc40f51f7fd245294014cb90710d7a2012710700221222c2bb7e705eea37f34911bb960f2dab7a9eff3844ef05867ef33352ec03de64e9c0774175a5b18214b97adf232c96f919a869c6fee155b946a5a8fd367ff8f62160c7e2be6bfe2c96f4f9a7c25b2b031ba67a71a23e5ad9f8a1ed2850f95ae12a0ed2b07f80275227f9704b519ac717424c800b5ee2280e337842d313ea0b48ff9ac03bdcfc53b5d1903e7a3f47ce12f5d0dd1ec9fd108ea9cb431197d18fb8c873002d2650d3eee83320be2f47adc2c91212f6e6b52fe6764ec36fa1865462bd014d2f6076bc5fb3e2989fcda31329b975995df97294c49fe6db84e94be53260294eb066e9699ce152566d9263af88302efafcae555a717de8c286ff985b01630d7eec6c704d3bf70309cfa5d441f7feb649e1a9a7474d555e4f853fa5802db5375b8a3cdcac429cca529901dbd9dd551971f11c0e8219e899a12197882225205ca24335d18aceddedfba07e7bcf86f7f951cc076900e283980ef938004e61f3159b010d6612fc8d94ee0a79deb05f5c2792a9e3589bf2ad39f90d045ae21ce6419504bb7ad1770c80e40e38145b878b9e654f1b8334b280073bec15f84636e7a4ff7c8357d8357c0f55a4537947489bdf4640f232b67d1117e50c0681ea1a8b8ac93c63bdb3508522db5460c229649370a056559cd213bebcdcde1869e3901c6410401605e02e4563c2364ffcc48c56b31fd40da8f1aa11e2ff3ed774219ddba96aea108cabab623ce057acf856fd7dffbc3996369b6c6dc0a93843a8a673ca24df651404b7e9dd382821d120727ee21b0602a247320d23381965bdf932e23fa95342e0f14e42c7b4eaa641176a775e60716dd3a6df04eef06f02a0908de259a362a0000001043b954394f865bbc900e25ddff012fc81efb0e7ca1e48439a2fd369184f94dab0bc28091c299b540bb5500883e60134281ca58e2a8e211a8ce8438123ab19afcbb789af0e3730fb51dd5226a1aaee31d0e76937b69dbe5a61476e9fc5d12984ee7691633696dd992c671b86181e8bbbf6d8d805ef3e6c1b290f552c8d52a942b3b3fd270c15e68ce960e972ea3d269489e988855a07dfa58d0f66e03624d187d9dd42a12e768536eabfeea0419f307311fa359c91ddf16b03fecb1f2ca052865f5f066066eb56c25ff95382d8e7a8c947c0a8bd017dc662e2a820cb7cec1be4236f7995bbd96d7173113aa5f1a83b72bc3b9a3bda3e9c18cd84dd4cddde10e2d607f8b004d6e2888c9893951179724ef6527b2a833a889370f06c7c8aac9c55895c4249f995e82598b391c47516d1aec35a6d5990a45bc0846857933e6570d002061845fc964db802763a1f889cbc0c3353c672e71e85a2fe6778633417cddabf65c573b1855e0db698da18731e6d1c32186f9e679188ea8f7dfc203182fff2c877ccd63e0399e396c774943800876bd2baffd94d045c1d648e50660642156c10994f2ce8c35f18416c45a7d278eb5e98f1b24ea7a0609fc275792b040f42910834d589fd640755fe84af1164b97276451c2bd488d0dee6eeb419a398eec7d70ebb82ef0d0e4252b9a5c7f4d915ddb606066eb86d2ffb0b5d2c7c14b68e43e6d4e91be1d8d2959996bd3106e304798d40a6a12103bd7d5652b17808a926215c1c3e8aacfba3bcf7758c066f2ed1eea988b175a807e2d8da653206e4a5766514768835039ab80ed31ee4d9c576e54475bf02651af69d242001b5ee0c4a8a3db037d8a75b7b4cda4eb3e0b5486347045fba704d8f81f9c8f83d89f1e25807f92dd86a218bc7f2f5849fdf76801642b7181f6df5f7645f1e16cbea48984f51b053136c69fe108e0fadfac6b4f210e473e64379d0f5ca972dc05faffc1b88fc0dd9c53a54f8d575498d06edfb81498fcb3969e03ac4c8697f306543a12c641e0c262a324337ea6f5db857d836f3d0cf7341b09730ecf6dca3df521085fe29ba9db78348a78d3ee266e5bb3bcccda3f70165d10a85bdcfca3d998861dc5db7359ac8ec5717180c5a8fdd4fb64440e051ff792cb4fb8c1ac2069faf9657735b3ab602090247318165644beb9fe8089ce0f9114000b41f4236d0cc57ec31b79397c81a7db7c279e1d915b0c8a54b0f75ccc93412a2f33a95f3e04b4f105d4ff4ffac9dabfcba47157a2f61abcf5e770939b6bc783", 0xad5}], 0x2, &(0x7f0000000300)=[@dstopts_2292={{0x18}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}, 0x0) 07:30:22 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 550.484399][T15825] vxcan1 speed is unknown, defaulting to 1000 07:30:23 executing program 4: syz_io_uring_setup(0x780f, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 07:30:23 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:23 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/253, 0xfd) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xa9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000040)={{}, 0x0, 0xbf000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) tkill(r0, 0x7) 07:30:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x202}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 07:30:24 executing program 2: r0 = io_uring_setup(0x35de, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r1, 0xffffffffffffffff], 0x2) 07:30:24 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:24 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, 0xe8) 07:30:24 executing program 5: setresuid(0x0, 0xee01, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setresuid(r0, 0x0, 0x0) r1 = getuid() r2 = getuid() setresuid(r2, 0xee01, 0x0) setresuid(r1, r0, 0x0) 07:30:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:24 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:24 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x100, &(0x7f0000000240)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 07:30:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x11d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:30:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x5000000000000000}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_complete(0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 07:30:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:25 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 553.526674][T15944] ptrace attach of "/root/syz-executor.2"[15942] was attempted by "/root/syz-executor.2"[15944] 07:30:25 executing program 2: clone3(&(0x7f0000001440)={0x480a0000, 0x0, 0x0, 0x0, {0x5}, &(0x7f0000001540)=""/7, 0x7, 0x0, 0x0}, 0x58) 07:30:26 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x400) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xfff7}) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000180)) r5 = accept4(r4, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x11c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x28}}]}, 0x80}}, 0x4000804) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x108, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xdec}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xffffffff}}]}, 0x108}, 0x1, 0x0, 0x0, 0x200200e0}, 0x20000004) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x280, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3bd}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9d1}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x100}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb41c}, {0x6, 0x16, 0xfffd}, {0x5}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0xfffffffa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3374}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xbeb}, {0x6, 0x16, 0x483}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x101}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x5}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4080}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 07:30:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 554.294280][T15957] IPVS: ftp: loaded support on port[0] = 21 [ 554.396458][T15957] vxcan1 speed is unknown, defaulting to 1000 07:30:26 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xee}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102397, 0x18ffd}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:30:27 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 555.194920][T15972] IPVS: ftp: loaded support on port[0] = 21 [ 555.267901][T15948] not chained 210000 origins [ 555.272539][T15948] CPU: 0 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 555.282716][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.292793][T15948] Call Trace: [ 555.296089][T15948] dump_stack+0x24c/0x2e0 [ 555.300449][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 555.306188][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 555.311841][T15948] ? kmsan_get_metadata+0x116/0x180 [ 555.317051][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 555.322694][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 555.328783][T15948] ? kmsan_get_metadata+0x116/0x180 [ 555.333994][T15948] ? kmsan_get_metadata+0x116/0x180 [ 555.339205][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 555.345030][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 555.351118][T15948] ? kmsan_get_metadata+0x116/0x180 [ 555.356335][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 555.362016][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 555.368112][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 555.373418][T15948] ? _copy_from_user+0x1fd/0x300 [ 555.378378][T15948] __msan_chain_origin+0x54/0xa0 [ 555.383332][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.388473][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.393434][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.397968][T15948] ? __msan_get_context_state+0x9/0x20 [ 555.403447][T15948] ? kfree+0x29/0x11f0 [ 555.407541][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 555.413622][T15948] ? kmsan_get_metadata+0x116/0x180 [ 555.418875][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 555.424530][T15948] ? __msan_poison_alloca+0xec/0x110 [ 555.429842][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 555.434613][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.439304][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.445376][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.451531][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.456729][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.461581][T15948] do_SYSENTER_32+0x73/0x90 [ 555.466079][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.472407][T15948] RIP: 0023:0xf7f74549 [ 555.476465][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 555.496069][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 555.504483][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 555.512449][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 555.520421][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.528404][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 555.536374][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.544350][T15948] Uninit was stored to memory at: [ 555.549353][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.555071][T15948] __msan_chain_origin+0x54/0xa0 [ 555.560005][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.565114][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.570049][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.574546][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.579242][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.585310][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.591461][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.596659][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.601507][T15948] do_SYSENTER_32+0x73/0x90 [ 555.606005][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.612332][T15948] [ 555.614640][T15948] Uninit was stored to memory at: [ 555.619640][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.625367][T15948] __msan_chain_origin+0x54/0xa0 [ 555.630297][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.635412][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.640350][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.644857][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.649542][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.655624][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.661775][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.666971][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.671818][T15948] do_SYSENTER_32+0x73/0x90 [ 555.676325][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.682669][T15948] [ 555.684988][T15948] Uninit was stored to memory at: [ 555.690001][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.695732][T15948] __msan_chain_origin+0x54/0xa0 [ 555.700667][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.705775][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.710708][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.715204][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.719876][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.725939][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.732090][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.737285][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.742134][T15948] do_SYSENTER_32+0x73/0x90 [ 555.746645][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.752972][T15948] [ 555.755279][T15948] Uninit was stored to memory at: [ 555.760292][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.766002][T15948] __msan_chain_origin+0x54/0xa0 [ 555.770950][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.776059][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.780993][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.785492][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.790165][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.796228][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.802382][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.807583][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.812429][T15948] do_SYSENTER_32+0x73/0x90 [ 555.816930][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.823255][T15948] [ 555.825563][T15948] Uninit was stored to memory at: [ 555.830580][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.836291][T15948] __msan_chain_origin+0x54/0xa0 [ 555.841218][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.846324][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.851255][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.855750][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.860420][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.866486][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.872727][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.878021][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.882870][T15948] do_SYSENTER_32+0x73/0x90 [ 555.887373][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.893712][T15948] [ 555.896020][T15948] Uninit was stored to memory at: [ 555.901020][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.906734][T15948] __msan_chain_origin+0x54/0xa0 [ 555.911665][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.916772][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.921729][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.926228][T15948] __sys_recvmmsg+0x519/0x6f0 [ 555.930908][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.936976][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.943136][T15948] __do_fast_syscall_32+0x127/0x180 [ 555.948332][T15948] do_fast_syscall_32+0x77/0xd0 [ 555.953189][T15948] do_SYSENTER_32+0x73/0x90 [ 555.957694][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.964038][T15948] [ 555.966344][T15948] Uninit was stored to memory at: [ 555.971348][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 555.977073][T15948] __msan_chain_origin+0x54/0xa0 [ 555.982007][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 555.987118][T15948] get_compat_msghdr+0x108/0x2b0 [ 555.992058][T15948] do_recvmmsg+0xdc1/0x22d0 [ 555.996557][T15948] __sys_recvmmsg+0x519/0x6f0 [ 556.001231][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.007294][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.013446][T15948] __do_fast_syscall_32+0x127/0x180 [ 556.018642][T15948] do_fast_syscall_32+0x77/0xd0 [ 556.023487][T15948] do_SYSENTER_32+0x73/0x90 [ 556.027987][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.034312][T15948] [ 556.036621][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 556.043274][T15948] do_recvmmsg+0xbf/0x22d0 [ 556.047686][T15948] do_recvmmsg+0xbf/0x22d0 07:30:28 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x10}}, 0x24, 0x0) [ 556.785835][T15948] not chained 220000 origins [ 556.790477][T15948] CPU: 1 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 556.800681][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.810757][T15948] Call Trace: [ 556.814052][T15948] dump_stack+0x24c/0x2e0 [ 556.818416][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 