v(&(0x7f00000004c0)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) [ 2645.609953][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2645.662132][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 03:45:17 executing program 4: getsockname(0xffffffffffffffff, 0x0, 0x0) 03:45:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x6, &(0x7f0000000040), 0x4) 03:45:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 03:45:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket(0xa, 0x3, 0x0) 03:45:18 executing program 3: r0 = gettid() sched_getattr(r0, &(0x7f0000000400)={0x38}, 0x38, 0x0) 03:45:18 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x89a0, &(0x7f0000000040)="3bd1ab0a") 03:45:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x6edfb449103b96b0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 03:45:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xc) 03:45:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}]}, 0x48}}, 0x0) 03:45:18 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001280)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 03:45:19 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x36, r0) 03:45:19 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x541b, &(0x7f0000000040)) 03:45:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xd, &(0x7f0000000040), 0x20000044) 03:45:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}]}, 0x48}}, 0x0) 03:45:19 executing program 2: bpf$OBJ_GET_PROG(0x21, 0x0, 0x0) [ 2647.704924][T17552] encrypted_key: insufficient parameters specified 03:45:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 03:45:19 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0) 03:45:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}]}, 0x48}}, 0x0) 03:45:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x9, 0x400006, 0x4) 03:45:20 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, 0x0, &(0x7f0000000580)) 03:45:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @empty}]}, &(0x7f0000000080)=0x10) 03:45:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={0x0, @in={0x2, 0x0, @private=0x8}, @l2tp={0x2, 0x0, @remote}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x7}) 03:45:20 executing program 4: socket(0x1, 0x0, 0x0) 03:45:20 executing program 2: r0 = socket(0x2, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2100) 03:45:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0x10}}) 03:45:20 executing program 5: bind$isdn(0xffffffffffffffff, 0x0, 0x0) 03:45:21 executing program 4: bpf$MAP_CREATE(0xa, &(0x7f0000000000), 0x40) 03:45:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000180), 0x4) 03:45:21 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) 03:45:21 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x6611, 0x0) 03:45:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x18, 0x400000, 0x4) 03:45:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:21 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x5411, &(0x7f00000000c0)={'lo\x00'}) 03:45:21 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:45:21 executing program 2: r0 = socket(0x1e, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x0) [ 2649.943791][ T28] audit: type=1804 audit(1599363921.736:81): pid=17602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir073041353/syzkaller.12fqGh/2094/file0" dev="sda1" ino=15896 res=1 [ 2650.094007][ T28] audit: type=1804 audit(1599363921.796:82): pid=17602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir073041353/syzkaller.12fqGh/2094/file0" dev="sda1" ino=15896 res=1 03:45:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:22 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 03:45:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 03:45:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x9c) 03:45:22 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'tunl0\x00', @ifru_data=0x0}) 03:45:22 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x1100}, 0x0) 03:45:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:22 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:45:22 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, &(0x7f0000000580)) 03:45:22 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x3, 0x0, &(0x7f0000001440)) 03:45:23 executing program 2: r0 = socket(0x1, 0x80002, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={&(0x7f0000000280), 0x2000028c, &(0x7f0000000300)={0x0}}, 0x0) 03:45:23 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x114, 0x7, 0x0, 0x0) 03:45:23 executing program 1: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x8, r0, 0xfffffffffffffffb) 03:45:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, &(0x7f0000000140)=@qipcrtr, 0x0, 0x0) 03:45:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x19, &(0x7f00000001c0)={@loopback, @local, @loopback}, 0xc) 03:45:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0xfffffffffffffffe) 03:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:45:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:45:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x2b, 0x0, 0x0) 03:45:24 executing program 2: syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1222000, &(0x7f00000001c0)) 03:45:24 executing program 4: mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:45:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:24 executing program 1: r0 = socket(0x1d, 0x803, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x23, 0x0, 0x0) 03:45:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:45:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x9c) 03:45:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000007c0)='6', 0x1, 0xfffffffe, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 03:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) io_uring_setup(0x8f2, &(0x7f0000000080)={0x0, 0x0, 0x2}) 03:45:25 executing program 5: r0 = io_uring_setup(0x751, &(0x7f0000001180)) write$vhost_msg_v2(r0, 0x0, 0x0) 03:45:25 executing program 1: symlinkat(&(0x7f0000000380)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) renameat(r1, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file2\x00') 03:45:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x0) 03:45:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0xf0ffffff7f0000) 03:45:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:25 executing program 5: socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 03:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000080)) 03:45:26 executing program 1: r0 = socket(0x2, 0x3, 0x5) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x11, &(0x7f0000001440), 0x20001444) 03:45:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) 03:45:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000080)={'wg1\x00'}) 03:45:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:26 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x54, 0x0, 0x8, 0x9, 0x10000}) 03:45:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000280)) 03:45:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), 0x4) 03:45:26 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1, 0x0) 03:45:26 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 03:45:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x10e, 0x3, 0x0, 0x400600) 03:45:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0}) 03:45:27 executing program 1: r0 = gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/14, 0x2000000e}], 0x1, 0x0) 03:45:27 executing program 3: syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 03:45:27 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) 03:45:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:27 executing program 2: socketpair(0x1e, 0x805, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0x2020) 03:45:27 executing program 5: r0 = socket(0x1e, 0x1, 0x0) connect$can_j1939(r0, 0x0, 0x0) 03:45:27 executing program 4: r0 = socket(0x15, 0x5, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x8953, 0x0) bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 03:45:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x0, 0x0) connect$rxrpc(r0, 0x0, 0x0) 03:45:27 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x12, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:28 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) getsockname(r0, 0x0, 0x0) 03:45:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f00000005c0)={'gretap0\x00', 0x0}) [ 2656.557307][T17803] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? 03:45:28 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000000)=@rxrpc=@in4={0x1e, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x0) 03:45:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b8000000000000001100000006000000ebddc23054689dcb507e308c01e3a70ecee3e8363f75b64372c7a7e8f85bcd38f245d1d34528d485664023ee29aad201fa5e3e7b4a159d4e52caf65434a0bae471b834421b7fac576bbbbe64febeb5787fb2dd0a4d6a9acdf24eb29db31c7bef7979bbe37a2245eafad08f0e140f6af642dd8aaedc3088f12b8e115e1a7e06c3edfd5e3af761b91df32239228e6d4005f2b2d2911e8ae9b45c95f305ac3f912dd37c3ea7000000003000000000000013"], 0x230}, 0x0) 03:45:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 03:45:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x48}}, 0x0) 03:45:29 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, &(0x7f00000001c0)) 03:45:29 executing program 5: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000240)="3011b054342bdc0f0b972e7413bbdf92213078e0718fc43c064acbcccf24817971367562f78a6e78cc493d9d20b7f15ab5e04a2031d21d123a5761ffbf23226c354aad4aa18aa6672924836caa218b84fd99e66876a09f27cf96b74192", 0x5d}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000005d40)="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", 0x1a9}, {&(0x7f0000002380)="558c3d61fcf663c9d1c9bcd5afade47470cdaa08e1bebf23f903f72d7feab8476aef05b460073a3cb0d00b055b62cb9e2262fa2fa9418c46a47241197f2adb08a6a711febabe2621983576d3710818e7fd", 0x51}, {&(0x7f0000002400)="5731108c87cb16118e81ddb145f65bc2c8a76a0ec3a816fcfaa384effbc42776356bda0af8de98d109ff3ce0f42fa3a0ea7057b9ff8ca0ebaaa066d68d47fcec4822efd57f974aff26d3f0791afdbb9dae8a0b668e75a0028be4b42b0bc2d14db7a900a8f1b8dad1fefdc7a05a9f33425ae515a8cb76bf999c66c0f9bf45351af420b16a36d35c3faeef267a32423581c375e07b697f629bec2082226b3a97c205887552a71bd69a3b3de95ba3091ac55cb7a64db3b6", 0xb6}, {&(0x7f00000024c0)="19c1e060ed09dba5f87d16a175617dcaee73596c70772c3cf5e1fcaee67b61d12544890fa766398dde2dc6c500391028d60c3b987cfcca10b1a58089327b754524677186c9763d199306efee114f0ec79bbbfe970d592069c7d522703505f1f2250da830fda9be677cb08ea1b46ee92f708c1fac045249a086a9114fb76ab66d75d474efed96d23907c1ab5e6ad63ad70e0ebac3c66bcf061336f5ed78019d77c10127af3ea13fd65b70a38e44c2f5b6e63ec6b4356c54ea400e036520ec449b7bf0e7ca7dd89907ec6a6a2bfb69f5de8475da21a97b159f41b07437f382e1b3e0e0ffc6d8f8945afa21c98ed73f4f4f679cfe2a2f5a706798dbb1149eb521c8e275108135ddb98b5eafeddb74c7bdb2e4b4ee9f79a6f70a46af04e2b306678021e654b2b2ea8e62fe9962cc9340466e84bbe57ebc7394ff2b5c3734bfe13f7cadf4da513ffd46bb048cc628fed5870fd175bdfec42a72337d5dd7b9aae7ffbbac0f2ccc42163bde29eacf25686384dbab6c789836b109c5a2b9605eacbac94cfa0faf82a634fc8b2dcd4e8391d1e9e1487d7a1c01eb50915f2959e1d43e4743eff50c525f7dc20016a0bec00489901f5472461d0b006ae6416a334ba440bc993bd5398adbaca1bfc54a07e1fdf2f644d75be4176e1ec30a5ea56af6cbe61396445b03221e96c4378e172f0c82f3a8b4a45afbfc8176a61e6561af3e2fdaca330492a7c1fc7c111a6741cd69ef6fb31e8f82cfafb478379ea1067a649b0d632372dd7334d5949b18bbb1e6d73ff2b456a69c1897e833ad03437903e22e2f2d66f0a6261f157f781d757e04530b591c7d660997e36c045afd61513f7c2abe80a1d0b2d6aa07a0d06bb194fe4c1a28b1ee2f057c9c436f5230bf2598b6a1ca34aa20347c1fff6f3fe8f2687e6198bde29f5836a72b7e7045ad30ad5680ff06160d49b90443923e05e4974f186b31e306e3feed8c19ab7fe689d63811f3c5f57cb52dfca344c7c967e796cf0be7b98e702d265a823edc244d2769d699bf4cb45f6b194c4ad1ad4057cacb0a03d4cd05bd21a5fe1fca8ded9cd76e8304a70d1f6b69b5cc093a9dc04c028e09eff3002590b072ca46dd2d506751296aa6ed56330b2f0f774d4d884d7f23090b3175cd91ebe8994dff1db0ea33dcc930e9da5a20a69437a562f18f7d8ea8240c08db217d7e9403efd1557986e611f92692a2082c22fff2768acdc0268fb8ac4e2db444e7716455bf514f51ffaa171bb576b15382a8d3d584b82e87d1d151ca22f12cf6e838b86505b33892936f6a442a9c3d42d83990943388e629c52b493af6d655568715e78206b8c86e057282416e08c252319eb2f22bbace2fe65e1074a65e79574ad12722a595d9f6d18e09a0f72eb8a283da6a3cd5dd2873d8af7af4b75a2b903595a7e994684cbdfdd1b7f325ecd8121548ad17b1517e4750eeb2782c4409319e3fbfdcfce9143a08a78e6cc2549334bdbecb86ac552189ce102c9c304ca4df4c78e38af38ebc6c4b57dec97302fd5ce12730439c6f1db37522c2f4f93c6bcd02d44bee32a1e368359bf409d44b38b5ecb18326abb0cdd28ba14d52c6908212bc4bb282c2253f45f8c530be27b3c8c1a70be341c9f326e3ec1865c8018db5a407d84e6fee1ba16134d414cace051f5b244f295f8c25c9b70bb1e5e9497da8975f559f9a2c16f4eb83c38d9b79730113d628e59a58b1bf693e71231640bb23eb041fceb86fc8fd3e82171e350c5c00448bf5f15c9fc5944935b981711e58c775852333a1e4015c99b886e0284b385a31a743de61eed7fb8ac3e269070c901ebb19f8479ba3cafcfd2ed9c5eb89200afead546cbc8040b0dda2ef3e5d78aa0e21a4ebe42608eb3146d6f6790236f098593fb8912fd5c53bfcc41622e8cd48cf031a03cc2f6266fd0b4f4c9046f8a14a8a386c8a17f86c3fa4b5382afdf8c74c5e469d234e6d88dd1e39dccab8f8b4e6b61deb5a29cf0fae8cc41bce3cf09d8059ad8fa43141e6a41117c9e196b1dce7d64a9c10f4d2dfab1eefddf921d3a9269ddab8521830e29f4f9e1caa0c7ceb86d5ba5e481625f9d71a7a3b6fdcc82eb7e9843a7da4eba803bf13568dd98df20ea594d7f452709d4fcf0fd3e140263853e87d445af70fd85728b9a0feab0e5c9b9faf15b86629ca2a21c402c0d7ffa08ee1468fc6e519b74600fc4623d80fcfe34f5acbeb725572fae35b3e4e6b4a037755cfd57711525a36826cac8f358c304c92fc0f28ba03315e0af651eb305c6180ceeee6a22597218339ce7b0a47d4a55be54cc81a7e80e0ae4dfa02c5bc8b01d2e8caf84986000ca7474c43a4ec518cfc091c1223d0a38e12ac2e6579fb049d94332e00754eb78b7bfae4a2e4423eeef96281ddd341a15f9a1933dabddad21ca9eaaa958a4395b648e1bae3e6cd6d0c5e134e5ddffec8feb42af1eb6e709cfefd42206ce10a3c643ecfdfabfa978f90ef5ff5687c4798128cf0d7781e8f664396167ee247e36d12ff84a4249eaf4646947737a6a3e71cd89063d99e894729b7f4faf44eb0e47d1eb5ade4529d3a4a01b464092c291e97d9208572205c639333bae76f28835a3a53b07dfa7a735ac74a47024ac13216d7e6a36c3bed1dae8d53a6d1b52fb00cbb5fca1791d77a3668b7922711cd4790fd92ab461b388216d8f26074dd9364be497ddedc27bfee4edc9500803c36b5c9c7b1ea49378aa11d9760aea0f501392cbbd4d5e9a3a768afeb9cf6d3ecc02f4a14f2883f10078bb18b0ef114654d0d36a79e6aea66c320b67b1ca7e25634ad82b0d55bfd19e5e1df95b96aa5b072ab4c87a61cee07bba3672483b41b2d7b96b01aeaf103ebaee8eb3410ea9def999abd2d3d23a4bab90ed06b4e19e1b28ed71ac21930ee619d4672586ce36e308abed3c9bc282e7f83aa0533b08cae593d65d5de543930e9542e656802eb399e87d015c79b9833dbfffaea55a2d84ebf647af4f78a22c050dcba9a931b33c546a5b941ee2e0e5d0d39992c0a28f255e76d96dad7e6818f1951ae7ad6f698d9b7d7b361484493a88d3e1092e5bb42bb40c906b93143603a1b752a385153ebd056b3480723fe3356f5c7bf2d4ee3f2aab01dbb3d5e1adfcb3b8ed8c5116c6be5b98fe6c76c982c57bb1a4f6057e6f43ddd7fcc8d1755ec64ed2b7fabb84e0471db9fbbae8f571da740bdd2326b91c387b8d4434edb99534a5480b7a805b8b6e21ca3ca4d3c96e4d5a6d0f127d92d726b7bc2db3b1cc857567e7793e1ec1538c4773dd16dd00afaebd2486bb37eb78032cc0f8987d17ee61919eef4470431f2ad1b3a47a1391d2419dce3ebbdf65861e0a11ace6927538b70acf98f602eecb857310647e807f60ec6e4ef8b00e027926b6be98cd51a7e91e7fb9781c3e4fe23e7a4975213f88c9466e1b78cf97c8a5ba206e0f64b3b68c906c9eaa2a3c5a0a3b1e3c323410de2c15bb48ed0f2839956369188c91fedc66b6f4313754c80f4b5a7da602a779d293170a2b6c4417ca4947cb3011fe45a18de478f3e312753b85ad1d1413e150af6321324db7a5c41b9ce41a89069835f79a15431e1db69921932b988f100fe23b083f6f2bc30a244fc8ca3a34ceede40c5d6f5dc31817c35cb42d7b988f982da87b2be199e2e0ffd94f78ff924c082422c0813d0b327006de85d30a5775b102eed6cedd5bd5618cab84c2029b1eb618c2b200fc8c4cf1fcde1f650793cd8fca64af74629bbc9faaf47cd6be60820090137e56f642b61e46dc496c2f62abd569242ac116ba69db47370ad7d24096c306832bd7dba101df4fb67c4f929d7f5bde6d49ba406c3d4f7469eee62155db81bcb2fa211376f29630db65e9ddc4ac9b84efc2378a9dd408075734a9c15703a015e1eb84bc251319b37157e4b5466636828eec06c869fd116e395739a9bd8fb6f586b304d894e14ccb02c8924f4f1988c8193d0971cf10f294c85c4e3d6442e5e18037bbf84ca82410eafe1463289135a766d1c910f2b91d9622a091f57851611d8c6ec9fe99949e75d0206d32fb5d24fd95fd348d1a2e6939231701504e8c637aa8138c06e8c655cd1819b68c3f3ff28f87000c6e0b9eca84d3f4d71135477f5c4fea176bdbd9cb60fe70c44a8b875f114fb23b8b8cfdfdf9ceef762d27fb18fd4785cc6005feea1e5651ec9b76caba64d8c4b9a61a5cd144d5d476614f8401d117244489e952403e4fff620685c46bf12d9f6", 0xbb4}], 0x7}}], 0x1, 0x0) 03:45:29 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), 0x4) 03:45:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x60}}, 0x0) 03:45:29 executing program 1: r0 = socket(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 03:45:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x48}}, 0x0) 03:45:29 executing program 2: socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$xdp(r0, 0x0, 0x0) 03:45:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') read$alg(r0, &(0x7f0000000040)=""/156, 0x9c) read$alg(r0, &(0x7f0000000140)=""/245, 0xf5) 03:45:29 executing program 5: r0 = socket(0x25, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) 03:45:29 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x10e, 0x4, 0x0, 0x0) 03:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) 03:45:30 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, r1}, 0x10) 03:45:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x48}}, 0x0) 03:45:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, &(0x7f0000000140)) 03:45:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0xa, 0x400000, 0x4) 03:45:30 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'vcan0\x00', @ifru_mtu}) 03:45:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 03:45:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5450, 0x0) 03:45:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2276, &(0x7f0000000140)) 03:45:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8971, &(0x7f0000000080)={'wg1\x00'}) 03:45:31 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) 03:45:31 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="182c"], 0x18}}, 0x0) 03:45:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:31 executing program 2: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)="4180c96838de86abe0c4b8d6da80be5dff3e3261b3d50dd64cb8382f492966a50e978a802bc9dca9e21b5eea4663e9a138d2f9c8c1a75ebb778732e8e48d7322d150833a3e6bc19f38146bb910bc53d4ad44815f4643403934d342d3f9dd9eae8fcb49caa4b6fe13ce56ef9c3a6c571d718feaa6a4db9ba248fa093f6f1208346e373d43c1ebc38f7aacb7705c3897bb1ec261d4f1544cc60c4d7286d66ec6e5839d9c6a0840b2f9c78a4ceb4a2e4e2cd68d750fdae75b8581c6d859b1c217b1815bddf26803e32aa366ce859e62", 0xce}, {&(0x7f0000000240)="3011b054342bdc0f0b972e7413bbdf92213078e0718fc43c064acbcccf24817971367562f78a6e78cc493d9d20b7f15ab5e04a2031d21d123a5761ffbf23226c354aad4aa18aa6672924836caa218b84fd99e66876a09f27cf96b74192", 0x5d}, {&(0x7f0000005d40)="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", 0x174}, {&(0x7f0000002380)="558c3d61fcf663c9d1c9bcd5afade47470cdaa08e1bebf23f903f72d7feab8476aef05b460073a3cb0d00b055b62cb9e2262fa2fa9418c46a47241197f2adb08a6a711febabe2621983576d3710818e7fd", 0x51}, {&(0x7f0000002400)="5731108c87cb16118e81ddb145f65bc2c8a76a0ec3a816fcfaa384effbc42776356bda0af8de98d109ff3ce0f42fa3a0ea7057b9ff8ca0ebaaa066d68d47fcec4822efd57f974aff26d3f0791afdbb9dae8a0b668e75a0028be4b42b0bc2d14db7a900a8f1b8dad1fefdc7a05a9f33425ae515a8cb76bf999c66c0f9bf45351af420b16a36d35c3faeef267a32423581c375e07b697f629bec2082226b3a97c205887552a71bd69a3b3de95ba3091ac55cb7a64db3b6", 0xb6}, {&(0x7f00000024c0)="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", 0xb1b}], 0x6}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x40002140, 0x0, 0x0) 03:45:31 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0xf, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:31 executing program 5: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x40000000000c, 0xa200) 03:45:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0x10}}) 03:45:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:45:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 03:45:32 executing program 5: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x4f) 03:45:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$alg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003700)="ac", 0x1}], 0x1}, 0x0) 03:45:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400002, 0x0, 0xffffffffffffffff) 03:45:32 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f00000005c0)={'gretap0\x00', 0x0}) 03:45:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:32 executing program 5: syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3b8196e07a0e2b73, &(0x7f0000000400)=ANY=[]) 03:45:32 executing program 2: setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) 03:45:33 executing program 3: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000003, 0xffffffffffffffff) 03:45:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4040ae9e, &(0x7f0000003040)) 03:45:33 executing program 1: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 03:45:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:33 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 03:45:33 executing program 5: socket$inet6(0xa, 0x6aee8fe3765eccdb, 0x0) 03:45:33 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2288, &(0x7f0000000140)) 03:45:33 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x89e3, &(0x7f00000001c0)) 03:45:33 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1e, 0x4}, 0x2000004c, &(0x7f00000001c0)={0x0, 0x7c}}, 0x0) 03:45:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 03:45:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x24, 0x4f4000, 0x4) 03:45:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_pktinfo(r0, 0x10e, 0x2, 0x0, 0x0) 03:45:34 executing program 4: connect$unix(0xffffffffffffffff, 0x0, 0x0) 03:45:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) 03:45:35 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_addrs=@vsock}) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f000010f000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000138000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f00003eb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 03:45:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x0, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:35 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:45:35 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x6, 0x4) 03:45:35 executing program 1: getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000004280)) 03:45:35 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_getoverrun(0x0) 03:45:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x0, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:35 executing program 5: r0 = socket(0x21, 0x2, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x110, 0x2, 0x0, 0x15) 03:45:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000140)) 03:45:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000021, 0x0, 0x0) 03:45:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0xe, 0x400000, 0x4) 03:45:36 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000280)) 03:45:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x0, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 03:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, r1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') 03:45:36 executing program 4: socketpair(0x9, 0x0, 0x0, &(0x7f0000000080)) 03:45:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 03:45:36 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x10) 03:45:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) [ 2664.859061][T17985] can: request_module (can-proto-0) failed. [ 2664.912891][T17985] can: request_module (can-proto-0) failed. 03:45:36 executing program 5: keyctl$KEYCTL_PKEY_VERIFY(0x17, 0x0, 0x0, 0x0, 0x0) 03:45:36 executing program 4: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x10) 03:45:36 executing program 3: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x8, &(0x7f0000000000), 0x1) 03:45:36 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 03:45:37 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)="d2", 0xfffffdef}}, 0x0) 03:45:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) 03:45:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x3, 0x84) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 03:45:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/zoneinfo\x00', 0x0, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 03:45:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0xd, 0x0, 0x0) 03:45:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf0ff7f}}, 0x0) 03:45:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000c00)='gfs2\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000003f40)) 03:45:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) 03:45:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x22, 0x0, 0x0) 03:45:38 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x1) 03:45:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002d00)={0x2020}, 0x2020) 03:45:38 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x33, 0x0, &(0x7f0000000580)) 03:45:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x7}) 03:45:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffd56) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 03:45:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 03:45:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0xd, 0x0, 0x4) 03:45:38 executing program 5: r0 = fanotify_init(0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) fanotify_mark(r0, 0x2, 0x1, r1, &(0x7f0000000040)='./file0\x00') 03:45:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 03:45:38 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0xffff, 0x3ff) write$cgroup_devices(r0, 0x0, 0x3fffff) 03:45:39 executing program 1: prctl$PR_MCE_KILL(0x2, 0x531000, 0x0) 03:45:39 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) 03:45:39 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x600000000000000) 03:45:39 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 03:45:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:39 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\\\xa9\xc6\x00', 0x4) 03:45:39 executing program 0: r0 = socket(0x2c, 0xc, 0x1) r1 = socket(0xa, 0x3, 0x200000000000ff) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @xdp={0x2c, 0x0, 0x0, 0x0, 0xb00}, @can, @ax25={0x3, @bcast, 0x400005}, 0x0, 0x0, 0x0, 0x600}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x62, 0xff, 0x6, 0x0, @remote, @loopback, 0x700, 0x7800, 0x0, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e00000001900000128bd7000fddbdf251c00140300020004002600000c00090002000405", @ANYRES32=r2, @ANYBLOB="8400130000000f000000000000000000000000000000000000000000000000000000010000000000000000000000040000000000000004000000000000000000000005000000000000000000000000000000010000000000000000000003000000000000000000000000000000000000000000000000000000000400000000000000000005001a002000000008000400", @ANYRES32=0x0, @ANYBLOB="140012000b003a8dd4252f6db2f6f0c668a6e37008000400", @ANYRES32=0x0, @ANYBLOB="0500000000fa0000"], 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0x480) setsockopt$inet_pktinfo(r0, 0x10e, 0x2, 0x0, 0x0) 03:45:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc008561c, &(0x7f0000000d00)={0xf0f002, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0300"}}) 03:45:39 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x15, r0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) 03:45:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x1b, 0x4f4000, 0x4) 03:45:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4018aebd, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 03:45:40 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 03:45:40 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 03:45:40 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000300), 0x4) 03:45:40 executing program 5: r0 = socket(0x21, 0x2, 0x2) bind$isdn(r0, 0x0, 0x0) 03:45:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 03:45:40 executing program 2: getresgid(&(0x7f0000000200), 0x0, 0x0) 03:45:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x13, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 03:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5460, 0x0) 03:45:41 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 03:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) 03:45:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, 0x0) 03:45:41 executing program 3: r0 = socket(0x1d, 0x803, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 03:45:41 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$llc(r0, 0x0, 0x0) 03:45:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x11, &(0x7f0000000040), 0x4) 03:45:41 executing program 0: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) 03:45:41 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket(0x1f, 0x0, 0x0) 03:45:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) 03:45:42 executing program 3: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0x13, &(0x7f00000001c0)={{{@in6=@empty, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 03:45:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x20000110) 03:45:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 03:45:42 executing program 0: r0 = socket(0x1d, 0x803, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x65, 0x2, 0x0, 0x0) 03:45:42 executing program 2: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x2001) 03:45:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00'}) 03:45:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000c00)='gfs2\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x240080, &(0x7f0000003f40)) 03:45:42 executing program 1: r0 = fsopen(&(0x7f0000000140)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 03:45:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x7a, &(0x7f00000001c0), &(0x7f0000000200)=0x2f) 03:45:42 executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x2, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:43 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 03:45:43 executing program 5: syz_mount_image$jfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x41, 0x8000011, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) 03:45:43 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x0) 03:45:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000007c0)="363698e186296ac8f6a9b55a107d9e50edd817afb340", 0x16, 0x0, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 03:45:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b4c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @null}) 03:45:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f00000002c0)={'gretap0\x00', 0x0}) 03:45:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x26) 03:45:43 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x91, 0x0, 0x0) 03:45:43 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:45:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x17, 0x400006, 0x4) 03:45:44 executing program 0: socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 03:45:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x1, 0x9, 0x7, 0x2001, 0x0, 0x0}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x8000, r0}, 0x38) 03:45:44 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x81000000) times(&(0x7f0000000140)) 03:45:44 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x13, 0x0, &(0x7f0000000580)) 03:45:44 executing program 4: bpf$OBJ_GET_PROG(0xd, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:44 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 03:45:44 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7b86a49c571866e2}, 0x10) 03:45:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 03:45:45 executing program 5: r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 03:45:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:45:45 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x1bf180, 0x0) 03:45:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x12, 0x400000, 0x4) 03:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 03:45:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r1, &(0x7f0000000380)={0x38}, 0x38, 0x0) 03:45:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0x10}}) 03:45:45 executing program 0: r0 = socket(0x1d, 0x2, 0x7) setsockopt$inet_int(r0, 0x6b, 0x0, 0x0, 0x0) 03:45:45 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 03:45:45 executing program 4: get_mempolicy(0x0, &(0x7f0000000000), 0x7fffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3) 03:45:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0x10}}) 03:45:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) 03:45:46 executing program 3: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r0, 0x0, &(0x7f0000000100)) 03:45:46 executing program 0: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffea6) 03:45:46 executing program 1: r0 = socket(0x1d, 0x803, 0x1) bind$bt_hci(r0, 0x0, 0x0) 03:45:46 executing program 5: ioprio_get$pid(0x0, 0x0) 03:45:46 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) prctl$PR_MCE_KILL(0x7, 0x0, 0x0) 03:45:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0x10}}) 03:45:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 03:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket$unix(0x1, 0x5, 0x0) 03:45:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) memfd_create(0x0, 0xf1df5edbce44805c) 03:45:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0x10}}) 03:45:47 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x8, 0x4f4000, 0x4) 03:45:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {0x6}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0xfffffffffffffd81, 0x3}]}, 0x1c}}, 0x0) 03:45:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) 03:45:47 executing program 1: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0xa, &(0x7f00000001c0)={{{@in=@local, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 03:45:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 03:45:48 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x21c080) 03:45:48 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)) 03:45:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0}) 03:45:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x1, 0xef7, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000004c0), 0x80000002, r0}, 0x38) 03:45:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0xb0}) 03:45:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 03:45:48 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x0) 03:45:48 executing program 0: pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0}) 03:45:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x40000121) 03:45:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x88, 0x0, 0x0, 0x0) 03:45:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @vsock, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='virt_wifi0\x00'}) 03:45:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x10, &(0x7f00000001c0)={0x0, 0x68}, &(0x7f0000000200)=0x8) 03:45:49 executing program 2: r0 = socket(0x2, 0xa, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 