556.824158][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 556.829821][T15948] ? kmsan_get_metadata+0x116/0x180 [ 556.835049][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 556.840707][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 556.846799][T15948] ? kmsan_get_metadata+0x116/0x180 [ 556.852022][T15948] ? kmsan_get_metadata+0x116/0x180 [ 556.857247][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 556.863077][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 556.869183][T15948] ? kmsan_get_metadata+0x116/0x180 [ 556.874405][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 556.880068][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 556.886163][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 556.891482][T15948] ? _copy_from_user+0x1fd/0x300 [ 556.896454][T15948] __msan_chain_origin+0x54/0xa0 [ 556.901421][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 556.906571][T15948] get_compat_msghdr+0x108/0x2b0 [ 556.911539][T15948] do_recvmmsg+0xdc1/0x22d0 [ 556.916077][T15948] ? __msan_get_context_state+0x9/0x20 [ 556.921566][T15948] ? kfree+0x29/0x11f0 [ 556.925670][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 556.931761][T15948] ? kmsan_get_metadata+0x116/0x180 [ 556.936983][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 556.942640][T15948] ? __msan_poison_alloca+0xec/0x110 [ 556.947959][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 556.952752][T15948] __sys_recvmmsg+0x519/0x6f0 [ 556.957478][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.963641][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.969910][T15948] __do_fast_syscall_32+0x127/0x180 [ 556.975167][T15948] do_fast_syscall_32+0x77/0xd0 [ 556.980135][T15948] do_SYSENTER_32+0x73/0x90 [ 556.984667][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.991018][T15948] RIP: 0023:0xf7f74549 [ 556.995096][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.014720][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 557.023160][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 557.031328][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 557.039407][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.047398][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 557.058889][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.066886][T15948] Uninit was stored to memory at: [ 557.071921][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.077670][T15948] __msan_chain_origin+0x54/0xa0 [ 557.082636][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.087770][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.092732][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.097263][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.101967][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.108149][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.114333][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.119562][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.124438][T15948] do_SYSENTER_32+0x73/0x90 [ 557.128962][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.135311][T15948] [ 557.137637][T15948] Uninit was stored to memory at: [ 557.142654][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.148406][T15948] __msan_chain_origin+0x54/0xa0 [ 557.153364][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.158504][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.163505][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.168036][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.172735][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.178823][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.185085][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.190310][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.195182][T15948] do_SYSENTER_32+0x73/0x90 [ 557.199706][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.206058][T15948] [ 557.208387][T15948] Uninit was stored to memory at: [ 557.213416][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.219157][T15948] __msan_chain_origin+0x54/0xa0 [ 557.224109][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.229242][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.234204][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.238929][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.243624][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.249711][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.255883][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.261208][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.266079][T15948] do_SYSENTER_32+0x73/0x90 [ 557.270602][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.277150][T15948] [ 557.279476][T15948] Uninit was stored to memory at: [ 557.284492][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.290247][T15948] __msan_chain_origin+0x54/0xa0 [ 557.295200][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.300332][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.305285][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.309809][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.314506][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.320683][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.327129][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.332358][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.337254][T15948] do_SYSENTER_32+0x73/0x90 [ 557.341780][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.348131][T15948] [ 557.350498][T15948] Uninit was stored to memory at: [ 557.355512][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.361248][T15948] __msan_chain_origin+0x54/0xa0 [ 557.366291][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.371427][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.376380][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.380925][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.385619][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.391798][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.397977][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.403191][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.408238][T15948] do_SYSENTER_32+0x73/0x90 [ 557.412746][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.419073][T15948] [ 557.421381][T15948] Uninit was stored to memory at: [ 557.426482][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.432201][T15948] __msan_chain_origin+0x54/0xa0 [ 557.437238][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.442369][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.447319][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.451834][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.456511][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.462665][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.468818][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.474015][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.478866][T15948] do_SYSENTER_32+0x73/0x90 [ 557.483370][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.489693][T15948] [ 557.491999][T15948] Uninit was stored to memory at: [ 557.497003][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 557.502718][T15948] __msan_chain_origin+0x54/0xa0 [ 557.507650][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 557.512757][T15948] get_compat_msghdr+0x108/0x2b0 [ 557.517688][T15948] do_recvmmsg+0xdc1/0x22d0 [ 557.522188][T15948] __sys_recvmmsg+0x519/0x6f0 [ 557.526861][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.532927][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.539081][T15948] __do_fast_syscall_32+0x127/0x180 [ 557.544279][T15948] do_fast_syscall_32+0x77/0xd0 [ 557.549125][T15948] do_SYSENTER_32+0x73/0x90 [ 557.553674][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.560086][T15948] [ 557.562394][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 557.569051][T15948] do_recvmmsg+0xbf/0x22d0 [ 557.573552][T15948] do_recvmmsg+0xbf/0x22d0 [ 558.234798][T15972] vxcan1 speed is unknown, defaulting to 1000 [ 558.651995][T15948] not chained 230000 origins [ 558.656628][T15948] CPU: 1 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 558.667009][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.677089][T15948] Call Trace: [ 558.680378][T15948] dump_stack+0x24c/0x2e0 [ 558.684751][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 558.690494][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 558.696189][T15948] ? kmsan_get_metadata+0x116/0x180 [ 558.701407][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 558.707063][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.713152][T15948] ? kmsan_get_metadata+0x116/0x180 [ 558.718374][T15948] ? kmsan_get_metadata+0x116/0x180 [ 558.723600][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 558.729431][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 558.735527][T15948] ? kmsan_get_metadata+0x116/0x180 [ 558.740745][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 558.746414][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.752503][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 558.757815][T15948] ? _copy_from_user+0x1fd/0x300 [ 558.762779][T15948] __msan_chain_origin+0x54/0xa0 [ 558.767741][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 558.772883][T15948] get_compat_msghdr+0x108/0x2b0 [ 558.777849][T15948] do_recvmmsg+0xdc1/0x22d0 [ 558.782383][T15948] ? __msan_get_context_state+0x9/0x20 [ 558.787866][T15948] ? kfree+0x29/0x11f0 [ 558.791962][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.798051][T15948] ? kmsan_get_metadata+0x116/0x180 [ 558.803273][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 558.808942][T15948] ? __msan_poison_alloca+0xec/0x110 [ 558.814254][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 558.819043][T15948] __sys_recvmmsg+0x519/0x6f0 [ 558.823736][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.829823][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.836000][T15948] __do_fast_syscall_32+0x127/0x180 [ 558.841230][T15948] do_fast_syscall_32+0x77/0xd0 [ 558.846114][T15948] do_SYSENTER_32+0x73/0x90 [ 558.850666][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.857019][T15948] RIP: 0023:0xf7f74549 [ 558.861190][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 558.880814][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 558.889253][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 558.897365][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 558.905359][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.913356][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.921433][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.929432][T15948] Uninit was stored to memory at: [ 558.934461][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 558.940204][T15948] __msan_chain_origin+0x54/0xa0 [ 558.945161][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 558.950298][T15948] get_compat_msghdr+0x108/0x2b0 [ 558.955260][T15948] do_recvmmsg+0xdc1/0x22d0 [ 558.959783][T15948] __sys_recvmmsg+0x519/0x6f0 [ 558.964580][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.970673][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.976852][T15948] __do_fast_syscall_32+0x127/0x180 [ 558.982075][T15948] do_fast_syscall_32+0x77/0xd0 [ 558.986956][T15948] do_SYSENTER_32+0x73/0x90 [ 558.991494][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.997848][T15948] [ 559.000177][T15948] Uninit was stored to memory at: [ 559.005192][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.010946][T15948] __msan_chain_origin+0x54/0xa0 [ 559.015906][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.021044][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.026001][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.030539][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.035412][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.041505][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.047683][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.052995][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.057859][T15948] do_SYSENTER_32+0x73/0x90 [ 559.062381][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.068714][T15948] [ 559.071024][T15948] Uninit was stored to memory at: [ 559.076028][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.081758][T15948] __msan_chain_origin+0x54/0xa0 [ 559.086705][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.091816][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.096844][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.101361][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.106031][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.112229][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.118560][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.123764][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.128610][T15948] do_SYSENTER_32+0x73/0x90 [ 559.133105][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.139433][T15948] [ 559.141742][T15948] Uninit was stored to memory at: [ 559.146743][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.152460][T15948] __msan_chain_origin+0x54/0xa0 [ 559.157397][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.162591][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.167523][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.172019][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.176708][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.182873][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.189112][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.194310][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.199167][T15948] do_SYSENTER_32+0x73/0x90 [ 559.203671][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.209997][T15948] [ 559.212316][T15948] Uninit was stored to memory at: [ 559.217350][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.223065][T15948] __msan_chain_origin+0x54/0xa0 [ 559.227997][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.233102][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.238035][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.242533][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.247221][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.253286][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.259442][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.264640][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.269485][T15948] do_SYSENTER_32+0x73/0x90 [ 559.273985][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.280311][T15948] [ 559.282619][T15948] Uninit was stored to memory at: [ 559.287619][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.293332][T15948] __msan_chain_origin+0x54/0xa0 [ 559.298270][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.303375][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.308307][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.312813][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.317486][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.323550][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.329701][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.334904][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.339753][T15948] do_SYSENTER_32+0x73/0x90 [ 559.344253][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.350578][T15948] [ 559.352889][T15948] Uninit was stored to memory at: [ 559.357899][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 559.363616][T15948] __msan_chain_origin+0x54/0xa0 [ 559.368549][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 559.373656][T15948] get_compat_msghdr+0x108/0x2b0 [ 559.378592][T15948] do_recvmmsg+0xdc1/0x22d0 [ 559.383093][T15948] __sys_recvmmsg+0x519/0x6f0 [ 