03:45:49 executing program 3: keyctl$KEYCTL_RESTRICT_KEYRING(0x2, 0x0, 0x0, &(0x7f0000000380)=@keyring={'key_or_keyring:'}) [ 2677.953584][T18304] sctp: [Deprecated]: syz-executor.0 (pid 18304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2677.953584][T18304] Use struct sctp_sack_info instead 03:45:49 executing program 1: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0x5c) 03:45:50 executing program 4: ioprio_set$pid(0x0, 0x0, 0x0) 03:45:50 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x33fe0}}, 0x0) 03:45:50 executing program 2: bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) 03:45:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:45:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TCSETXW(r0, 0x5435, 0x0) 03:45:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x0, @empty}, @rc, @nl=@unspec}) 03:45:50 executing program 5: r0 = epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x5451, 0x0) 03:45:50 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x10d, 0x10, 0x0, &(0x7f0000000580)) 03:45:50 executing program 2: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x5e, 0x0}, 0x1) 03:45:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7, 0xef7, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 03:45:51 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20000114}}, 0x4081) 03:45:51 executing program 5: bpf$OBJ_GET_PROG(0xd, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 03:45:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_names}) 03:45:51 executing program 2: syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x1e, 0x40000028, r1, 0x0) 03:45:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x17, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private}], 0x10) 03:45:51 executing program 4: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 03:45:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000c00)) 03:45:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2001, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000300)) 03:45:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @nl=@unspec, @hci, @sco}) 03:45:52 executing program 0: r0 = socket(0x1, 0x80002, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x5) 03:45:52 executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x1b, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:52 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x22, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) 03:45:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$vga_arbiter(r0, 0x0, 0x0) 03:45:52 executing program 0: r0 = socket(0x25, 0x801, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:52 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0xfffffffb, 0x4) 03:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) io_uring_setup(0x7f97, &(0x7f0000000740)={0x0, 0x0, 0x4}) 03:45:52 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x83dfa2cbc578c055) 03:45:53 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x6, 0x3, 0x0, 0x0) 03:45:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000011c0)='I', 0x1, r0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, r1) 03:45:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 03:45:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8004ae98, &(0x7f0000003040)) 03:45:54 executing program 5: r0 = socket(0x28, 0x1, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 03:45:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 03:45:54 executing program 3: getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 03:45:54 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000243000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:45:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x13, 0x400000, 0x4) 03:45:54 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x1c, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:45:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) 03:45:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b62, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:54 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x18, 0x0, &(0x7f0000000580)) 03:45:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$minix(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) 03:45:54 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 03:45:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, 0x0, 0x0) 03:45:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private}}}, 0x84) 03:45:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000040)) 03:45:55 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) 03:45:55 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4020940d, 0x0) 03:45:55 executing program 0: r0 = socket(0x2a, 0x2, 0x0) getsockname(r0, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 03:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) select(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0xea60}) 03:45:55 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 03:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) pipe2$9p(0x0, 0x6000) 03:45:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) 03:45:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x300}}, 0x20) 03:45:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f00000010c0)) 03:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$minix(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f00000000c0)="10", 0x1, 0x80000001}], 0x0, 0x0) 03:45:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7, 0xef7, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x80000002, r0}, 0x38) 03:45:56 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x42c8e1ced4143f10) 03:45:56 executing program 1: prctl$PR_GET_TID_ADDRESS(0x3a, &(0x7f00000001c0)) 03:45:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7, 0xef7, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000002, r0}, 0x38) 03:45:56 executing program 3: r0 = socket(0x28, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0xd, 0x0, 0x4) 03:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}}, 0x0) 03:45:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 03:45:57 executing program 0: prctl$PR_GET_TID_ADDRESS(0x27, &(0x7f00000001c0)) 03:45:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:45:57 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) 03:45:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000051401"], 0x60}}, 0x0) 03:45:57 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0x541b, 0x531000) 03:45:57 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:45:58 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, 0x0, &(0x7f0000000580)) [ 2686.231802][T18495] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 03:45:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$vga_arbiter(r0, &(0x7f0000000080)=@target_default='target default\x00', 0xf) 03:45:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 03:45:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x22, 0x4f4000, 0x4) 03:45:58 executing program 1: setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x7ffffffff000) 03:45:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0xf, 0x0, 0x3) 03:45:58 executing program 0: socketpair(0x14, 0x0, 0x0, &(0x7f0000000000)) 03:45:58 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x0, @loopback}}) 03:45:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:45:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x30}}, 0x0) 03:45:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020ae76, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 03:45:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x7, 0x0, 0x0) 03:45:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 03:45:59 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xe, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5a214b92"}, 0x0, 0x0, @userptr}) 03:45:59 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x803e, &(0x7f0000000180)={0x0}, 0x8}, 0x0) 03:45:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 03:45:59 executing program 2: prctl$PR_GET_TID_ADDRESS(0x22, &(0x7f00000001c0)) 03:45:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) 03:45:59 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9201, 0x0) 03:45:59 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 03:46:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x107, 0x82, 0x0, 0x0) 03:46:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) 03:46:00 executing program 1: bpf$OBJ_GET_PROG(0xf, 0x0, 0x0) 03:46:00 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000580)) 03:46:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="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"}) 03:46:00 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227f, &(0x7f0000000140)) 03:46:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x100c0, 0x0) 03:46:00 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x20000044) 03:46:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x35, &(0x7f0000000040), 0x4) 03:46:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0481273, 0x0) 03:46:01 executing program 3: r0 = socket(0x2a, 0x2, 0x0) connect$rxrpc(r0, 0x0, 0x0) 03:46:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x44, 0x8084, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 03:46:01 executing program 4: socket(0x1e, 0x1, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0) 03:46:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) 03:46:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') lseek(r0, 0xc6ec, 0x0) read$alg(r0, 0x0, 0x0) 03:46:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400002, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000358000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 03:46:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x14) 03:46:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 03:46:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002100)={0x20, 0x0, r1}, 0x20) 03:46:01 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1, 0x6}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 03:46:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x31, 0x0, 0x0) 03:46:02 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:46:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 03:46:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x0, 0x0) read$char_raw(r1, 0x0, 0xfffffe03) 03:46:02 executing program 4: keyctl$KEYCTL_RESTRICT_KEYRING(0xa, 0x0, &(0x7f0000000340)='blacklist\x00', 0x0) 03:46:02 executing program 2: r0 = socket(0x1e, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1e, 0x4}, 0x2000004c, &(0x7f00000001c0)={0x0, 0x7c}, 0x8}, 0x0) 03:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x7d, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 03:46:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 03:46:02 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x2000) 03:46:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001680)='/dev/null\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 03:46:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 03:46:03 executing program 2: r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 03:46:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xf, &(0x7f0000000040), 0x4) 03:46:03 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0x0, "223a9c98226975da0e1bbfb7a9ea61cbb65aad693ea9c8ae646928b6bdf80759b91d40d2b722fd1d11b523141355f11dc12b770dfd99896ee859e759ed752b86883916435ba022def146c74c9f799d463b7b813bb25b95336a524326eef47bde9410186aba42466abad817e581caa882d4b3cf7d950fbcb40d2f58b592947bcd"}) 03:46:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 03:46:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 03:46:03 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @remote, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @end, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x38, 0x0, [{0x0, 0xf, "bcb3ef251fce0755d28288e5c4"}, {0x0, 0x11, "db11d1456927318cdcfb87f8206e8d"}, {0x0, 0x3, 'Y'}, {0x0, 0x5, "ad4271"}, {0x0, 0x8, "24c0360ea1b6"}, {0x0, 0x2}]}]}}}}}) 03:46:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x1e, 0x0, 0x0) 03:46:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 03:46:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x19, &(0x7f0000000080)={0x1}, 0x4) 03:46:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 03:46:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', @ifru_settings={0x48d4, 0x8, @sync=&(0x7f0000000000)={0xffffffff, 0x10001}}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000000c0)="2e000000120085aee4050cecff0e00fa078b25db4cb904e473730e0100000000040003005ae900005e510bef0b69", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 03:46:04 executing program 3: r0 = socket(0x21, 0x2, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x110, 0x5, 0x0, 0x4) 03:46:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40012360, 0x0, 0x0) 03:46:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0xd, 0x400000, 0x4) [ 2692.550581][T18664] device veth1_macvtap left promiscuous mode 03:46:04 executing program 0: ioperm(0x0, 0x1, 0x5) sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/97) 03:46:04 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xf0ff7f}}, 0x0) 03:46:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000680)='/dev/vcsu#\x00', 0x3, 0x2) write$FUSE_IOCTL(r0, 0x0, 0x0) 03:46:04 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={0x0}) 03:46:05 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3c, 0x0, &(0x7f0000000580)) 03:46:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x7c, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 03:46:05 executing program 5: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0x1b, &(0x7f00000001c0)={{{@in=@local, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 03:46:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x2a880) ioctl$MON_IOCX_GET(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0}) 03:46:05 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1000, 0x0) read$snddsp(r0, &(0x7f0000000180)=""/219, 0xdb) 03:46:05 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 03:46:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socketpair(0x23, 0x0, 0x6, &(0x7f0000000400)) 03:46:05 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none}, 0xa) 03:46:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000080)="742ea9b1f1f1766878ce0d7755a0ebc8d588960c8eb8b900"}) 03:46:05 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 03:46:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x11, 0x400000, 0x4) 03:46:06 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 03:46:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x14) 03:46:06 executing program 0: socketpair(0x10, 0x3, 0x7850, &(0x7f0000000000)) 03:46:06 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x20004040) 03:46:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000180)=0xcdac2216) 03:46:06 executing program 3: r0 = socket(0x1e, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x1e00}, 0x0) 03:46:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 03:46:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') read$alg(r0, &(0x7f0000001040)=""/213, 0xd5) read$alg(r0, &(0x7f0000000040)=""/4096, 0x1000) 03:46:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 03:46:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xfffffe52, 0xfa00, {0x0, &(0x7f0000000080)}}, 0xfffffffffffffc9a) 03:46:07 executing program 2: r0 = fanotify_init(0x0, 0x0) write$hidraw(r0, &(0x7f0000000080)="ea3345e74f926f44", 0x8) 03:46:07 executing program 3: r0 = syz_init_net_socket$x25(0x3, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 03:46:07 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) 03:46:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x1c}}, 0x0) 03:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x401, 0x4) 03:46:08 executing program 1: syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x15000c, &(0x7f00000003c0)=ANY=[]) 03:46:08 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0xa}, 0x17) 03:46:08 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x1b, 0x400000, 0x4) 03:46:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1ff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x800]) 03:46:08 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) 03:46:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0xc, 0x0, 0x0) 03:46:08 executing program 1: r0 = socket(0x29, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)='8', 0x1}}, 0xc011) sendmsg$can_j1939(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) 03:46:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0), 0x2) 03:46:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040)=0x201, 0x4) 03:46:09 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0x5460, 0x531000) 03:46:09 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 1: getresgid(&(0x7f0000000200), &(0x7f0000000240), 0x0) 03:46:09 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x29, 0x1, 0x0, 0x4) 03:46:09 executing program 0: r0 = socket(0x2, 0x6, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0xa}, 0xf) 03:46:09 executing program 3: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8001, 0x200440) 03:46:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0189436, &(0x7f0000000140)) 03:46:10 executing program 4: r0 = socket(0x1e, 0x80002, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 03:46:10 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x0, 0x917}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x7f}, &(0x7f00000002c0)) 