559.387767][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.393835][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.399990][T15948] __do_fast_syscall_32+0x127/0x180 [ 559.405183][T15948] do_fast_syscall_32+0x77/0xd0 [ 559.410029][T15948] do_SYSENTER_32+0x73/0x90 [ 559.414526][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.420865][T15948] [ 559.423192][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 559.429852][T15948] do_recvmmsg+0xbf/0x22d0 [ 559.434287][T15948] do_recvmmsg+0xbf/0x22d0 [ 560.139374][T15948] not chained 240000 origins [ 560.144031][T15948] CPU: 1 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 560.154193][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.164258][T15948] Call Trace: [ 560.167540][T15948] dump_stack+0x24c/0x2e0 [ 560.171890][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 560.177622][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 560.183270][T15948] ? kmsan_get_metadata+0x116/0x180 [ 560.188480][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 560.194123][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.200301][T15948] ? kmsan_get_metadata+0x116/0x180 [ 560.205511][T15948] ? kmsan_get_metadata+0x116/0x180 [ 560.210722][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 560.216542][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 560.222621][T15948] ? kmsan_get_metadata+0x116/0x180 [ 560.227828][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 560.233468][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.239556][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 560.244855][T15948] ? _copy_from_user+0x1fd/0x300 [ 560.249808][T15948] __msan_chain_origin+0x54/0xa0 [ 560.254751][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.259872][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.264815][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.269338][T15948] ? __msan_get_context_state+0x9/0x20 [ 560.274806][T15948] ? kfree+0x29/0x11f0 [ 560.278890][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.284967][T15948] ? kmsan_get_metadata+0x116/0x180 [ 560.290173][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 560.295814][T15948] ? __msan_poison_alloca+0xec/0x110 [ 560.301106][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 560.305879][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.310590][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.316674][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.322841][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.328054][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.332916][T15948] do_SYSENTER_32+0x73/0x90 [ 560.337431][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.343774][T15948] RIP: 0023:0xf7f74549 [ 560.347844][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 560.367463][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 560.375903][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 560.383915][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 560.391905][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.399891][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 560.407965][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.415966][T15948] Uninit was stored to memory at: [ 560.420992][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.426734][T15948] __msan_chain_origin+0x54/0xa0 [ 560.431696][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.436828][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.441816][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.446344][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.451051][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.457152][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.463343][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.468574][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.473448][T15948] do_SYSENTER_32+0x73/0x90 [ 560.477979][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.484334][T15948] [ 560.486659][T15948] Uninit was stored to memory at: [ 560.491688][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.497435][T15948] __msan_chain_origin+0x54/0xa0 [ 560.502396][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.507688][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.512656][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.517183][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.521891][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.527989][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.534172][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.539401][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.544277][T15948] do_SYSENTER_32+0x73/0x90 [ 560.548805][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.555163][T15948] [ 560.557493][T15948] Uninit was stored to memory at: [ 560.562511][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.568250][T15948] __msan_chain_origin+0x54/0xa0 [ 560.573222][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.578355][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.583309][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.587827][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.592528][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.598617][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.604799][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.610029][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.614899][T15948] do_SYSENTER_32+0x73/0x90 [ 560.619426][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.625780][T15948] [ 560.628108][T15948] Uninit was stored to memory at: [ 560.633125][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.638871][T15948] __msan_chain_origin+0x54/0xa0 [ 560.643828][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.648962][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.653919][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.658444][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.663142][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.669237][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.675415][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.680644][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.685518][T15948] do_SYSENTER_32+0x73/0x90 [ 560.690042][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.696393][T15948] [ 560.698721][T15948] Uninit was stored to memory at: [ 560.703744][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.709489][T15948] __msan_chain_origin+0x54/0xa0 [ 560.714450][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.719597][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.724559][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.729092][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.733795][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.739891][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.746081][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.751308][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.756180][T15948] do_SYSENTER_32+0x73/0x90 [ 560.760704][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.767047][T15948] [ 560.769373][T15948] Uninit was stored to memory at: [ 560.774394][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.780143][T15948] __msan_chain_origin+0x54/0xa0 [ 560.785111][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.790273][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.795237][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.799764][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.804464][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.810561][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.816736][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.821964][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.826842][T15948] do_SYSENTER_32+0x73/0x90 [ 560.831380][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.837735][T15948] [ 560.840058][T15948] Uninit was stored to memory at: [ 560.845074][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 560.850813][T15948] __msan_chain_origin+0x54/0xa0 [ 560.855768][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 560.860903][T15948] get_compat_msghdr+0x108/0x2b0 [ 560.865855][T15948] do_recvmmsg+0xdc1/0x22d0 [ 560.870379][T15948] __sys_recvmmsg+0x519/0x6f0 [ 560.875106][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.881194][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.887459][T15948] __do_fast_syscall_32+0x127/0x180 [ 560.892692][T15948] do_fast_syscall_32+0x77/0xd0 [ 560.897565][T15948] do_SYSENTER_32+0x73/0x90 [ 560.902178][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.908531][T15948] [ 560.910857][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 560.917529][T15948] do_recvmmsg+0xbf/0x22d0 [ 560.921984][T15948] do_recvmmsg+0xbf/0x22d0 [ 561.545001][T15948] not chained 250000 origins [ 561.549642][T15948] CPU: 1 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 561.560004][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.570072][T15948] Call Trace: [ 561.573378][T15948] dump_stack+0x24c/0x2e0 [ 561.577742][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 561.583474][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 561.589214][T15948] ? kmsan_get_metadata+0x116/0x180 [ 561.594431][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 561.600091][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 561.606210][T15948] ? kmsan_get_metadata+0x116/0x180 [ 561.611432][T15948] ? kmsan_get_metadata+0x116/0x180 [ 561.616649][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 561.622477][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 561.628565][T15948] ? kmsan_get_metadata+0x116/0x180 [ 561.633800][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 561.639455][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 561.645547][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 561.650857][T15948] ? _copy_from_user+0x1fd/0x300 [ 561.655812][T15948] __msan_chain_origin+0x54/0xa0 [ 561.660776][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 561.665915][T15948] get_compat_msghdr+0x108/0x2b0 [ 561.670873][T15948] do_recvmmsg+0xdc1/0x22d0 [ 561.675408][T15948] ? __msan_get_context_state+0x9/0x20 [ 561.680902][T15948] ? kfree+0x29/0x11f0 [ 561.684999][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 561.691093][T15948] ? kmsan_get_metadata+0x116/0x180 [ 561.696316][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 561.701969][T15948] ? __msan_poison_alloca+0xec/0x110 [ 561.707267][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 561.712053][T15948] __sys_recvmmsg+0x519/0x6f0 [ 561.716757][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.722847][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.729028][T15948] __do_fast_syscall_32+0x127/0x180 [ 561.734260][T15948] do_fast_syscall_32+0x77/0xd0 [ 561.739139][T15948] do_SYSENTER_32+0x73/0x90 [ 561.743663][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.750008][T15948] RIP: 0023:0xf7f74549 [ 561.754097][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 561.773725][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 561.782165][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 561.790365][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 561.798356][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.806345][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 561.814333][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.822334][T15948] Uninit was stored to memory at: [ 561.827358][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 561.833099][T15948] __msan_chain_origin+0x54/0xa0 [ 561.838062][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 561.843194][T15948] get_compat_msghdr+0x108/0x2b0 [ 561.848153][T15948] do_recvmmsg+0xdc1/0x22d0 [ 561.852676][T15948] __sys_recvmmsg+0x519/0x6f0 [ 561.857390][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.863488][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.869675][T15948] __do_fast_syscall_32+0x127/0x180 [ 561.874903][T15948] do_fast_syscall_32+0x77/0xd0 [ 561.879766][T15948] do_SYSENTER_32+0x73/0x90 [ 561.884279][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.890626][T15948] [ 561.892945][T15948] Uninit was stored to memory at: [ 561.897957][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 561.903701][T15948] __msan_chain_origin+0x54/0xa0 [ 561.908646][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 561.913772][T15948] get_compat_msghdr+0x108/0x2b0 [ 561.918719][T15948] do_recvmmsg+0xdc1/0x22d0 [ 561.923322][T15948] __sys_recvmmsg+0x519/0x6f0 [ 561.928006][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.934085][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.940251][T15948] __do_fast_syscall_32+0x127/0x180 [ 561.945467][T15948] do_fast_syscall_32+0x77/0xd0 [ 561.950333][T15948] do_SYSENTER_32+0x73/0x90 [ 561.954850][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.961457][T15948] [ 561.963777][T15948] Uninit was stored to memory at: [ 561.968790][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 561.974525][T15948] __msan_chain_origin+0x54/0xa0 [ 561.979651][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 561.984857][T15948] get_compat_msghdr+0x108/0x2b0 [ 561.989804][T15948] do_recvmmsg+0xdc1/0x22d0 [ 561.994318][T15948] __sys_recvmmsg+0x519/0x6f0 [ 561.999004][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.005084][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.011255][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.016469][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.021337][T15948] do_SYSENTER_32+0x73/0x90 [ 562.025850][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.032185][T15948] [ 562.034502][T15948] Uninit was stored to memory at: [ 562.039516][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.045247][T15948] __msan_chain_origin+0x54/0xa0 [ 562.050197][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.055322][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.060287][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.064821][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.069513][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.075595][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.081764][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.086975][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.091839][T15948] do_SYSENTER_32+0x73/0x90 [ 562.096352][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.102718][T15948] [ 562.105033][T15948] Uninit was stored to memory at: [ 562.110132][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.116044][T15948] __msan_chain_origin+0x54/0xa0 [ 562.120993][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.126118][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.131071][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.135586][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.140274][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.146356][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.152523][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.157734][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.162596][T15948] do_SYSENTER_32+0x73/0x90 [ 562.167191][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.173626][T15948] [ 562.175944][T15948] Uninit was stored to memory at: [ 562.180961][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.186691][T15948] __msan_chain_origin+0x54/0xa0 [ 562.191723][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.196844][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.201789][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.206304][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.210994][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.217079][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.223250][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.228455][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.233303][T15948] do_SYSENTER_32+0x73/0x90 [ 562.237804][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.244144][T15948] [ 562.246454][T15948] Uninit was stored to memory at: [ 562.251454][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.257171][T15948] __msan_chain_origin+0x54/0xa0 [ 562.262102][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.267209][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.272139][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.276635][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.281308][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.287376][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.293548][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.298757][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.303617][T15948] do_SYSENTER_32+0x73/0x90 [ 562.308118][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.314446][T15948] [ 562.316755][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 562.323493][T15948] do_recvmmsg+0xbf/0x22d0 [ 562.327923][T15948] do_recvmmsg+0xbf/0x22d0 [ 562.601846][T15948] not chained 260000 origins [ 562.606481][T15948] CPU: 0 PID: 15948 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 562.616657][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.626962][T15948] Call Trace: [ 562.630251][T15948] dump_stack+0x24c/0x2e0 [ 562.634611][T15948] kmsan_internal_chain_origin+0x6f/0x130 [ 562.640362][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 562.646013][T15948] ? kmsan_get_metadata+0x116/0x180 [ 562.651279][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 562.656937][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.663146][T15948] ? kmsan_get_metadata+0x116/0x180 [ 562.668375][T15948] ? kmsan_get_metadata+0x116/0x180 [ 562.673610][T15948] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 562.679476][T15948] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 562.685572][T15948] ? kmsan_get_metadata+0x116/0x180 [ 562.690802][T15948] ? kmsan_set_origin_checked+0xa2/0x100 [ 562.696472][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.702572][T15948] ? kmsan_unpoison_shadow+0x74/0xa0 [ 562.707914][T15948] ? _copy_from_user+0x1fd/0x300 [ 562.713005][T15948] __msan_chain_origin+0x54/0xa0 [ 562.717988][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.723244][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.728242][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.732742][T15948] ? __msan_get_context_state+0x9/0x20 [ 562.738192][T15948] ? kfree+0x29/0x11f0 [ 562.742256][T15948] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.748313][T15948] ? kmsan_get_metadata+0x116/0x180 [ 562.753528][T15948] ? kmsan_internal_set_origin+0x82/0xc0 [ 562.759177][T15948] ? __msan_poison_alloca+0xec/0x110 [ 562.764549][T15948] ? __sys_recvmmsg+0xb5/0x6f0 [ 562.769310][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.774002][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.780062][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.786205][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.791404][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.796261][T15948] do_SYSENTER_32+0x73/0x90 [ 562.800916][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.807240][T15948] RIP: 0023:0xf7f74549 [ 562.811418][T15948] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 562.831132][T15948] RSP: 002b:00000000f554d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 562.839553][T15948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 562.847515][T15948] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 562.855576][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.863560][T15948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 562.871538][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.879523][T15948] Uninit was stored to memory at: [ 562.884532][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.890258][T15948] __msan_chain_origin+0x54/0xa0 [ 562.895197][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.900319][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.905247][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.909737][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.914399][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.920454][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.926595][T15948] __do_fast_syscall_32+0x127/0x180 [ 562.931804][T15948] do_fast_syscall_32+0x77/0xd0 [ 562.936639][T15948] do_SYSENTER_32+0x73/0x90 [ 562.941127][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.947440][T15948] [ 562.949767][T15948] Uninit was stored to memory at: [ 562.954772][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 562.960484][T15948] __msan_chain_origin+0x54/0xa0 [ 562.965436][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 562.970550][T15948] get_compat_msghdr+0x108/0x2b0 [ 562.975484][T15948] do_recvmmsg+0xdc1/0x22d0 [ 562.979974][T15948] __sys_recvmmsg+0x519/0x6f0 [ 562.984646][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.990789][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.996930][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.002143][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.006984][T15948] do_SYSENTER_32+0x73/0x90 [ 563.011472][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.017799][T15948] [ 563.020103][T15948] Uninit was stored to memory at: [ 563.025102][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 563.030808][T15948] __msan_chain_origin+0x54/0xa0 [ 563.035730][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 563.040844][T15948] get_compat_msghdr+0x108/0x2b0 [ 563.045788][T15948] do_recvmmsg+0xdc1/0x22d0 [ 563.050275][T15948] __sys_recvmmsg+0x519/0x6f0 [ 563.055019][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.061075][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.067240][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.072428][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.077347][T15948] do_SYSENTER_32+0x73/0x90 [ 563.081844][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.088233][T15948] [ 563.090578][T15948] Uninit was stored to memory at: [ 563.095573][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 563.101427][T15948] __msan_chain_origin+0x54/0xa0 [ 563.106350][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 563.111534][T15948] get_compat_msghdr+0x108/0x2b0 [ 563.116454][T15948] do_recvmmsg+0xdc1/0x22d0 [ 563.120944][T15948] __sys_recvmmsg+0x519/0x6f0 [ 563.125608][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.131782][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.137928][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.143124][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.147995][T15948] do_SYSENTER_32+0x73/0x90 [ 563.152490][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.158896][T15948] [ 563.161245][T15948] Uninit was stored to memory at: [ 563.166247][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 563.172012][T15948] __msan_chain_origin+0x54/0xa0 [ 563.176944][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 563.182110][T15948] get_compat_msghdr+0x108/0x2b0 [ 563.187036][T15948] do_recvmmsg+0xdc1/0x22d0 [ 563.191529][T15948] __sys_recvmmsg+0x519/0x6f0 [ 563.196196][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.202256][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.208408][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.213609][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.218472][T15948] do_SYSENTER_32+0x73/0x90 [ 563.222966][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.229294][T15948] [ 563.231605][T15948] Uninit was stored to memory at: [ 563.236607][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 563.242333][T15948] __msan_chain_origin+0x54/0xa0 [ 563.247255][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 563.252365][T15948] get_compat_msghdr+0x108/0x2b0 [ 563.257296][T15948] do_recvmmsg+0xdc1/0x22d0 [ 563.261791][T15948] __sys_recvmmsg+0x519/0x6f0 [ 563.266455][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.272514][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.278668][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.283881][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.288716][T15948] do_SYSENTER_32+0x73/0x90 [ 563.293211][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.299525][T15948] [ 563.301824][T15948] Uninit was stored to memory at: [ 563.306903][T15948] kmsan_internal_chain_origin+0xad/0x130 [ 563.312631][T15948] __msan_chain_origin+0x54/0xa0 [ 563.317586][T15948] __get_compat_msghdr+0x6db/0x9d0 [ 563.322784][T15948] get_compat_msghdr+0x108/0x2b0 [ 563.327710][T15948] do_recvmmsg+0xdc1/0x22d0 [ 563.332199][T15948] __sys_recvmmsg+0x519/0x6f0 [ 563.336863][T15948] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.342942][T15948] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.349093][T15948] __do_fast_syscall_32+0x127/0x180 [ 563.354283][T15948] do_fast_syscall_32+0x77/0xd0 [ 563.359139][T15948] do_SYSENTER_32+0x73/0x90 [ 563.363650][T15948] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.370072][T15948] [ 563.372461][T15948] Local variable ----msg_sys@do_recvmmsg created at: [ 563.379105][T15948] do_recvmmsg+0xbf/0x22d0 [ 563.383511][T15948] do_recvmmsg+0xbf/0x22d0 07:30:36 executing program 5: r0 = epoll_create1(0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 07:30:36 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 07:30:36 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00\x00', 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:36 executing program 2: r0 = getegid() statx(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x4000, 0xed3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x2}], {}, [{0x8, 0x6}, {0x8, 0x5}, {0x8, 0x0, r0}, {0x8, 0x6, 0xee01}, {0x8, 0x0, r1}], {0x10, 0x6}, {0x20, 0x6}}, 0x5c, 0x1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20042, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x6, 0x1f, "3f71867c1afe851bf37abd71b727ffa7a5324b34622b5ae9733f9072d90b62e6df8aa8938f2dad8a2387f2dcae07987ffbdaa0e02b1af893b32bf137c4b278", 0x3}, 0x80) setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "a1e26e70b0e3d119de1612c213369d5a6ff23004"}, 0x15, 0x2) getuid() setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x3}}, 0x44, 0x2) 07:30:36 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="142300001000010700000000000000000a116e4f7d51e26a6afbf78cb97ea6c72a556b4dc57f6f4b60a55b679212d84ef9e4c6a68ad997942fb43cb4994c876a7b184cdd7bc5c72768de7e7fb04640000000008c573ef1ff8cfa25235cdd23290641376e3b8795d19e000000000000000000000000000000004d1b7b01c076bcafa7426761ef9c071977c8cc36a84bd1c1e40ec720d9e08c30c188a5d55e3fda07dd90d3b176cff9205315e32a9f3f1881c768e6a46e31dcb0d71bb98bfd0db23df25da503a95b18f3f0db62607e1ff6ce8c59"], 0x2314}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x400, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 07:30:36 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00\x00', 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="386fd1f40f33f3c87646072488f7", 0x36}], 0x1}}], 0x1, 0x0) [ 564.317872][ T35] kauditd_printk_skb: 2 callbacks suppressed [ 564.317929][ T35] audit: type=1326 audit(1625383836.680:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16048 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x0 07:30:36 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 564.575522][T16053] netlink: 8960 bytes leftover after parsing attributes in process `syz-executor.4'. 07:30:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) [ 565.103526][ T35] audit: type=1326 audit(1625383837.470:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16048 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74549 code=0x0 07:30:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f0000000100)) 07:30:37 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00\x00', 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:37 executing program 2: prctl$PR_SET_SECCOMP(0x39, 0x1, 0x0) socketpair(0x11, 0xa, 0x0, &(0x7f0000000000)) 07:30:37 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 565.598259][T16070] ptrace attach of "/root/syz-executor.4"[16068] was attempted by "/root/syz-executor.4"[16070] 07:30:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}, {{@in6=@private1}, 0x0, @in=@private}}, 0xe8) 07:30:38 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="200000001200", 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:38 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x8) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 07:30:38 executing program 5: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xfe8d) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"}) 07:30:38 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x5}]}}) 07:30:39 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="200000001200", 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r1) 07:30:39 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:39 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80442, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="c9", 0x1}], 0x3) 07:30:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x1020, &(0x7f0000000a80)) 07:30:40 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="200000001200", 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:40 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:40 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) 07:30:40 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@mode}, {@gid}]}) 07:30:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000010ffd}], 0x2000000, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000500)='./file0\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) open(&(0x7f0000000140)='./file1\x00', 0xa800, 0x102) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x4f2000) fcntl$getown(r1, 0x9) sendfile(r3, r2, 0x0, 0xa19a) 07:30:40 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:41 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 568.857254][ T35] audit: type=1800 audit(1625383841.220:122): pid=16130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=14465 res=0 errno=0 [ 568.995164][ T35] audit: type=1804 audit(1625383841.250:123): pid=16130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.022287][ T35] audit: type=1804 audit(1625383841.310:124): pid=16130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.048170][ T35] audit: type=1804 audit(1625383841.400:125): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.074019][ T35] audit: type=1804 audit(1625383841.410:126): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 07:30:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "a8a440ab43f71623cadac9c184f2dc11c425e2"}) 07:30:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x10, 0x0) [ 569.636655][ T35] audit: type=1804 audit(1625383842.000:127): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.758066][ T35] audit: type=1804 audit(1625383842.040:128): pid=16143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.785016][ T35] audit: type=1804 audit(1625383842.060:129): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.810599][ T35] audit: type=1804 audit(1625383842.110:130): pid=16143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 [ 569.835828][ T35] audit: type=1804 audit(1625383842.120:131): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir129552939/syzkaller.3n0oeq/220/file0" dev="sda1" ino=14465 res=1 errno=0 07:30:42 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:42 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 07:30:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x30b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x38}}, 