03:46:10 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x3, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 03:46:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0x10}}) 03:46:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x17, &(0x7f00000000c0)=[@in={0x2, 0x0, @private}], 0x10) 03:46:10 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x8982, &(0x7f00000001c0)) 03:46:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@n={0x1, 0x0, @SEQ_NOTEON=@special}) 03:46:10 executing program 0: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 03:46:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5421, 0x0) 03:46:10 executing program 3: r0 = gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/242, 0xf2}], 0xdf, &(0x7f0000000280)=[{&(0x7f0000000240)=""/14, 0x2000000e}], 0x1, 0x0) 03:46:11 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0xe3524440c01cfca4) 03:46:11 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 03:46:11 executing program 0: r0 = socket(0x1, 0x80002, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 03:46:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x3, 0x0, @dev}, 0x10) 03:46:11 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x5452, &(0x7f00000001c0)) 03:46:11 executing program 2: r0 = socket(0x10, 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 03:46:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:46:11 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x88, 0x4, 0x0, 0x0) 03:46:11 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x400300}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc008561c, &(0x7f0000000d00)={0xf0f043, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0300"}}) 03:46:12 executing program 3: prctl$PR_MCE_KILL(0x8, 0xda, 0x0) 03:46:12 executing program 4: syz_mount_image$vfat(&(0x7f00000003c0)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000380)={[{@fat=@fmask={'fmask'}}]}) 03:46:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 03:46:12 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 03:46:12 executing program 1: r0 = socket(0x2, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000080), 0x18) 03:46:12 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x1e}, 0x10) 03:46:13 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$reject(0xf, r1, 0x0, 0x0, 0x0) [ 2701.310333][T18844] FAT-fs (loop4): bogus number of reserved sectors [ 2701.317377][T18844] FAT-fs (loop4): Can't find a valid FAT filesystem 03:46:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x7}]}) ioctl$KVM_SET_PIT(r1, 0xc008ae67, &(0x7f0000000100)) [ 2701.461447][T18844] FAT-fs (loop4): bogus number of reserved sectors [ 2701.468383][T18844] FAT-fs (loop4): Can't find a valid FAT filesystem 03:46:13 executing program 2: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 03:46:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) 03:46:13 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 03:46:13 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f00000005c0)={'gretap0\x00', 0x0}) 03:46:13 executing program 4: r0 = socket(0xa, 0x80005, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="f5", 0x1}], 0x1}, 0x0) 03:46:13 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x4, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:14 executing program 2: syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 03:46:14 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) write$dsp(r0, 0x0, 0x0) 03:46:14 executing program 1: r0 = socket(0x1d, 0x803, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x65, 0x4, 0x0, 0x0) 03:46:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc008561c, &(0x7f0000000d00)={0xf0f041, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0300"}}) 03:46:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0x8}]}]}, 0x24}}, 0x0) 03:46:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x1, 0x123, 0x7, 0x2001, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 2702.867000][T18896] vivid-000: disconnect [ 2702.884078][T18891] vivid-000: reconnect [ 2702.907050][T18897] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 03:46:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) [ 2703.000228][T18898] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 03:46:14 executing program 1: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x21, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 03:46:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 03:46:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280)=0x10) 03:46:15 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) 03:46:15 executing program 3: keyctl$KEYCTL_RESTRICT_KEYRING(0xe, 0x0, 0x0, 0x0) 03:46:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8915, &(0x7f00000002c0)={'gretap0\x00', 0x0}) 03:46:15 executing program 5: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x1e, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$dsp(r0, 0x0, 0x0) 03:46:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2272, &(0x7f0000000140)) 03:46:16 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f00000005c0)={'gretap0\x00', 0x0}) 03:46:16 executing program 0: process_vm_writev(0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1, 0x0) 03:46:16 executing program 1: ioperm(0x0, 0x7, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 03:46:16 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0) 03:46:16 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xf, 0xfa00, {0x0, 0x0}}, 0xfffffd56) 03:46:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xb, &(0x7f0000000040), 0x4) 03:46:16 executing program 2: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0xfffffdef}}, 0x0) 03:46:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5460, &(0x7f0000000140)) 03:46:16 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x2, 0x4) 03:46:16 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x14, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b31, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:46:17 executing program 2: bpf$MAP_CREATE(0x11, 0x0, 0x0) 03:46:17 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8560d433ddfe85b1559fbcd74ba69647837179"}) 03:46:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4004ae8b, &(0x7f0000003040)) 03:46:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x9d80}, 0x8}, 0x0) 03:46:17 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0xffffffffffffff49}}, 0x0) 03:46:18 executing program 5: pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0), 0x0, 0x8) 03:46:18 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x20000048) 03:46:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x24, &(0x7f0000000080)={0x1}, 0x4) 03:46:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f00000003c0)=@rc={0x1f, @none}, 0x80, 0x0}, 0x0) 03:46:18 executing program 3: r0 = syz_init_net_socket$x25(0x3, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x84, 0x0, 0x0) 03:46:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 03:46:18 executing program 2: r0 = socket(0x1d, 0x803, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x65, 0x5, 0x0, 0x0) 03:46:18 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="b4", 0x1, 0x0, 0x0, 0x0) 03:46:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x8}, 0x9c) 03:46:18 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0xc0400) 03:46:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000007c0)='6', 0x1, 0xbb8, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 03:46:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000140)) 03:46:19 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 03:46:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x100}, 0x8) 03:46:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 03:46:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000004b80), &(0x7f0000004c00)=0x80) 03:46:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4010ae68, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 03:46:19 executing program 4: r0 = socket(0xa, 0x6, 0x0) read$proc_mixer(r0, 0x0, 0x0) 03:46:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 03:46:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 2708.128812][ T28] audit: type=1400 audit(1599363979.920:83): avc: denied { read } for pid=19007 comm="syz-executor.4" path="socket:[157891]" dev="sockfs" ino=157891 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 03:46:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x309, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 03:46:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x1e, 0x400000, 0x4) 03:46:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0x10}}) 03:46:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket(0xa, 0x6, 0x0) connect$caif(r1, &(0x7f0000000000)=@dbg={0xa}, 0x18) 03:46:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001a80)=0x20, 0x4) 03:46:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0x10}}) 03:46:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$alg(r0, &(0x7f0000000580)=""/223, 0xdf) 03:46:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') lseek(r0, 0xf85f, 0x0) read$alg(r0, 0x0, 0x0) 03:46:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) 03:46:20 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000100)) 03:46:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) 03:46:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) pkey_mprotect(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 03:46:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400002, 0x0, 0xffffffffffffffff) 03:46:21 executing program 5: r0 = socket(0x2, 0xa, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 03:46:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f000000bbc0)={0x0, 0x0, &(0x7f000000bb80)={&(0x7f0000009500)=@delchain={0x24, 0x65, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x9}}}, 0x24}}, 0x0) 03:46:21 executing program 4: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000022c0)="ac", 0x1}], 0x1}}], 0x1, 0x0) 03:46:21 executing program 2: r0 = socket(0x1e, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x2, 0x0, 0x4) 03:46:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x1, 0x400000, 0x4) 03:46:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2e, &(0x7f0000000080)={0x1}, 0x4) 03:46:22 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82, 0x0) 03:46:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000040)={'gre0\x00', 0x0}) 03:46:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006a000)={0x0, [], 0xfb, "0893759cf8ea81"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0x10, 0x100}}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 03:46:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x12, &(0x7f00000001c0)={@loopback, @local, @loopback}, 0xc) 03:46:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) rt_sigprocmask(0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x8) 03:46:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x33, &(0x7f0000000040), 0x4) 03:46:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x541b, 0x0) 03:46:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4018aebd, &(0x7f0000000100)={[{0x0, 0x0, 0xff}]}) 03:46:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x19, 0x400000, 0x4) 03:46:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:46:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0x10}}) 03:46:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200440) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 03:46:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x24, 0x400000, 0x4) 03:46:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 03:46:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:46:24 executing program 4: bpf$OBJ_GET_PROG(0x22, 0x0, 0x0) 03:46:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f00000001c0)={@loopback, @local, @loopback}, 0xc) 03:46:24 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 03:46:24 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x17, 0x0, &(0x7f0000000580)) 03:46:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) [ 2712.890185][T19124] ucma_write: process 5492 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 03:46:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7, 0xef7, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000002, r0}, 0x38) 03:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) socket(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x8953, 0x0) 03:46:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0xae71, &(0x7f0000000180)) 03:46:24 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x40011) 03:46:24 executing program 1: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0x8, &(0x7f00000001c0)={{{@in=@local, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 03:46:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 03:46:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) 03:46:25 executing program 0: r0 = socket(0x25, 0x5, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 03:46:25 executing program 3: r0 = socket(0x23, 0x5, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) 03:46:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 03:46:25 executing program 5: prctl$PR_GET_TID_ADDRESS(0x3, 0x0) 03:46:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:46:26 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10001}, 0x18) 03:46:26 executing program 0: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@mcast2}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) 03:46:26 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0f85403, &(0x7f00000000c0)) 03:46:26 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x0) 03:46:26 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/slabinfo\x00', 0x0, 0x0) 03:46:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x890d, 0x0) 03:46:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_mtu}) 03:46:26 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x541b, 0x0) 03:46:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x1c, r1, 0xb452b05a1d5e73c3, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0xfcac}]}, 0x1c}}, 0x0) 03:46:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x2e) 03:46:27 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) getresuid(&(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 03:46:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x8, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT, @FOU_ATTR_PEER_V6={0x0, 0x9, @remote}]}, 0x30}}, 0x0) 03:46:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x13, r1, 0x82000000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000080)) [ 2715.453259][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2715.534794][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:46:27 executing program 4: r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) 03:46:27 executing program 5: r0 = socket(0x2a, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 03:46:27 executing program 3: r0 = socket(0x23, 0x5, 0x0) connect$can_j1939(r0, 0x0, 0x0) 03:46:27 executing program 2: openat$vcsu(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 03:46:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x2a880) ioctl$MON_IOCX_GET(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0}) 03:46:28 executing program 4: r0 = socket(0xa, 0x3, 0x6) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x1fc}}, 0x0) 03:46:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8040ae9f, &(0x7f0000003040)) 03:46:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000019c0)=ANY=[], 0x24}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x541b, &(0x7f0000000100)={0x0, @in={0x2, 0x0, @local}, @l2tp={0x2, 0x0, @local}, @vsock={0x28, 0x0, 0x0, @my=0x0}}) 03:46:28 executing program 5: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0xc, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:28 executing program 3: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0x8, &(0x7f00000001c0)={{{@in6=@empty, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 03:46:28 executing program 1: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 03:46:28 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x38, 0x0, &(0x7f0000000580)) 03:46:28 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000140)) 03:46:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x10) 03:46:28 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @local}, 0x10) 03:46:29 executing program 1: r0 = socket(0x21, 0x2, 0x2) recvmsg$can_j1939(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x3f3729d97eb4bcc4) 03:46:29 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) 03:46:29 executing program 4: r0 = socket(0x2b, 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 03:46:29 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)='8', 0x1}}, 0x0) sendmsg$can_j1939(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)="d2", 0x1}}, 0x0) 03:46:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1e, 0x4}, 0x2000004c, &(0x7f00000001c0)={0x0, 0x7c}}, 0x0) 03:46:29 executing program 1: bpf$MAP_LOOKUP_BATCH(0xa, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000}, 0x38) 03:46:29 executing program 5: socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 03:46:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 03:46:29 executing program 2: r0 = socket(0x2b, 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) 03:46:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b45, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "258299a1c2ea9e8d"}) 03:46:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x10) 