0x0) 07:30:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x1) 07:30:42 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="8e", 0x1) [ 570.568306][T16162] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 07:30:43 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:43 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) [ 570.662659][T16165] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 570.798233][T16168] ptrace attach of "/root/syz-executor.5"[16167] was attempted by "/root/syz-executor.5"[16168] 07:30:43 executing program 5: r0 = syz_io_uring_setup(0x701f, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x1e604000, 0x0, 0x12, r0, 0x8000000) 07:30:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000300)="89"}) [ 570.982388][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.989073][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 07:30:43 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) fallocate(r0, 0x10, 0x0, 0x1fbfc) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 07:30:43 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) 07:30:43 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:44 executing program 5: unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 07:30:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000080)=""/193}, &(0x7f0000000180)="6e0054b88de8", 0x0, 0x0, 0x0, 0x0, 0x0}) 07:30:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:44 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) 07:30:44 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000009200)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="b46aa5ad2210141666d7e449041b18659ca6dee9dca9ae254f1111cc288b4ba9c8001e0d245b2210d0bba2385e1c8a470fd53cd3", 0x34}, {&(0x7f00000008c0)="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", 0xb15}], 0x2, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x18}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @private1, 0x96e}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@rthdrdstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x40}}], 0x2, 0x0) 07:30:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0x0) 07:30:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:45 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "ebafc7367c7b615524d717c75a2dd621c5e246d2c2718c16076bc02e3f21e03c3b004408b85d696b4246618588f9c62b9d2f0617f7e15cbf9ef2b07403ee5ea1"}, 0x48, r0) keyctl$unlink(0x2, r1, 0x0) 07:30:45 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0), 0x0) 07:30:45 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xaa4) 07:30:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x16, 0xd785ab268586148d, 0x0, 0x0, {0xa, 0x0, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 07:30:45 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0), 0x0) 07:30:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0xf200) 07:30:46 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)={[{@cruft}, {@block={'block', 0x3d, 0x400}}, {@map_off}]}) 07:30:46 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fe44336e25f8a8d59710f010052c20d0da497ce26f143fdec4a5b3d80990532e620e1"], 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0), 0x0) 07:30:46 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 574.550419][T16236] loop5: detected capacity change from 0 to 184 07:30:47 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:47 executing program 5: r0 = creat(&(0x7f0000002b00)='./file0\x00', 0x0) r1 = dup(r0) open_by_handle_at(r1, &(0x7f0000006200)=@raw={0x4, 0x0, {"e5"}}, 0x0) 07:30:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000280)) 07:30:47 executing program 4: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x80002, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write(r0, 0x0, 0x0) 07:30:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bf00000000000000077647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc569cc61847a3687893a744b2af907cd408a9eafb1e536db9a53c0834c0bfa25f6fe44749fde027f6d9b734554f53f46333d4335707750f5e1a95c3691c793ae65b26963b3b4bbe07d4adbf5565aac2013c6ebb6daa46bb116ba41a5ce064579d932bd820adbb6bb0c7cc10", 0xca}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:30:47 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 575.720702][T16268] ptrace attach of "/root/syz-executor.0"[16267] was attempted by "/root/syz-executor.0"[16268] 07:30:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x15}, @ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0x0) 07:30:48 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3d}, {0x6}]}) 07:30:48 executing program 5: r0 = creat(&(0x7f0000002b00)='./file0\x00', 0x0) r1 = dup(r0) open_by_handle_at(r1, &(0x7f0000006200)=@raw={0x4, 0x0, {"e5"}}, 0x0) 07:30:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:48 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 576.441933][ T35] audit: type=1326 audit(1625383848.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x0 07:30:48 executing program 0: r0 = socket$inet(0x2, 0x3, 0x81) setsockopt$inet_buf(r0, 0x0, 0x2d, 0x0, 0x0) 07:30:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58) link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') unlink(&(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000200)='./bus\x00', 0x0) 07:30:49 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 07:30:49 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x9167656cac105bad, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@empty, 0x0, 0x33}, @in6=@private0}, 0x0, 0xea}}, 0xf8}}, 0x0) 07:30:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) [ 577.417733][T16298] loop5: detected capacity change from 0 to 512 07:30:50 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 577.745789][T16298] loop5: detected capacity change from 0 to 512 [ 577.975209][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:30:50 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:50 executing program 5: set_mempolicy(0x1, &(0x7f0000000000)=0x7791, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0xfffffc67, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) 07:30:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000002080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127a, &(0x7f0000000000)) 07:30:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000200)="2400000032001f4214f9f40700ee8a6e766da8c6117076000000000000000100ffffffff", 0x24) 07:30:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:30:51 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:51 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:51 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) [ 579.264983][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.274627][T16333] tc_dump_action: action bad kind 07:30:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x13, 0xa98334e2ccc0058f, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 07:30:52 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:52 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="1e", 0x1}], 0x1) 07:30:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:30:52 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="001300f1f71cbb9ec41bfe"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:30:53 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:53 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x14d882) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x6, 0x2, 0x3, 0x1, "21dccaaf2b926e5559d673620aed29a0e5851659006ccc3a08ec675e9eb5e9541b11c5cefd0a67b941702f386d5fe23541c611889a2e9de842129de7498d07dc", "59cd26a4130e7c84255043b6e3115bb834692957809b997672491a2b5bbc4115", [0x0, 0xf8]}) fallocate(r0, 0x3, 0x0, 0x100007e00) [ 581.027004][T16367] ptrace attach of "/root/syz-executor.4"[16366] was attempted by "/root/syz-executor.4"[16367] 07:30:53 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000280), 0x0) 07:30:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:30:54 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:54 executing program 0: r0 = socket$netlink(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x50, 0x0, &(0x7f00000000c0)) 07:30:54 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) 07:30:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c61afdaec7828318af8f15e1a3fc7db5", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="19a800a817e3029f8f2d5fc185f9592f", 0x10) 07:30:54 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) 07:30:55 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:55 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:30:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=')\\\x00') 07:30:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:55 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) 07:30:56 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:30:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffff7}, 0x8, [0x0]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 07:30:56 executing program 2: unshare(0x22020000) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) 07:30:56 executing program 2: unshare(0x22020000) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:56 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:57 executing program 0: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/70, 0x46) 07:30:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) 07:30:57 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:30:57 executing program 2: unshare(0x22020000) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:57 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) 07:30:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 07:30:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:58 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:58 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:30:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:30:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)=@ethtool_modinfo}) 07:30:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:30:59 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:30:59 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:30:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:30:59 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f0000000cc0)='./file0\x00', 0x0, 0x6, &(0x7f0000001f40)=[{&(0x7f0000000d00)="20d0eef176d7cd74a6a61794a482fe1e6544b497fbbb4ead2e5a27339f763d13e57236d5", 0x24, 0x5}, {&(0x7f0000000d40)="2ef8cf39503f4d6c6ff2cd13ba2845d8acb3e7d8df472e0f90ea8ccaa82370574ad8495f49d3f06bfd5cf803ed91dacb6977420acb99a66e6c82c82c114743e3427ac2ba4ecc747d66", 0x49, 0xee}, {&(0x7f0000000dc0)="9c2a29f243bc915f188e08fe3fc6261a485329e5bb0fbb374c944c4497265f5bb146812ab64060fb9531ebbe988ae64cdccddb704939801eca401456e1645c2e", 0x40, 0xe36}, {&(0x7f0000000e00)="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", 0x1000, 0x2}, {&(0x7f0000001e00)="c86512150efee59998a51e081cd964cecfda2a7709c835bb72ea346fa66d99154df499090107494e5cdd496de8ce4e67df643618aa4056543eb28f894dc9bcb71402f45d0a46827a034d459b206a83a9db94fe8b0381b75d8e1eb312a7b34886744448d7f00f725e0f6d64b73145adb8b2fac61da1f709441caaf234ab594f4bce3ea455146cef36f07a49e9986482fd703bc7d887fa18b53ccb29282c", 0x9d, 0x6}, {0x0}], 0x100018, &(0x7f0000002000)={[{@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}], [{@smackfstransmute}, {@obj_type={'obj_type', 0x3d, '#P'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 07:31:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:31:00 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2, 0x0) 07:31:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:31:01 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:31:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0x0, 0x0, 0xee00) 07:31:01 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:31:01 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:02 executing program 2: unshare(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 07:31:02 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:31:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:31:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:03 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:03 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(r0) 07:31:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:31:04 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 591.696660][ T35] audit: type=1326 audit(1625383864.069:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:04 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) [ 591.836657][ T35] audit: type=1326 audit(1625383864.089:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.860777][ T35] audit: type=1326 audit(1625383864.099:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.884161][ T35] audit: type=1326 audit(1625383864.099:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.907274][ T35] audit: type=1326 audit(1625383864.109:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.930285][ T35] audit: type=1326 audit(1625383864.109:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.953496][ T35] audit: type=1326 audit(1625383864.109:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.976540][ T35] audit: type=1326 audit(1625383864.109:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 591.999550][ T35] audit: type=1326 audit(1625383864.119:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 592.022597][ T35] audit: type=1326 audit(1625383864.129:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 593.247462][ T306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.647078][ T306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.003510][ T306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.350544][ T306] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.725552][ T306] device hsr_slave_0 left promiscuous mode [ 597.732366][ T306] device hsr_slave_1 left promiscuous mode [ 597.741641][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.749382][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.758711][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.766540][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.776995][ T306] device bridge_slave_1 left promiscuous mode [ 597.784767][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.793941][ T306] device bridge_slave_0 left promiscuous mode [ 597.800443][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.816172][ T306] device veth1_macvtap left promiscuous mode [ 597.822296][ T306] device veth0_macvtap left promiscuous mode [ 597.828645][ T306] device veth1_vlan left promiscuous mode [ 597.834741][ T306] device veth0_vlan left promiscuous mode [ 600.495013][ T306] team0 (unregistering): Port device team_slave_1 removed [ 600.516793][ T306] team0 (unregistering): Port device team_slave_0 removed [ 600.531970][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.559321][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.637935][ T306] bond0 (unregistering): Released all slaves [ 600.721385][T16586] IPVS: ftp: loaded support on port[0] = 21 [ 600.742076][T16586] vxcan1 speed is unknown, defaulting to 1000 [ 601.025783][T16586] chnl_net:caif_netlink_parms(): no params data found [ 601.143649][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.151438][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.161255][T16586] device bridge_slave_0 entered promiscuous mode [ 601.178761][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.186361][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.195367][T16586] device bridge_slave_1 entered promiscuous mode [ 601.252437][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.272768][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.320785][T16586] team0: Port device team_slave_0 added [ 601.334766][T16586] team0: Port device team_slave_1 added [ 601.384866][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.391945][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.419032][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.438597][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.446010][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.474819][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.543988][T16586] device hsr_slave_0 entered promiscuous mode [ 601.553734][T16586] device hsr_slave_1 entered promiscuous mode [ 601.567821][T16586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.578425][T16586] Cannot create hsr debugfs directory [ 601.934185][ T58] Bluetooth: hci2: command 0x0409 tx timeout [ 602.110557][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.143211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 602.152830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.173088][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.199870][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.209872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.219812][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.227437][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.274363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 602.283202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.295886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.305265][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.312587][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.321802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.332125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.342709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.352998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.363344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.373627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.394767][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.403721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.413444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.434106][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.443634][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.467648][T16586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.518488][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.527041][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.535235][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.629510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.639809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.685798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.696125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.709459][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.718768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.731820][T16586] device veth0_vlan entered promiscuous mode [ 602.761794][T16586] device veth1_vlan entered promiscuous mode [ 602.795475][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.805260][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.835979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.846242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.864975][T16586] device veth0_macvtap entered promiscuous mode [ 602.882186][T16586] device veth1_macvtap entered promiscuous mode [ 602.921364][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 602.931996][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.942007][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 602.952771][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.964368][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 602.975076][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.985326][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 602.995976][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.006005][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 603.016654][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.029147][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.039532][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.049181][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.058812][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.069966][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.093072][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.104360][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.114473][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.125221][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.135342][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.146149][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.156203][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.166915][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.177067][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.187730][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.200706][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.211721][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.222217][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.471881][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.479913][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.491665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.584249][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.592385][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.600765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:31:16 executing program 2: unshare(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:16 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) close(r0) fchdir(r0) 07:31:16 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x443000033) 07:31:16 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:16 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 603.968462][ T35] kauditd_printk_skb: 5 callbacks suppressed [ 603.968509][ T35] audit: type=1326 audit(1625383876.339:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16818 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 603.998020][ T35] audit: type=1326 audit(1625383876.339:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16818 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 604.021653][ T35] audit: type=1326 audit(1625383876.339:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16818 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 604.026942][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 604.044640][ T35] audit: type=1326 audit(1625383876.339:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16818 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:16 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:16 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:16 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) close(r0) fchdir(r0) 07:31:16 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, 0x0) [ 604.772487][ T35] audit: type=1326 audit(1625383877.139:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:17 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) close(r0) fchdir(r0) [ 604.965934][ T35] audit: type=1326 audit(1625383877.169:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 604.989705][ T35] audit: type=1326 audit(1625383877.169:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 605.012713][ T35] audit: type=1326 audit(1625383877.169:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:17 executing program 2: unshare(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:17 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:17 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mlockall(0x6) 07:31:17 executing program 4: symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, 0x0) 07:31:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(0xffffffffffffffff) fchdir(r0) 07:31:18 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mlockall(0x6) 07:31:18 executing program 2: unshare(0x22020000) mkdir(0x0, 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:18 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:31:18 executing program 4: symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, 0x0) 07:31:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(0xffffffffffffffff) fchdir(r0) 07:31:18 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mlockall(0x6) 07:31:18 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) 07:31:19 executing program 4: symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)) 07:31:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(0xffffffffffffffff) fchdir(r0) 07:31:19 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:19 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) [ 607.902933][ T35] audit: type=1326 audit(1625383880.269:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16896 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 607.928634][ T35] audit: type=1326 audit(1625383880.279:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16896 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 609.971637][ T306] device hsr_slave_0 left promiscuous mode [ 609.982337][ T306] device hsr_slave_1 left promiscuous mode [ 609.997139][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.005033][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.015973][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.023579][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.041397][ T306] device bridge_slave_1 left promiscuous mode [ 610.048398][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.067166][ T306] device bridge_slave_0 left promiscuous mode [ 610.076319][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.109711][ T306] device veth1_macvtap left promiscuous mode [ 610.116059][ T306] device veth0_macvtap left promiscuous mode [ 610.122239][ T306] device veth1_vlan left promiscuous mode [ 610.128506][ T306] device veth0_vlan left promiscuous mode [ 612.310908][ T306] team0 (unregistering): Port device team_slave_1 removed [ 612.331070][ T306] team0 (unregistering): Port device team_slave_0 removed [ 612.348900][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.368253][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.449045][ T306] bond0 (unregistering): Released all slaves [ 612.509731][T16914] IPVS: ftp: loaded support on port[0] = 21 [ 612.529642][T16914] vxcan1 speed is unknown, defaulting to 1000 [ 612.823262][T16914] chnl_net:caif_netlink_parms(): no params data found [ 612.941981][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.949346][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.959039][T16914] device bridge_slave_0 entered promiscuous mode [ 612.972290][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.979959][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.989693][T16914] device bridge_slave_1 entered promiscuous mode [ 613.070492][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.093304][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.177683][T16914] team0: Port device team_slave_0 added [ 613.196210][T16914] team0: Port device team_slave_1 added [ 613.278302][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.285761][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.313981][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.330750][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.338084][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.365979][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.384348][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 613.437809][T16914] device hsr_slave_0 entered promiscuous mode [ 613.450687][T16914] device hsr_slave_1 entered promiscuous mode [ 613.459389][T16914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.467366][T16914] Cannot create hsr debugfs directory [ 613.895895][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.919389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 613.929070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.948067][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.966935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.976387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.986019][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.993352][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.004532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.019888][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.030282][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.039851][ T3173] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.047305][ T3173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.074459][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 614.091352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 614.113684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 614.124960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 614.139329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 614.154026][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 614.166636][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 614.187718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 614.197735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.221237][T16914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.233714][T16914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.244597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 614.255685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.301580][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.309664][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.332220][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.440440][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.450451][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.497204][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.507195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.519365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.529146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.548107][T16914] device veth0_vlan entered promiscuous mode [ 614.570369][T16914] device veth1_vlan entered promiscuous mode [ 614.623237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.633768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.651847][T16914] device veth0_macvtap entered promiscuous mode [ 614.669016][T16914] device veth1_macvtap entered promiscuous mode [ 614.702997][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 614.714019][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.724218][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 614.734833][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.744894][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 614.755552][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.765633][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 614.776274][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.786644][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 614.797284][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.810487][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.820739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.830619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 614.840309][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 614.850786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.873611][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 614.885304][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.895935][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 614.906629][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.916771][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 614.927638][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.937799][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 614.948491][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.958752][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 