03:46:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x6, 0x4, 0x400000, 0x4) 03:46:30 executing program 5: r0 = socket(0xa, 0x80005, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0) 03:46:30 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:46:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 03:46:30 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 03:46:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 03:46:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 03:46:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x2, 0x0, 0x0) 03:46:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 03:46:31 executing program 2: fanotify_init(0x0, 0x0) select(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xea60}) 03:46:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="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"}) 03:46:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) [ 2719.709240][T19292] sctp: [Deprecated]: syz-executor.5 (pid 19292) Use of int in maxseg socket option. [ 2719.709240][T19292] Use struct sctp_assoc_value instead 03:46:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000980)=""/252, 0xfc}], 0x4, &(0x7f0000000640)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000880)=""/243, 0xf3}], 0x3, 0x0) 03:46:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0x10}}) 03:46:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 03:46:31 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0xffff3f00) 03:46:31 executing program 0: syz_mount_image$exfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x18, 0x0, 0x0) 03:46:32 executing program 3: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)) 03:46:32 executing program 4: prctl$PR_GET_TID_ADDRESS(0x34, 0x0) 03:46:32 executing program 2: r0 = socket(0x2, 0x3, 0xff) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x200488d0, 0x0, 0x0) 03:46:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x2, 0x0) 03:46:32 executing program 0: r0 = socket(0x1e, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1e, 0x4}, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:46:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x181601) write$char_raw(r1, &(0x7f0000000600)={'u'}, 0x200) 03:46:32 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) bpf$OBJ_GET_PROG(0x16, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x71) 03:46:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002020300000000000000000007000005090002"], 0x60}}, 0x0) 03:46:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:46:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x181601) write$char_raw(0xffffffffffffffff, 0x0, 0x20001200) write$char_raw(r1, &(0x7f0000010e00)=ANY=[], 0x200) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$char_raw(r1, &(0x7f0000000600)={'u'}, 0x200) 03:46:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x13, r1, 0x81000000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)) 03:46:33 executing program 1: r0 = socket(0x1, 0x80002, 0x0) sendmsg$qrtr(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10}, 0x38) 03:46:33 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0x541b, 0x0) [ 2721.504820][T19333] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2721.514338][T19333] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 03:46:33 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYBLOB], 0x208e24b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 03:46:33 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 03:46:33 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x0) dup3(r1, r0, 0x0) 03:46:33 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "b467fd95f9454fa1e9a3923e29e1c76e69cb63aa898dadad30470a80e670e6a49a4c0b2baa6a03d1597c1950455f659d530e745ae9209cbc305963c5dcc06d"}, 0x60, &(0x7f0000000080)=[{&(0x7f0000000180)="08b5bb6c60b20d0da105d4e6447e821dd8203f", 0x13}], 0x1}, 0x0) 03:46:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0x10}}) 03:46:34 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 2722.324160][T19353] serio: Serial port pts0 03:46:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 03:46:34 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x0) dup3(r1, r0, 0x0) 03:46:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="002000000000005d564c90c200"/24, 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:46:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000b0800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468305f766972748fda6966690008001b"], 0x3c}}, 0x0) 03:46:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb9ac0955dae950402d8b4ac000000a0", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f9", 0xc}], 0x2}, 0x8dffffff}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:46:34 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000000400080000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 2723.270130][T19380] serio: Serial port pts0 [ 2724.033516][T19382] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 2724.044859][T19382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2724.062405][T19382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2724.070439][T19382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2724.223617][T19410] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 2724.235276][T19410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2724.252893][T19410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2724.262217][T19410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:46:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, 0x0, 0x4000) 03:46:36 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYBLOB], 0x208e24b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 03:46:36 executing program 3: 03:46:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6c840486}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:46:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="002000000000005d564c90c200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:46:36 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 03:46:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/151, 0x97}], 0x1, 0x34, 0x0) 03:46:37 executing program 1: 03:46:37 executing program 4: 03:46:37 executing program 2: 03:46:37 executing program 5: 03:46:38 executing program 1: 03:46:38 executing program 3: 03:46:39 executing program 0: 03:46:39 executing program 4: 03:46:39 executing program 2: 03:46:39 executing program 5: 03:46:39 executing program 1: 03:46:39 executing program 3: 03:46:39 executing program 5: 03:46:39 executing program 2: 03:46:39 executing program 3: 03:46:39 executing program 1: 03:46:39 executing program 4: 03:46:39 executing program 0: 03:46:39 executing program 5: 03:46:39 executing program 2: 03:46:40 executing program 3: 03:46:40 executing program 1: 03:46:40 executing program 4: 03:46:40 executing program 0: 03:46:40 executing program 5: 03:46:40 executing program 3: 03:46:40 executing program 2: 03:46:40 executing program 1: 03:46:40 executing program 0: 03:46:40 executing program 4: 03:46:41 executing program 5: 03:46:41 executing program 3: 03:46:41 executing program 2: 03:46:41 executing program 0: 03:46:41 executing program 1: 03:46:41 executing program 4: 03:46:41 executing program 5: 03:46:41 executing program 3: 03:46:41 executing program 2: 03:46:41 executing program 0: 03:46:41 executing program 1: 03:46:41 executing program 4: 03:46:42 executing program 5: 03:46:42 executing program 3: 03:46:42 executing program 0: 03:46:42 executing program 2: 03:46:42 executing program 4: 03:46:42 executing program 1: 03:46:42 executing program 5: 03:46:42 executing program 3: 03:46:42 executing program 0: 03:46:42 executing program 2: 03:46:42 executing program 4: 03:46:43 executing program 5: 03:46:43 executing program 1: 03:46:43 executing program 3: 03:46:43 executing program 2: 03:46:43 executing program 0: 03:46:43 executing program 4: 03:46:43 executing program 5: 03:46:43 executing program 1: 03:46:43 executing program 0: 03:46:43 executing program 3: 03:46:43 executing program 2: 03:46:43 executing program 4: 03:46:44 executing program 5: 03:46:44 executing program 1: 03:46:44 executing program 0: 03:46:44 executing program 3: 03:46:44 executing program 2: 03:46:44 executing program 4: 03:46:44 executing program 0: 03:46:44 executing program 5: 03:46:44 executing program 1: 03:46:44 executing program 3: 03:46:44 executing program 2: 03:46:45 executing program 0: 03:46:45 executing program 4: 03:46:45 executing program 5: 03:46:45 executing program 1: 03:46:45 executing program 3: 03:46:45 executing program 2: 03:46:45 executing program 0: 03:46:45 executing program 4: 03:46:45 executing program 5: 03:46:45 executing program 1: 03:46:46 executing program 2: 03:46:46 executing program 0: 03:46:46 executing program 3: 03:46:46 executing program 4: 03:46:46 executing program 5: 03:46:46 executing program 1: 03:46:46 executing program 2: 03:46:46 executing program 0: 03:46:46 executing program 3: 03:46:46 executing program 4: 03:46:46 executing program 5: 03:46:47 executing program 2: 03:46:47 executing program 1: 03:46:47 executing program 3: 03:46:47 executing program 0: 03:46:47 executing program 4: 03:46:47 executing program 5: 03:46:47 executing program 2: 03:46:47 executing program 1: 03:46:47 executing program 3: 03:46:47 executing program 0: 03:46:47 executing program 5: 03:46:48 executing program 2: 03:46:48 executing program 3: 03:46:48 executing program 1: 03:46:48 executing program 0: 03:46:48 executing program 5: 03:46:49 executing program 4: 03:46:49 executing program 2: 03:46:49 executing program 1: 03:46:49 executing program 3: 03:46:49 executing program 0: 03:46:49 executing program 5: 03:46:49 executing program 0: 03:46:49 executing program 2: 03:46:49 executing program 1: 03:46:49 executing program 5: 03:46:49 executing program 3: 03:46:49 executing program 4: 03:46:49 executing program 2: 03:46:49 executing program 0: 03:46:49 executing program 1: 03:46:50 executing program 5: 03:46:50 executing program 4: 03:46:50 executing program 3: 03:46:50 executing program 2: 03:46:50 executing program 0: 03:46:50 executing program 1: 03:46:50 executing program 5: 03:46:50 executing program 4: 03:46:50 executing program 3: 03:46:50 executing program 0: 03:46:50 executing program 2: 03:46:50 executing program 1: 03:46:51 executing program 5: 03:46:51 executing program 4: 03:46:51 executing program 3: 03:46:51 executing program 0: 03:46:51 executing program 2: 03:46:51 executing program 1: 03:46:51 executing program 4: 03:46:51 executing program 5: 03:46:51 executing program 3: 03:46:51 executing program 0: 03:46:51 executing program 2: 03:46:52 executing program 1: 03:46:52 executing program 4: 03:46:52 executing program 5: 03:46:52 executing program 3: 03:46:52 executing program 0: 03:46:52 executing program 2: 03:46:52 executing program 1: 03:46:52 executing program 4: 03:46:52 executing program 5: 03:46:52 executing program 3: 03:46:52 executing program 2: 03:46:52 executing program 0: 03:46:53 executing program 1: 03:46:53 executing program 4: 03:46:53 executing program 5: 03:46:53 executing program 3: 03:46:53 executing program 2: 03:46:53 executing program 0: 03:46:53 executing program 1: 03:46:53 executing program 4: 03:46:54 executing program 5: 03:46:54 executing program 3: 03:46:54 executing program 0: 03:46:54 executing program 2: 03:46:54 executing program 4: 03:46:54 executing program 1: 03:46:54 executing program 5: 03:46:54 executing program 3: 03:46:54 executing program 0: 03:46:54 executing program 2: 03:46:54 executing program 4: 03:46:54 executing program 1: 03:46:55 executing program 5: 03:46:55 executing program 0: 03:46:55 executing program 3: 03:46:55 executing program 2: 03:46:55 executing program 1: 03:46:55 executing program 4: 03:46:55 executing program 5: 03:46:55 executing program 0: 03:46:55 executing program 3: 03:46:55 executing program 1: 03:46:55 executing program 2: 03:46:55 executing program 4: 03:46:56 executing program 0: 03:46:56 executing program 3: 03:46:56 executing program 5: 03:46:56 executing program 2: 03:46:56 executing program 4: 03:46:56 executing program 1: 03:46:56 executing program 0: 03:46:56 executing program 3: 03:46:56 executing program 5: 03:46:56 executing program 1: 03:46:57 executing program 4: 03:46:57 executing program 2: 03:46:57 executing program 0: 03:46:57 executing program 3: 03:46:57 executing program 5: 03:46:57 executing program 4: 03:46:57 executing program 2: 03:46:57 executing program 1: 03:46:57 executing program 0: 03:46:57 executing program 3: 03:46:57 executing program 5: 03:46:58 executing program 1: 03:46:58 executing program 4: 03:46:58 executing program 2: 03:46:58 executing program 0: 03:46:58 executing program 3: 03:46:58 executing program 5: 03:46:58 executing program 4: 03:46:58 executing program 1: 03:46:58 executing program 2: 03:46:58 executing program 0: 03:46:59 executing program 5: 03:46:59 executing program 3: 03:46:59 executing program 4: 03:46:59 executing program 1: 03:46:59 executing program 2: 03:46:59 executing program 0: 03:46:59 executing program 3: 03:46:59 executing program 4: 03:46:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}}, 0x0) 03:46:59 executing program 1: 03:46:59 executing program 0: 03:47:00 executing program 2: 03:47:00 executing program 3: 03:47:00 executing program 4: 03:47:00 executing program 5: 03:47:00 executing program 1: 03:47:00 executing program 0: 03:47:00 executing program 2: 03:47:00 executing program 3: 03:47:00 executing program 4: 03:47:00 executing program 5: 03:47:01 executing program 1: 03:47:01 executing program 0: 03:47:01 executing program 2: 03:47:01 executing program 3: 03:47:01 executing program 4: 03:47:01 executing program 5: 03:47:01 executing program 1: 03:47:01 executing program 0: 03:47:01 executing program 3: 03:47:01 executing program 2: 03:47:01 executing program 4: 03:47:01 executing program 5: 03:47:02 executing program 1: 03:47:02 executing program 0: 03:47:02 executing program 3: 03:47:02 executing program 2: 03:47:02 executing program 4: 03:47:02 executing program 5: 03:47:02 executing program 1: 03:47:02 executing program 0: 03:47:02 executing program 2: 03:47:02 executing program 3: 03:47:02 executing program 4: 03:47:02 executing program 5: 03:47:03 executing program 1: 03:47:03 executing program 2: 03:47:03 executing program 0: 03:47:03 executing program 3: 03:47:03 executing program 5: 03:47:03 executing program 4: 03:47:03 executing program 1: 03:47:03 executing program 2: 03:47:03 executing program 0: 03:47:03 executing program 5: 03:47:03 executing program 3: 03:47:03 executing program 1: 03:47:04 executing program 4: 03:47:04 executing program 2: 03:47:04 executing program 0: 03:47:04 executing program 5: 03:47:04 executing program 3: 03:47:04 executing program 1: 03:47:04 executing program 4: 03:47:05 executing program 0: 03:47:05 executing program 5: 03:47:05 executing program 2: 03:47:05 executing program 3: 03:47:05 executing program 4: 03:47:05 executing program 1: 03:47:05 executing program 0: 03:47:05 executing program 2: 03:47:05 executing program 5: 03:47:05 executing program 4: 03:47:06 executing program 3: 03:47:06 executing program 1: 03:47:06 executing program 2: 03:47:06 executing program 4: 03:47:06 executing program 0: 03:47:06 executing program 5: 03:47:06 executing program 3: 03:47:06 executing program 1: 03:47:06 executing program 4: 03:47:06 executing program 2: 03:47:07 executing program 0: 03:47:07 executing program 5: 03:47:07 executing program 3: 03:47:07 executing program 1: 03:47:07 executing program 4: 03:47:07 executing program 0: 03:47:07 executing program 2: 03:47:07 executing program 5: 03:47:07 executing program 3: 03:47:07 executing program 1: 03:47:07 executing program 4: 03:47:08 executing program 0: 03:47:08 executing program 5: 03:47:08 executing program 2: 03:47:08 executing program 3: 03:47:08 executing program 1: 03:47:08 executing program 4: 03:47:08 executing program 0: 03:47:08 executing program 5: 03:47:08 executing program 3: 03:47:08 executing program 2: 03:47:08 executing program 1: 03:47:09 executing program 4: 03:47:09 executing program 0: 03:47:09 executing program 5: 03:47:09 executing program 2: 03:47:09 executing program 3: 03:47:09 executing program 1: 03:47:09 executing program 4: 03:47:09 executing program 0: 03:47:09 executing program 2: 03:47:09 executing program 5: 03:47:10 executing program 3: 03:47:10 executing program 1: 03:47:10 executing program 0: 03:47:10 executing program 4: 03:47:10 executing program 5: 03:47:10 executing program 2: 03:47:10 executing program 1: 03:47:10 executing program 3: 03:47:10 executing program 0: 03:47:10 executing program 4: 03:47:11 executing program 5: 03:47:11 executing program 2: 03:47:11 executing program 1: 03:47:11 executing program 0: 03:47:11 executing program 3: 03:47:11 executing program 4: 03:47:11 executing program 2: 03:47:11 executing program 5: 03:47:11 executing program 1: 03:47:11 executing program 0: 03:47:11 executing program 3: 03:47:11 executing program 4: 03:47:12 executing program 1: 03:47:12 executing program 2: 03:47:12 executing program 5: 03:47:12 executing program 0: 03:47:12 executing program 4: 03:47:12 executing program 3: 03:47:12 executing program 1: 03:47:13 executing program 2: 03:47:13 executing program 5: 03:47:13 executing program 0: 03:47:13 executing program 4: 03:47:13 executing program 3: 03:47:13 executing program 1: 03:47:13 executing program 2: 03:47:14 executing program 0: 03:47:14 executing program 5: 03:47:14 executing program 3: 03:47:14 