614.969631][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.982961][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.991123][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.001715][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.283976][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.294009][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.309172][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 615.393382][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.402368][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.416457][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 615.455182][ T4679] Bluetooth: hci2: command 0x041b tx timeout 07:31:27 executing program 2: unshare(0x22020000) mkdir(0x0, 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:27 executing program 4: mkdir(0x0, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:27 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(0xffffffffffffffff) 07:31:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)) 07:31:27 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0xa) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) 07:31:28 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) [ 615.857371][ T35] kauditd_printk_skb: 2 callbacks suppressed [ 615.857425][ T35] audit: type=1326 audit(1625383888.229:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:28 executing program 4: mkdir(0x0, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 616.081559][ T35] audit: type=1326 audit(1625383888.269:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 616.104867][ T35] audit: type=1326 audit(1625383888.269:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 616.130058][ T35] audit: type=1326 audit(1625383888.289:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:28 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:31:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(0xffffffffffffffff) 07:31:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)) 07:31:28 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) [ 616.516827][ T35] audit: type=1326 audit(1625383888.779:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 616.542150][ T35] audit: type=1326 audit(1625383888.779:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:29 executing program 2: unshare(0x22020000) mkdir(0x0, 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 616.565594][ T35] audit: type=1326 audit(1625383888.779:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 616.588672][ T35] audit: type=1326 audit(1625383888.829:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:29 executing program 4: mkdir(0x0, 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:29 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:31:29 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') close(r0) fchdir(0xffffffffffffffff) 07:31:29 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:29 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:29 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 617.540254][ T8452] Bluetooth: hci2: command 0x040f tx timeout 07:31:30 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:30 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 07:31:30 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:30 executing program 5: r0 = syz_io_uring_setup(0x3f77, &(0x7f0000000000), &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xa013, r0, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000140)) 07:31:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:30 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 07:31:30 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:30 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:31 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0xd4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="e6", 0x1}], 0x1}}, {{0x0, 0x240, &(0x7f0000000340)=[{&(0x7f0000000100)=']', 0x1}, {&(0x7f0000000200)='@', 0x1}, {&(0x7f0000000240)="13", 0x1}, {&(0x7f0000000280)="f2", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)='A', 0x1}, {&(0x7f0000000cc0)='^', 0x1}, {&(0x7f0000000040)='w', 0x1}, {&(0x7f0000000180)="1555fbf93cd1", 0xfffffd7c}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001100)="f7", 0x1}, {&(0x7f00000011c0)="8e", 0x1}, {&(0x7f0000001240)="d2", 0x1}, {&(0x7f0000001300)='e', 0x1}, {&(0x7f0000000140)='h', 0x1}, {&(0x7f0000001380)='N', 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="93", 0x1}, {&(0x7f0000001740)='b', 0x1}], 0x2}}], 0x5, 0x60cd800) 07:31:31 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 07:31:31 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) [ 619.176894][ T35] audit: type=1326 audit(1625383891.549:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17214 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 619.202115][ T35] audit: type=1326 audit(1625383891.569:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17214 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 619.271415][T17220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:31:31 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:31 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e20000000000000000000001400"}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)={0x0, "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"}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa40000ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x12d, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x37) [ 619.614527][ T8452] Bluetooth: hci2: command 0x0419 tx timeout 07:31:32 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005fe2", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 07:31:32 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:32 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 620.119096][T17239] ptrace attach of "/root/syz-executor.5"[17238] was attempted by "/root/syz-executor.5"[17239] 07:31:32 executing program 5: set_mempolicy(0x1, &(0x7f0000000040)=0x100000001, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) 07:31:32 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:32 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:33 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)) 07:31:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000006400034700bb65e1c3e4ffff0100000001000000560000002500000019001c0004000b0007fd17e5ffff080004000000282459801b", 0x39}], 0x1) 07:31:33 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:33 executing program 5: setregid(0xee01, 0xffffffffffffffff) setregid(0x0, 0xffffffffffffffff) 07:31:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 621.273548][T17265] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 07:31:33 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:33 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)) 07:31:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000015c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14c, &(0x7f0000000740)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 07:31:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 07:31:34 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:34 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) [ 622.039533][T17282] ptrace attach of "/root/syz-executor.1"[17280] was attempted by "/root/syz-executor.1"[17282] 07:31:34 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)) 07:31:34 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000dc0)="66530700ae897094e7b144b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dc065e4885c77c8b58f4c593c2025aa18c9228103b66e1d48e03000000000000da445b8bef73d9125939f50bd2d4ed96a074eb04a348a666bf48b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a7038d36bf8faef497d5a7f37b117c238d1d8f1762c6716", 0xd8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:31:34 executing program 5: r0 = io_uring_setup(0x2d3a, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xc, 0x0, 0x1) 07:31:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:35 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 622.783979][T17300] ptrace attach of "/root/syz-executor.1"[17299] was attempted by "/root/syz-executor.1"[17300] 07:31:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x2, 0x0) clone3(&(0x7f0000000300)={0x1000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x30}, &(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r0}}, 0x58) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) 07:31:35 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:35 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) setgroups(0x0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 07:31:35 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:35 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:36 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000140)) 07:31:36 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlockall(0x6) 07:31:36 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:36 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff, 0x3, 0x7ff}) 07:31:36 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:31:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94\x00\xac\a(\xc1\xbb\xbf;J\x1b\xd2g\x05G\xcdY\x82L\x1c\x15*\xb9\xee\x04\xb0\x88\xf3\xf3\x949s\x8fBN\x1f\xa4j\xf2\xcbX\xef3\xb6\xc3\xd9\xbd\x1b\n\xac&/\x10\xb5\xa2\xb9\x93\xbd\x7f\x84\"\x8a\x13[H', 0x7) fcntl$addseals(r1, 0x409, 0x8) 07:31:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlockall(0x6) 07:31:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 624.846510][T17349] "struct vt_consize"->v_clin is ignored. Please report if you need this. 07:31:37 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:37 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25}, {0x6}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:31:37 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 07:31:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000940)={0x0, 0x3938700}, 0x0, 0x0) 07:31:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlockall(0x6) 07:31:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 625.537178][ T35] kauditd_printk_skb: 2 callbacks suppressed [ 625.537233][ T35] audit: type=1326 audit(1625383897.909:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 07:31:38 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:38 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mlockall(0x6) 07:31:38 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 07:31:38 executing program 5: setresuid(0x0, 0xee00, 0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8917, &(0x7f0000001840)={'hsr0\x00'}) 07:31:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 626.293130][ T35] audit: type=1326 audit(1625383898.659:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 07:31:38 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:38 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0xc, 0x0, 0x0) 07:31:38 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mlockall(0x6) 07:31:39 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 07:31:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x2d, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 07:31:39 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 07:31:39 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mlockall(0x6) 07:31:39 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x200000001000005, 0x7) set_mempolicy(0x0, &(0x7f0000000100), 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) 07:31:39 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', 0x0) 07:31:39 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 07:31:40 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 07:31:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) mlockall(0x6) 07:31:40 executing program 1: migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x80000001) 07:31:40 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', 0x0) 07:31:40 executing program 5: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000840), &(0x7f0000000880), 0x0) 07:31:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 07:31:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) mlockall(0x6) 07:31:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0, @ANYRESOCT], 0x52) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) 07:31:41 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000080)='./file0\x00', 0x0, 0x124140b, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', 0x0) 07:31:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$'], 0x28}}, {{&(0x7f0000001680)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="24000000000000002900000032000000000000000000000000000001b7dccdc9c0"], 0x28}}], 0x2, 0x0) 07:31:41 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) mlockall(0x6) 07:31:41 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) [ 629.477238][T17442] 9pnet: p9_errstr2errno: server reported unknown error 0177777 07:31:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) 07:31:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, "ed105400000000003ec13e2000000000005c00c571a8926706657800"}) 07:31:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="32b545d4793cd72377c28f"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:31:42 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) 07:31:42 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:42 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) 07:31:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 630.298684][T17462] ptrace attach of "/root/syz-executor.1"[17461] was attempted by "/root/syz-executor.1"[17462] 07:31:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x18, 0x0, 0x0) 07:31:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000014c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3, 0x4}}) 07:31:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r0, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0xc1fffffd) mmap(&(0x7f00005fd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000001180)={0x77359400}, &(0x7f00000011c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) 07:31:43 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:43 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) 07:31:43 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 631.042277][T17479] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 07:31:43 executing program 2: syz_io_uring_setup(0x3dc7, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x2000)=nil) 07:31:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fork() sendmsg$netlink(r0, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000030c0)={0x24, 0x29, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="f4"]}, 0x24}], 0x1}, 0x0) 07:31:43 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x6) 07:31:43 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}], 0x1, 0x0) [ 631.851125][T17502] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 07:31:44 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 07:31:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) 07:31:44 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) mlockall(0x6) 07:31:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541b, 0x0) 07:31:44 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) [ 632.416110][T17510] new mount options do not match the existing superblock, will be ignored [ 632.431180][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.437819][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 07:31:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}], 0x1, 0x0) 07:31:45 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) mlockall(0x6) 07:31:45 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x81}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 07:31:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x1000}], 0x0, &(0x7f00000000c0)=ANY=[]) 07:31:45 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:45 executing program 5: io_uring_setup(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) [ 633.290612][ T35] audit: type=1326 audit(1625383905.659:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x0 [ 633.344583][T17529] loop1: detected capacity change from 0 to 4096 [ 633.434154][T17529] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 633.444295][T17529] EXT4-fs (loop1): group descriptors corrupted! 