executing program 4: 03:47:14 executing program 1: 03:47:14 executing program 2: 03:47:14 executing program 0: 03:47:14 executing program 5: 03:47:14 executing program 4: 03:47:14 executing program 3: 03:47:15 executing program 1: 03:47:15 executing program 2: 03:47:15 executing program 0: 03:47:15 executing program 4: 03:47:15 executing program 5: 03:47:15 executing program 3: 03:47:15 executing program 1: 03:47:15 executing program 0: 03:47:15 executing program 2: 03:47:15 executing program 4: 03:47:15 executing program 5: 03:47:16 executing program 1: 03:47:16 executing program 3: 03:47:16 executing program 0: 03:47:16 executing program 2: 03:47:16 executing program 4: 03:47:16 executing program 5: 03:47:16 executing program 3: 03:47:16 executing program 1: 03:47:16 executing program 0: 03:47:16 executing program 2: 03:47:16 executing program 4: 03:47:17 executing program 5: 03:47:17 executing program 3: 03:47:17 executing program 1: 03:47:17 executing program 0: 03:47:17 executing program 2: 03:47:17 executing program 4: 03:47:17 executing program 5: 03:47:17 executing program 3: 03:47:17 executing program 0: 03:47:17 executing program 1: 03:47:17 executing program 2: 03:47:18 executing program 4: 03:47:18 executing program 5: 03:47:18 executing program 0: 03:47:18 executing program 3: 03:47:18 executing program 1: 03:47:18 executing program 2: 03:47:18 executing program 4: 03:47:18 executing program 5: 03:47:18 executing program 3: 03:47:19 executing program 1: 03:47:19 executing program 2: 03:47:19 executing program 0: 03:47:19 executing program 4: 03:47:19 executing program 5: 03:47:19 executing program 3: 03:47:19 executing program 1: 03:47:19 executing program 0: 03:47:19 executing program 2: 03:47:19 executing program 4: 03:47:19 executing program 5: 03:47:19 executing program 3: 03:47:20 executing program 0: 03:47:20 executing program 1: 03:47:20 executing program 2: 03:47:20 executing program 4: 03:47:20 executing program 5: 03:47:20 executing program 3: 03:47:20 executing program 0: 03:47:20 executing program 1: 03:47:20 executing program 2: 03:47:20 executing program 4: 03:47:20 executing program 5: 03:47:21 executing program 3: 03:47:21 executing program 0: 03:47:21 executing program 2: 03:47:21 executing program 1: 03:47:21 executing program 5: 03:47:21 executing program 4: 03:47:21 executing program 3: 03:47:21 executing program 0: 03:47:21 executing program 2: 03:47:21 executing program 1: 03:47:21 executing program 4: 03:47:22 executing program 5: 03:47:22 executing program 3: 03:47:22 executing program 0: 03:47:22 executing program 2: 03:47:22 executing program 4: 03:47:22 executing program 1: 03:47:22 executing program 5: 03:47:22 executing program 3: 03:47:22 executing program 0: 03:47:23 executing program 4: 03:47:23 executing program 1: 03:47:23 executing program 5: 03:47:23 executing program 0: 03:47:23 executing program 3: 03:47:23 executing program 2: 03:47:24 executing program 4: 03:47:24 executing program 1: 03:47:24 executing program 0: 03:47:24 executing program 3: 03:47:24 executing program 2: 03:47:24 executing program 5: 03:47:24 executing program 4: 03:47:24 executing program 0: 03:47:25 executing program 1: 03:47:25 executing program 3: 03:47:25 executing program 2: 03:47:25 executing program 5: 03:47:25 executing program 4: 03:47:25 executing program 0: 03:47:25 executing program 1: 03:47:25 executing program 2: 03:47:26 executing program 3: 03:47:26 executing program 5: 03:47:26 executing program 0: 03:47:26 executing program 4: 03:47:26 executing program 1: 03:47:26 executing program 2: 03:47:26 executing program 3: 03:47:26 executing program 5: 03:47:26 executing program 0: 03:47:26 executing program 4: 03:47:26 executing program 3: 03:47:26 executing program 1: 03:47:27 executing program 2: 03:47:27 executing program 5: 03:47:27 executing program 4: 03:47:27 executing program 0: 03:47:27 executing program 1: 03:47:27 executing program 3: 03:47:28 executing program 2: 03:47:28 executing program 5: 03:47:28 executing program 0: 03:47:28 executing program 4: 03:47:28 executing program 1: 03:47:28 executing program 3: 03:47:28 executing program 2: 03:47:28 executing program 5: 03:47:28 executing program 0: 03:47:29 executing program 4: 03:47:29 executing program 1: 03:47:29 executing program 3: 03:47:29 executing program 2: 03:47:29 executing program 0: 03:47:29 executing program 5: 03:47:29 executing program 4: 03:47:29 executing program 1: 03:47:29 executing program 2: 03:47:29 executing program 0: 03:47:29 executing program 3: 03:47:30 executing program 5: 03:47:30 executing program 4: 03:47:30 executing program 2: 03:47:30 executing program 1: 03:47:30 executing program 0: 03:47:30 executing program 5: 03:47:30 executing program 3: 03:47:30 executing program 4: 03:47:31 executing program 1: 03:47:31 executing program 2: 03:47:31 executing program 0: 03:47:31 executing program 5: 03:47:31 executing program 4: 03:47:31 executing program 3: 03:47:31 executing program 1: 03:47:31 executing program 2: 03:47:31 executing program 0: 03:47:31 executing program 5: 03:47:32 executing program 3: 03:47:32 executing program 4: 03:47:32 executing program 1: 03:47:32 executing program 2: 03:47:32 executing program 0: 03:47:32 executing program 5: 03:47:32 executing program 3: 03:47:32 executing program 4: 03:47:32 executing program 1: 03:47:33 executing program 0: 03:47:33 executing program 3: 03:47:33 executing program 2: 03:47:33 executing program 5: 03:47:33 executing program 1: 03:47:33 executing program 4: 03:47:33 executing program 0: 03:47:33 executing program 3: 03:47:33 executing program 2: 03:47:33 executing program 1: 03:47:33 executing program 4: 03:47:34 executing program 5: 03:47:34 executing program 0: 03:47:34 executing program 3: 03:47:34 executing program 2: 03:47:34 executing program 1: 03:47:34 executing program 4: 03:47:34 executing program 0: 03:47:34 executing program 5: 03:47:35 executing program 3: 03:47:35 executing program 2: 03:47:35 executing program 1: 03:47:35 executing program 4: 03:47:35 executing program 0: 03:47:35 executing program 5: 03:47:35 executing program 1: 03:47:35 executing program 4: 03:47:35 executing program 2: 03:47:35 executing program 3: 03:47:35 executing program 5: 03:47:35 executing program 0: 03:47:36 executing program 2: 03:47:36 executing program 1: 03:47:36 executing program 4: 03:47:36 executing program 3: 03:47:36 executing program 0: 03:47:36 executing program 5: 03:47:36 executing program 1: 03:47:36 executing program 2: 03:47:37 executing program 4: 03:47:37 executing program 3: 03:47:37 executing program 0: 03:47:37 executing program 5: 03:47:37 executing program 2: 03:47:37 executing program 4: 03:47:37 executing program 0: 03:47:37 executing program 1: 03:47:37 executing program 3: 03:47:37 executing program 5: 03:47:37 executing program 2: 03:47:38 executing program 4: 03:47:38 executing program 3: 03:47:38 executing program 0: 03:47:38 executing program 1: 03:47:38 executing program 2: 03:47:38 executing program 5: 03:47:38 executing program 4: 03:47:38 executing program 0: 03:47:38 executing program 3: 03:47:38 executing program 1: 03:47:39 executing program 2: 03:47:39 executing program 5: 03:47:39 executing program 4: 03:47:39 executing program 0: 03:47:39 executing program 3: 03:47:39 executing program 1: 03:47:39 executing program 2: 03:47:39 executing program 5: 03:47:40 executing program 0: 03:47:40 executing program 4: 03:47:40 executing program 1: 03:47:40 executing program 3: 03:47:40 executing program 5: 03:47:40 executing program 2: 03:47:40 executing program 0: 03:47:40 executing program 4: 03:47:40 executing program 1: 03:47:40 executing program 3: 03:47:40 executing program 5: 03:47:40 executing program 2: 03:47:41 executing program 0: 03:47:41 executing program 4: 03:47:41 executing program 1: 03:47:41 executing program 3: 03:47:41 executing program 2: 03:47:41 executing program 5: 03:47:41 executing program 0: 03:47:41 executing program 4: 03:47:41 executing program 1: 03:47:41 executing program 3: 03:47:42 executing program 2: 03:47:42 executing program 5: 03:47:42 executing program 0: 03:47:42 executing program 4: 03:47:42 executing program 1: 03:47:42 executing program 0: 03:47:43 executing program 2: 03:47:43 executing program 5: 03:47:43 executing program 3: 03:47:43 executing program 4: 03:47:43 executing program 0: 03:47:43 executing program 1: 03:47:43 executing program 2: 03:47:43 executing program 4: 03:47:43 executing program 5: 03:47:43 executing program 3: 03:47:43 executing program 1: 03:47:44 executing program 0: 03:47:44 executing program 2: 03:47:44 executing program 3: 03:47:44 executing program 4: 03:47:44 executing program 5: 03:47:44 executing program 1: 03:47:44 executing program 0: 03:47:44 executing program 2: 03:47:44 executing program 4: 03:47:44 executing program 3: 03:47:44 executing program 5: 03:47:45 executing program 1: 03:47:45 executing program 0: 03:47:45 executing program 2: 03:47:45 executing program 4: 03:47:45 executing program 3: 03:47:45 executing program 5: 03:47:45 executing program 0: 03:47:45 executing program 4: 03:47:45 executing program 1: 03:47:45 executing program 2: 03:47:46 executing program 3: 03:47:46 executing program 5: 03:47:46 executing program 0: 03:47:46 executing program 1: 03:47:46 executing program 4: 03:47:46 executing program 2: 03:47:46 executing program 3: 03:47:46 executing program 5: 03:47:46 executing program 0: 03:47:46 executing program 1: 03:47:46 executing program 4: 03:47:46 executing program 2: 03:47:47 executing program 3: 03:47:47 executing program 5: 03:47:47 executing program 0: 03:47:47 executing program 4: 03:47:47 executing program 1: 03:47:47 executing program 2: 03:47:47 executing program 3: 03:47:47 executing program 5: 03:47:47 executing program 0: 03:47:47 executing program 1: 03:47:47 executing program 4: 03:47:48 executing program 2: 03:47:48 executing program 0: 03:47:48 executing program 3: 03:47:48 executing program 5: 03:47:48 executing program 4: 03:47:48 executing program 1: 03:47:48 executing program 2: 03:47:48 executing program 0: 03:47:48 executing program 5: 03:47:48 executing program 3: 03:47:48 executing program 4: 03:47:48 executing program 1: 03:47:49 executing program 5: 03:47:49 executing program 2: 03:47:49 executing program 0: 03:47:49 executing program 4: 03:47:49 executing program 3: 03:47:49 executing program 1: 03:47:49 executing program 2: 03:47:49 executing program 5: 03:47:49 executing program 0: 03:47:50 executing program 4: 03:47:50 executing program 3: 03:47:50 executing program 1: 03:47:50 executing program 2: 03:47:50 executing program 5: 03:47:50 executing program 0: 03:47:50 executing program 4: 03:47:50 executing program 3: 03:47:50 executing program 2: 03:47:50 executing program 1: 03:47:50 executing program 5: 03:47:50 executing program 0: 03:47:51 executing program 4: 03:47:51 executing program 3: 03:47:51 executing program 2: 03:47:51 executing program 5: 03:47:51 executing program 1: 03:47:51 executing program 0: 03:47:51 executing program 4: 03:47:51 executing program 3: 03:47:51 executing program 2: 03:47:51 executing program 5: 03:47:52 executing program 1: 03:47:52 executing program 0: 03:47:52 executing program 4: 03:47:52 executing program 3: 03:47:52 executing program 2: 03:47:52 executing program 5: 03:47:52 executing program 1: 03:47:52 executing program 0: 03:47:52 executing program 4: 03:47:52 executing program 3: 03:47:52 executing program 2: 03:47:53 executing program 1: 03:47:53 executing program 5: 03:47:53 executing program 0: 03:47:53 executing program 4: 03:47:53 executing program 2: 03:47:53 executing program 3: 03:47:53 executing program 1: 03:47:53 executing program 0: 03:47:53 executing program 5: 03:47:53 executing program 4: 03:47:54 executing program 2: 03:47:54 executing program 1: 03:47:54 executing program 0: 03:47:54 executing program 3: 03:47:54 executing program 5: 03:47:54 executing program 4: 03:47:54 executing program 2: 03:47:54 executing program 0: 03:47:54 executing program 1: 03:47:54 executing program 3: 03:47:54 executing program 4: 03:47:54 executing program 5: 03:47:54 executing program 2: 03:47:55 executing program 0: 03:47:55 executing program 3: 03:47:55 executing program 1: 03:47:55 executing program 5: 03:47:55 executing program 4: 03:47:55 executing program 2: 03:47:55 executing program 3: 03:47:55 executing program 0: 03:47:55 executing program 1: 03:47:56 executing program 5: 03:47:56 executing program 4: 03:47:56 executing program 2: 03:47:56 executing program 0: 03:47:56 executing program 3: 03:47:56 executing program 1: 03:47:56 executing program 4: 03:47:56 executing program 5: 03:47:56 executing program 2: 03:47:56 executing program 0: 03:47:57 executing program 1: 03:47:57 executing program 3: 03:47:57 executing program 4: 03:47:57 executing program 5: 03:47:57 executing program 2: 03:47:57 executing program 0: 03:47:57 executing program 1: 03:47:57 executing program 4: 03:47:57 executing program 3: 03:47:57 executing program 5: 03:47:57 executing program 2: 03:47:58 executing program 0: 03:47:58 executing program 1: 03:47:58 executing program 4: 03:47:58 executing program 3: 03:47:58 executing program 5: 03:47:58 executing program 2: 03:47:58 executing program 0: 03:47:58 executing program 1: 03:47:58 executing program 4: 03:47:58 executing program 3: 03:47:58 executing program 2: 03:47:59 executing program 5: 03:47:59 executing program 0: 03:47:59 executing program 1: 03:47:59 executing program 4: 03:47:59 executing program 3: 03:47:59 executing program 2: 03:47:59 executing program 5: 03:47:59 executing program 1: 03:47:59 executing program 0: 03:48:00 executing program 2: 03:48:00 executing program 0: 03:48:00 executing program 5: 03:48:00 executing program 3: 03:48:00 executing program 1: 03:48:00 executing program 4: 03:48:01 executing program 2: 03:48:01 executing program 3: 03:48:01 executing program 1: 03:48:01 executing program 5: 03:48:01 executing program 0: 03:48:01 executing program 4: 03:48:01 executing program 2: 03:48:01 executing program 3: 03:48:01 executing program 1: 03:48:01 executing program 5: 03:48:01 executing program 0: 03:48:01 executing program 4: 03:48:02 executing program 2: 03:48:02 executing program 1: 03:48:02 executing program 3: 03:48:02 executing program 5: 03:48:02 executing program 0: 03:48:02 executing program 4: 03:48:02 executing program 2: 03:48:02 executing program 3: 03:48:02 executing program 1: 03:48:02 executing program 0: 03:48:02 executing program 5: 03:48:03 executing program 4: 03:48:03 executing program 2: 03:48:03 executing program 3: 03:48:03 executing program 1: 03:48:03 executing program 0: 03:48:03 executing program 5: 03:48:03 executing program 4: 03:48:03 executing program 3: 03:48:03 executing program 2: 03:48:03 executing program 1: 03:48:03 executing program 0: 03:48:04 executing program 5: 03:48:04 executing program 4: 03:48:04 executing program 3: 03:48:04 executing program 2: 03:48:04 executing program 0: 03:48:04 executing program 1: 03:48:04 executing program 5: 03:48:04 executing program 4: 03:48:04 executing program 3: 03:48:04 executing program 2: 03:48:05 executing program 1: 03:48:05 executing program 0: 03:48:05 executing program 5: 03:48:05 executing program 4: 03:48:05 executing program 3: 03:48:05 executing program 0: 03:48:05 executing program 1: 03:48:05 executing program 2: 03:48:05 executing program 5: 03:48:05 executing program 4: 03:48:05 executing program 3: 03:48:06 executing program 0: 03:48:06 executing program 1: 03:48:06 executing program 2: 03:48:06 executing program 5: 03:48:06 executing program 4: 03:48:06 executing program 3: 03:48:06 executing program 2: 03:48:06 executing program 1: 03:48:06 executing program 0: 03:48:06 executing program 5: 03:48:06 executing program 3: 03:48:07 executing program 4: 03:48:07 executing program 2: 03:48:07 executing program 0: 03:48:07 executing program 1: 03:48:07 executing program 5: 03:48:07 executing program 3: 03:48:07 executing program 4: 03:48:07 executing program 2: 03:48:07 executing program 0: 03:48:07 executing program 1: 03:48:07 executing program 5: 03:48:08 executing program 3: 03:48:08 executing program 2: 03:48:08 executing program 4: 03:48:08 executing program 0: 03:48:08 executing program 1: 03:48:08 executing program 5: 03:48:08 executing program 3: 03:48:08 executing program 4: 03:48:08 executing program 2: 03:48:08 executing program 0: 03:48:08 executing program 1: 03:48:09 executing program 5: 03:48:09 executing program 3: 03:48:09 executing program 2: 03:48:09 executing program 4: 03:48:09 executing program 1: 03:48:09 executing program 0: 03:48:09 executing program 3: 03:48:09 executing program 5: 03:48:10 executing program 2: 03:48:10 executing program 4: 03:48:10 executing program 1: 03:48:10 executing program 0: 03:48:10 executing program 3: 03:48:10 executing program 5: 03:48:10 executing program 4: 03:48:10 executing program 2: 03:48:10 executing program 1: 03:48:10 executing program 0: 03:48:11 executing program 3: 03:48:11 executing program 5: 03:48:11 executing program 4: 03:48:11 executing program 2: 03:48:11 executing program 1: 03:48:11 executing program 0: 03:48:11 executing program 3: 03:48:11 executing program 5: 03:48:11 executing program 4: 03:48:12 executing program 1: 03:48:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r3 = dup2(r0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, 0x0) syz_open_procfs(0x0, 0x0) 03:48:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0xe, 0x0, &(0x7f0000000380)) 03:48:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:48:12 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$NS_GET_PARENT(r1, 0x5421, 0x748000) fcntl$getflags(r2, 0x0) 03:48:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000001c0)) 03:48:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 03:48:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fcntl$setlease(r0, 0x406, 0x0) 03:48:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) 03:48:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @private}}) 03:48:13 executing program 2: r0 = msgget(0xffffffffffffffff, 0x0) msgctl$MSG_STAT_ANY(r0, 0xb, &(0x7f00000000c0)=""/41) 03:48:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200140d5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$binfmt_aout(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='uid_map\x00') r1 = gettid() tkill(r1, 0x1000000000016) 03:48:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0xc0004) 03:48:13 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:48:13 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:13 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x5450, 0x0) 03:48:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 03:48:14 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x5450, 0x0) 03:48:14 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x2000000084) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 03:48:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 03:48:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 03:48:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}}, 0x0) 03:48:14 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 03:48:14 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_RESIZE(r0, 0x8903, &(0x7f00000001c0)=ANY=[]) 03:48:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) ioctl$TCFLSH(r2, 0x540b, 0x0) 03:48:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 03:48:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup2(r0, r1) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 03:48:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETAW(r0, 0x5407, 0x0) 03:48:15 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$KDGKBLED(r0, 0x4b64, 0x0) 03:48:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x844) 03:48:15 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/172) 03:48:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000480)) 03:48:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000880)) 03:48:16 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) tkill(r0, 0x1000000000016) 03:48:16 executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:48:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5608, &(0x7f0000000000)) 03:48:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0x0) 03:48:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') dup2(r0, r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0xb, 0x0, &(0x7f0000000100)) 03:48:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4360ba25acdc0486c1ca56212a7ab79544fc04"}) 03:48:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) r1 = gettid() connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) tkill(r1, 0x1000000000016) 03:48:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x366, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) read(r0, &(0x7f0000000040)=""/164, 0xa4) 03:48:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x34}, 0x0, 0x0, 0x2, 0x8, 0x0, 0x1}, &(0x7f0000000080)=0x20) 03:48:21 executing program 1: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) 03:48:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KDDELIO(r1, 0x80004519, 0x0) 03:48:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:48:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:48:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:48:21 executing program 2: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 03:48:21 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) getpeername(r2, 0x0, &(0x7f00000000c0)) 03:48:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x5427, 0x0) 03:48:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0xd, 0x0, 0x0) 03:48:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x5452, &(0x7f00000000c0)={0x1, 'veth1\x00'}) 03:48:22 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000300)="81", 0x1, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0xff61) write$cgroup_devices(r1, 0x0, 0x0) 03:48:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={0x0}}, 0x20000940) 03:48:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x5451, 0x0) 03:48:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)) r2 = dup2(r0, r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffe86}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r2) socket(0x11, 0x2, 0x0) tkill(r1, 0x1000000000016) 03:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 03:48:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x20000000) 03:48:23 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) unlink(&(0x7f0000000680)='./file0\x00') chdir(&(0x7f00000002c0)='./file1\x00') 03:48:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 03:48:23 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 03:48:23 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 03:48:23 executing program 3: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:24 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) write$P9_RSTATu(r2, 0x0, 0x0) 03:48:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 03:48:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}) 03:48:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x2}) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:48:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:24 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:48:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {}, {0x2, 0x0, @multicast1}}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:48:25 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 03:48:25 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x80) 03:48:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000280)) 03:48:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() write$binfmt_elf64(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 03:48:25 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 03:48:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:48:26 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') dup2(r1, r0) fchdir(r0) 03:48:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 03:48:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r1, &(0x7f0000000300)="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", 0x6c1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 03:48:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000680)) 03:48:26 executing program 1: socket$nl_generic(0x9, 0xa, 0x10) 03:48:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$unix(r1, &(0x7f00000079c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) tkill(r2, 0x1000000000016) 03:48:27 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 03:48:27 executing program 0: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:48:27 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r1) write$selinux_attr(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x8001004000000016) 03:48:27 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x0) 03:48:27 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:48:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) 03:48:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() tkill(r2, 0x1000000000016) 03:48:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) close(r0) r2 = gettid() socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 03:48:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) 03:48:28 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:48:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}}, 0x90) 03:48:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:48:28 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 03:48:28 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) [ 2837.266096][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2837.316748][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:48:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r1, r2) ioctl$TCSETSF2(r2, 0x402c542d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:48:29 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 03:48:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:48:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x8001004000000016) 03:48:29 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0) [ 2838.086658][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:48:30 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000) 03:48:30 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 03:48:30 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd3a, 0x0) ioctl$TIOCNXCL(r0, 0x5450) 03:48:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 03:48:30 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$KDADDIO(r1, 0x4b34, 0x9) 03:48:31 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "6aea30fb2f638e7d906e9639f2ea0cca902c71"}) 03:48:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) 03:48:31 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:31 executing program 3: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:31 executing program 1: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:48:35 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x5421, &(0x7f00000000c0)) 03:48:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{}, 0x0, 0x0, 0x4}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r1, 0x5451, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0xee9, 0xef4, "0366b7fe5465178d2e9eb27282f3fc334662fc2b831eeeb051d5d6a0fa53e93b"}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) 03:48:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r0) r4 = dup2(r3, r2) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000300)=""/66, 0x42}], 0x1) 03:48:35 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:48:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TIOCNXCL(r2, 0x540d) 03:48:35 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r1) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:48:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "289dbe3b2ab65ca18b67d17a2a97e82812f3c08ff9f43c3c140a167183ae7c739ce70e8f3a8b76608a7f26bca9c51307dd3fb6ef7c7dc203bab9c2857fee13e2", "e1724fd517b44db9408399732097aa71812f515ac16393deb3bf37b2178df680"}) 03:48:36 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) 03:48:36 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001800)='/dev/vcs#\x00', 0x34, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) 03:48:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:48:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}, 0x20000068) write$cgroup_int(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x20004086) 03:48:36 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2845.010072][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:48:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 03:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) dup2(r0, r1) getsockname(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000100)=0x80) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:48:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 03:48:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) 03:48:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 03:48:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) getrandom(0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, 0x0) 03:48:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') dup2(r0, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x17, &(0x7f0000000000), 0x4) 03:48:41 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8980, 0x0) 03:48:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 03:48:41 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x1e, &(0x7f0000000040)={0x0}}, 0x0) 03:48:41 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@rand_addr, @loopback}, 0xc) 03:48:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGABS3F(r0, 0x5450, 0x0) 03:48:41 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 03:48:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:48:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={0x0, 0x47c}}, 0x0) 03:48:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:48:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 03:48:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$TUNGETIFF(r1, 0x800454d2, 0x0) 03:48:42 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) [ 2850.611855][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2850.677760][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:48:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x6}]}, 0x10) 03:48:42 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:48:42 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:48:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:48:43 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) 03:48:43 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454ca, 0x400000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/143) 03:48:43 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0xdd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) tkill(r0, 0x8001004000000016) 03:48:43 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 03:48:43 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d00)={0x0}}, 0x0) 03:48:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$SO_TIMESTAMP(r1, 0x29, 0x3a, 0x0, 0x0) 03:48:43 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 03:48:44 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x88, 0xa, &(0x7f00000000c0), 0x4) 03:48:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) signalfd4(r0, &(0x7f0000000340), 0x8, 0x0) 03:48:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000000)={0x3, 'bridge_slave_0\x00'}) 03:48:44 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:48:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x5450, 0x0) r2 = dup3(r1, r0, 0x0) getrandom(&(0x7f0000000700)=""/4096, 0x1000, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) 03:48:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) write$char_raw(r1, 0x0, 0x3800) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xa9141, 0x0) tkill(r2, 0x1000000000016) 03:48:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0x5450, 0x0) 03:48:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 03:48:45 executing program 2: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') setrlimit(0x3, &(0x7f0000000040)={0x1, 0x7ff}) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x80800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet(0x2, 0x5, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r3 = dup(r2) ioctl$BLKIOOPT(r3, 0x1279, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @loopback}, {0x6, @dev={[], 0x40}}, 0x38, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bond\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) r5 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) semctl$IPC_RMID(r5, 0x0, 0x0) 03:48:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:45 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:48:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b3b, &(0x7f0000000040)={0x0, 0x0}) 03:48:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 03:48:46 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1000, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 03:48:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8953, &(0x7f0000000040)={'\x00', {0x2, 0x0, @local}}) 03:48:46 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00'/246, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 03:48:46 executing program 3: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:48:46 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 03:48:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7}, 0x7) 03:48:46 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x880040, 0x22) 03:48:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mprotect(&(0x7f0000218000/0x4000)=nil, 0x4000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 03:48:47 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:47 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:47 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000003480)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f00000003c0)='V', 0x1, 0x80, 0x0, 0x0) 03:48:47 executing program 5: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 03:48:47 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:47 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 03:48:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 03:48:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) 03:48:48 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:48:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) 03:48:48 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x19, 0x0, 0x0) 03:48:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup2(r0, r1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 03:48:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:48:49 executing program 4: munmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 03:48:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') tee(r0, 0xffffffffffffffff, 0x0, 0x0) 03:48:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 03:48:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) read$char_raw(r1, &(0x7f0000000400)={""/19390}, 