07:31:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}], 0x1, 0x0) [ 633.605115][T17529] loop1: detected capacity change from 0 to 4096 [ 633.648188][T17529] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 633.658279][T17529] EXT4-fs (loop1): group descriptors corrupted! 07:31:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/212, 0xd4, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/105, 0x69}], 0x1, 0xe5, 0x0) 07:31:46 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:46 executing program 1: add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001800)='keyring\x00', &(0x7f0000001840)={'syz', 0x0}, 0x0, 0x0) 07:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d40)={0x20, r1, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) 07:31:46 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) mlockall(0x6) 07:31:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/123, 0x7b}], 0x1, 0x600, 0x0) 07:31:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\xafI\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) fcntl$addseals(r1, 0x409, 0x8) [ 634.830647][ T35] audit: type=1326 audit(1625383907.199:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17560 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x0 07:31:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x70c0, &(0x7f0000000240), &(0x7f0000836000/0x2000)=nil, &(0x7f0000c3d000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) r4 = dup(r1) io_uring_enter(r4, 0x3ef4, 0x0, 0x0, 0x0, 0x0) 07:31:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x35, &(0x7f0000000040), 0x4) 07:31:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:47 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:48 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 07:31:48 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x0) 07:31:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:48 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r3, 0x1000000000000003, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 07:31:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)) r4 = dup3(r1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:48 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) [ 636.383823][ T35] audit: type=1326 audit(1625383908.749:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 636.516398][ T35] audit: type=1326 audit(1625383908.779:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 636.539809][ T35] audit: type=1326 audit(1625383908.779:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b6a, &(0x7f0000000140)={0x200e}) [ 636.562861][ T35] audit: type=1326 audit(1625383908.779:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 636.585947][ T35] audit: type=1326 audit(1625383908.779:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:49 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x0) 07:31:49 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 637.145826][ T35] audit: type=1326 audit(1625383909.398:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17602 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 [ 637.169133][ T35] audit: type=1326 audit(1625383909.398:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17602 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x9, 0x0) [ 637.192357][ T35] audit: type=1326 audit(1625383909.408:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17602 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fcf549 code=0x7ffc0000 07:31:49 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)) r4 = dup3(r1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:49 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x0) 07:31:49 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0201a6ffffff0a000000ff45ac0000ffffff82000800000000000000024000ffffffa6000000e1000000887700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 07:31:50 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x1001}, @void}}}, 0x24}}, 0x0) 07:31:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x45, &(0x7f0000000200)="8d31e1ffc7f2f583156939000000e28c0b1dd2a357b265c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x34) 07:31:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)) r4 = dup3(r1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) [ 638.041375][T17623] loop5: detected capacity change from 0 to 1 07:31:50 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) [ 638.118500][T17623] loop5: p1 p2 p3 p4 [ 638.122599][T17623] loop5: partition table partially beyond EOD, truncated [ 638.131617][T17623] loop5: p1 start 10 is beyond EOD, truncated [ 638.138203][T17623] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 638.270116][T17623] loop5: p3 start 225 is beyond EOD, truncated [ 638.276840][T17623] loop5: p4 size 3657465856 extends beyond EOD, truncated 07:31:50 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x2, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) [ 638.483196][T17640] ptrace attach of "/root/syz-executor.0"[17638] was attempted by "/root/syz-executor.0"[17640] 07:31:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000040)={'lo\x00', @ifru_flags}) 07:31:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x29, &(0x7f0000000600)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) [ 638.554720][T17623] loop5: detected capacity change from 0 to 1 07:31:51 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) 07:31:51 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:51 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:51 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40505330, &(0x7f0000000500)={0xbf}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) 07:31:51 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 07:31:51 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) ftruncate(r0, 0x800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x278) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) 07:31:52 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) [ 639.658033][T17669] autofs4:pid:17669:autofs_fill_super: called with bogus options [ 639.708446][T17671] autofs4:pid:17671:autofs_fill_super: called with bogus options 07:31:52 executing program 5: io_setup(0x8001, &(0x7f0000000040)) 07:31:52 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001d40)={&(0x7f0000000ac0), 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc}]}, 0x30}}, 0x0) 07:31:52 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:31:52 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:52 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0xff, &(0x7f00000000c0)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 07:31:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1c) 07:31:53 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) 07:31:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8901, &(0x7f0000000040)) 07:31:53 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:53 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:53 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 07:31:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r0, &(0x7f0000000040), 0x7ffff000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) write$evdev(r0, 0x0, 0x0) 07:31:53 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:54 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x13, r0, 0x10000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000080)}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 07:31:54 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, 0x0, 0x0, 0x803e}}], 0x2, 0x0) 07:31:54 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) [ 641.705851][T17710] loop2: detected capacity change from 0 to 1019 [ 641.863520][T17710] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 07:31:54 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1f, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 07:31:54 executing program 3: r0 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) r4 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) 07:31:54 executing program 0: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) 07:31:55 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:31:55 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, 0x0, 0x0, 0x803e}}], 0x2, 0x0) 07:31:55 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) [ 643.100075][T17747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 643.108745][T17747] ref_ctr increment failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000033e54fbd 07:31:55 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) 07:32:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x8b7, &(0x7f0000000340), &(0x7f0000486000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r5, 0x90e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:32:00 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, 0x0, 0x0, 0x803e}}], 0x2, 0x0) 07:32:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r0, &(0x7f00000029c0)=[{0x0}, {0x0}, {&(0x7f0000002940)='\b', 0x1001}], 0x3) 07:32:00 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1f, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 07:32:00 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:32:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) 07:32:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) [ 648.222205][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 648.231147][T17768] ref_ctr increment failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000033e54fbd 07:32:00 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000007ffff"], 0x52) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 07:32:00 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)) r5 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 07:32:00 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x1, 0x0) [ 648.989406][T17783] ===================================================== [ 648.996386][T17783] BUG: KMSAN: uninit-value in p9_client_rpc+0x1067/0x13d0 [ 649.003605][T17783] CPU: 1 PID: 17783 Comm: syz-executor.0 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 649.013782][T17783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.023862][T17783] Call Trace: [ 649.027160][T17783] dump_stack+0x24c/0x2e0 [ 649.031523][T17783] kmsan_report+0xfb/0x1e0 [ 649.035964][T17783] __msan_warning+0x5c/0xa0 [ 649.040496][T17783] p9_client_rpc+0x1067/0x13d0 [ 649.045304][T17783] ? init_wait_entry+0x190/0x190 [ 649.050347][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.056185][T17783] p9_client_version+0x1d3/0x9e0 [ 649.061156][T17783] ? p9_fd_create+0x6ba/0x700 [ 649.065847][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.071084][T17783] p9_client_create+0x1401/0x16d0 [ 649.076149][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.081379][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.087225][T17783] v9fs_session_init+0x2b1/0x2cd0 [ 649.092357][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.098193][T17783] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 649.104288][T17783] v9fs_mount+0x134/0x1300 [ 649.108738][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.113958][T17783] legacy_get_tree+0x163/0x2e0 [ 649.118829][T17783] ? xfs_fs_commit_blocks+0x1040/0x1040 [ 649.124405][T17783] ? legacy_parse_monolithic+0x320/0x320 [ 649.130062][T17783] vfs_get_tree+0xd8/0x5e0 [ 649.134559][T17783] path_mount+0x3d64/0x5c20 07:32:01 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x3c, &(0x7f0000000080), 0x4) [ 649.139142][T17783] __se_sys_mount+0x921/0xa10 [ 649.143844][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.149062][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.154896][T17783] __ia32_sys_mount+0x62/0x80 [ 649.159604][T17783] __do_fast_syscall_32+0x127/0x180 [ 649.164834][T17783] do_fast_syscall_32+0x77/0xd0 [ 649.169721][T17783] do_SYSENTER_32+0x73/0x90 [ 649.174256][T17783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.180617][T17783] RIP: 0023:0xf7fcf549 [ 649.184704][T17783] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 649.204336][T17783] RSP: 002b:00000000f55c95fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 649.212777][T17783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 649.220761][T17783] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000180 [ 649.228734][T17783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 649.236700][T17783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 649.244667][T17783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.252637][T17783] [ 649.254946][T17783] Local variable ----ecode@p9_check_errors created at: [ 649.261774][T17783] p9_check_errors+0x69/0xba0 [ 649.266458][T17783] p9_check_errors+0x69/0xba0 [ 649.271135][T17783] ===================================================== [ 649.278047][T17783] Disabling lock debugging due to kernel taint [ 649.284182][T17783] Kernel panic - not syncing: panic_on_kmsan set ... [ 649.290856][T17783] CPU: 1 PID: 17783 Comm: syz-executor.0 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 649.301007][T17783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.311056][T17783] Call Trace: [ 649.314328][T17783] dump_stack+0x24c/0x2e0 [ 649.318667][T17783] panic+0x4c6/0xea7 [ 649.322646][T17783] ? add_taint+0x17c/0x210 [ 649.327055][T17783] kmsan_report+0x1de/0x1e0 [ 649.331557][T17783] __msan_warning+0x5c/0xa0 [ 649.336057][T17783] p9_client_rpc+0x1067/0x13d0 [ 649.340831][T17783] ? init_wait_entry+0x190/0x190 [ 649.345772][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.351578][T17783] p9_client_version+0x1d3/0x9e0 [ 649.356514][T17783] ? p9_fd_create+0x6ba/0x700 [ 649.361184][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.366380][T17783] p9_client_create+0x1401/0x16d0 [ 649.371413][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.376612][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.382415][T17783] v9fs_session_init+0x2b1/0x2cd0 [ 649.387448][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.393259][T17783] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 649.399344][T17783] v9fs_mount+0x134/0x1300 [ 649.403783][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.408985][T17783] legacy_get_tree+0x163/0x2e0 [ 649.413755][T17783] ? xfs_fs_commit_blocks+0x1040/0x1040 [ 649.419315][T17783] ? legacy_parse_monolithic+0x320/0x320 [ 649.424946][T17783] vfs_get_tree+0xd8/0x5e0 [ 649.429364][T17783] path_mount+0x3d64/0x5c20 [ 649.433868][T17783] __se_sys_mount+0x921/0xa10 [ 649.438545][T17783] ? kmsan_get_metadata+0x116/0x180 [ 649.443742][T17783] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 649.449550][T17783] __ia32_sys_mount+0x62/0x80 [ 649.454223][T17783] __do_fast_syscall_32+0x127/0x180 [ 649.459427][T17783] do_fast_syscall_32+0x77/0xd0 [ 649.464283][T17783] do_SYSENTER_32+0x73/0x90 [ 649.468785][T17783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.475114][T17783] RIP: 0023:0xf7fcf549 [ 649.479175][T17783] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 649.498796][T17783] RSP: 002b:00000000f55c95fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 649.507236][T17783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 649.515204][T17783] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000180 [ 649.523169][T17783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 649.531144][T17783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 649.539128][T17783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.548590][T17783] Kernel Offset: disabled [ 649.552911][T17783] Rebooting in 86400 seconds..