0x4c00) 03:48:49 executing program 0: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100820005}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 03:48:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 03:48:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) getrandom(&(0x7f0000001400)=""/4109, 0x100d, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000140)) 03:48:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) 03:48:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:48:50 executing program 3: r0 = epoll_create(0x9) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:48:50 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r4, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:48:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) write$P9_RREADLINK(r1, 0x0, 0x0) 03:48:50 executing program 2: r0 = inotify_init1(0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 03:48:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f0000000ac0)) 03:48:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b36, 0x0) 03:48:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r0, r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:48:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:48:51 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setsig(r0, 0xa, 0x0) 03:48:51 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x481, 0x0) write$P9_RSETATTR(r0, 0x0, 0xfc7d) 03:48:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:48:51 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000240)) 03:48:51 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') ioctl$TCSETX(r0, 0x5433, 0x0) 03:48:51 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/14) 03:48:51 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:48:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040000) 03:48:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040)) 03:48:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x14000) 03:48:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 03:48:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 03:48:53 executing program 1: r0 = msgget(0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/143}, 0x97, 0x1, 0x3800) 03:48:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) 03:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x2, &(0x7f0000000ac0)) 03:48:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) write$P9_RMKDIR(r1, 0x0, 0x0) 03:48:54 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:48:54 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000140)) 03:48:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 03:48:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4c010) 03:48:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:48:54 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}}, 0x0) 03:49:01 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$KDSKBMODE(r0, 0x4b40, 0x0) 03:49:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@abs, 0x6e) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 03:49:01 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @remote}, 0x8) 03:49:01 executing program 1: close(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$CHAR_RAW_ROSET(r1, 0x125d, 0x0) 03:49:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) ioctl$FIOCLEX(r1, 0x5451) 03:49:01 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:49:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) write$P9_RWSTAT(r2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 03:49:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x5450, 0x0) 03:49:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x40010000000019, 0x0, 0x0) 03:49:01 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') pipe(&(0x7f0000003680)={0xffffffffffffffff}) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x0, 0x0, "33637f4850ebfbef799a223909ce6c7a524cce", 0x3ff, 0x7fffffff}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:49:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0xa99) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup2(r0, r0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) 03:49:01 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000002e00)) 03:49:02 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 03:49:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) flock(r0, 0x0) 03:49:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 03:49:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:49:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RRENAME(r0, 0x0, 0x0) 03:49:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 03:49:02 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') 03:49:02 executing program 1: splice(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x6) 03:49:03 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5450, 0x0) 03:49:03 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="1a9e971f8cca"}, 0x10) 03:49:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:03 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) times(0x0) 03:49:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:03 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) 03:49:03 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:49:04 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) 03:49:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:49:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:49:04 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 03:49:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) 03:49:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x100000000000000, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x90) 03:49:04 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r3, 0x0) getpeername$inet6(r2, 0x0, &(0x7f00000003c0)) 03:49:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x1f6) dup2(r0, r1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x31, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'wlc\x00'}, 0x2c) 03:49:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:05 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 03:49:05 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 03:49:05 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) setsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) 03:49:05 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$BLKSECDISCARD(r0, 0x1268, &(0x7f0000000000)) 03:49:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) dup2(r0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x4, 0x0, 0x0) 03:49:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f0000000680)={0x0, 0xcc}}, 0x0) 03:49:06 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 03:49:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:06 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4801) close(r1) socket$inet_udp(0x2, 0x2, 0x0) tkill(r0, 0x401004000000016) 03:49:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:49:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x190}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 03:49:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x2, 0x960000) 03:49:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:49:07 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x5450, 0x0) 03:49:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) 03:49:08 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 03:49:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:49:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:08 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r0, 0x5450, 0x0) 03:49:08 executing program 5: r0 = socket(0x11, 0x8080a, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000100), 0x2000010c, &(0x7f0000000440)={0x0}}, 0x0) 03:49:08 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 03:49:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7e, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2dea7c432738d37aad599da87f7cfc23d3cf01"}) 03:49:09 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xfffffdef) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 03:49:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000000)="c66dc3662b32c709b6c17bb4959fb409ac63e2aca2337e", 0x17, 0x90, 0x0, 0xfffffffffffffe71) 03:49:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:49:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) read(r1, 0x0, 0x0) 03:49:09 executing program 1: open$dir(&(0x7f0000000280)='./file0\x00', 0x80441, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 03:49:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) ioctl$KDSIGACCEPT(r0, 0x5421, 0x800048) 03:49:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000200)={0x0}}, 0x0) close(r0) r1 = gettid() socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)) tkill(r1, 0x1000000000016) 03:49:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000080, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 03:49:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) 03:49:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 03:49:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 03:49:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tgkill(r1, r3, 0x0) 03:49:10 executing program 5: r0 = memfd_create(&(0x7f0000000000)='-]/^\\uservboxnet1\x00', 0x0) ioctl(r0, 0x2, &(0x7f0000000a00)) 03:49:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = dup2(r0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = gettid() recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) tkill(r3, 0x1004000000013) 03:49:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x88}}, 0x0) 03:49:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8903, &(0x7f0000001100)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:11 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 03:49:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:49:11 executing program 2: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9060000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 03:49:11 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) recvfrom$packet(r1, 0x0, 0xfec8, 0x40002370, 0x0, 0x0) 03:49:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RLCREATE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = gettid() tkill(r5, 0x8001004000000016) 03:49:12 executing program 3: r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 03:49:12 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "ddb15c8332f8045b"}) 03:49:12 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b36, 0x0) 03:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:49:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) write$P9_RWSTAT(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = gettid() tkill(r5, 0x1000000000016) 03:49:13 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5450, 0x0) 03:49:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140)) 03:49:13 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x10001) r1 = eventfd(0x0) dup3(r0, r1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 03:49:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)) 03:49:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x144) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000080)={0x2, 'bridge_slave_0\x00'}) 03:49:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0xd51e, 0x60842) write$nbd(r0, 0x0, 0x0) 03:49:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 03:49:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$BLKPG(r0, 0x5450, 0x0) 03:49:14 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r1) tkill(r0, 0x1000000000015) 03:49:14 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000004b40)="36d099fc", 0x4}], 0x1}, 0x0) 03:49:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x2fc) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8953, &(0x7f0000000080)=@buf={0x2}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:49:14 executing program 2: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003c40)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) tkill(r1, 0x1004000000013) 03:49:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x1943dd9d) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x8912, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:49:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) close(r0) memfd_create(&(0x7f00000001c0)='.\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 03:49:16 executing program 1: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x219) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/34, 0x22) 03:49:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0xb, 0x0, &(0x7f0000000180)) 03:49:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x100000104) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000004fc0)={@local}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:49:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) write$selinux_attr(r2, 0x0, 0x0) 03:49:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getrandom(&(0x7f0000001040)=""/4140, 0x102c, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) 03:49:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000400)) 03:49:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x132}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 03:49:17 executing program 2: open(&(0x7f0000000140)='./file0\x00', 0x30142, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) llistxattr(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 03:49:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r0, r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:49:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 03:49:18 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) pipe2$9p(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000540)='./file0/file0\x00', 0x0, 0x0, 0x0) 03:49:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0x541b, 0x960000) 03:49:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 03:49:18 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setflags(r0, 0x407, 0x401000) 03:49:18 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 03:49:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) epoll_pwait(r1, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) 03:49:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "45dd67c4b0ac00909d6f3a628201000000dd8d"}) 03:49:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 03:49:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/arp\x00') r1 = socket(0x10, 0x2, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:49:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 03:49:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 03:49:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) tkill(r2, 0x1000000000016) 03:49:20 executing program 3: r0 = socket(0x10, 0x800000000080002, 0x0) ioctl$BLKRRPART(r0, 0x5450, 0x0) 03:49:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffea4}}, 0x0) 03:49:20 executing program 1: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) pwrite64(r0, &(0x7f00000000c0)="1d", 0x1, 0x0) 03:49:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZGET(r0, 0x5451, 0x0) 03:49:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000200)) 03:49:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 03:49:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) write$P9_RFLUSH(r0, 0x0, 0x0) 03:49:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'veth0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) 03:49:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 03:49:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) 03:49:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000080)) 03:49:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 03:49:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x6, 0x0, 0x0) 03:49:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x540c, 0x0) 03:49:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000040)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 03:49:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x40902, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) 03:49:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x35c, 0x20010003, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x194) write$P9_RREADLINK(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 03:49:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000dc0)}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 03:49:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000a80)='clear_refs\x00') ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, 0x0) 03:49:27 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x7ffff000}, 0x0) tkill(r0, 0x1000000000016) 03:49:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000180)) 03:49:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:49:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 03:49:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x33, 0x0, 0x8) 03:49:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:49:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14}, 0x14) sendto$inet(r1, &(0x7f00000002c0)="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", 0x695, 0x0, 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18}, 0x18) 03:49:27 executing program 2: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) fsync(r0) 03:49:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xa, 0x0, 0x0) 03:49:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x5451) 03:49:28 executing program 2: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="4bf0bb15f04073aa725359155a154c6e01d6b6b8ec035a1090a07fcfe5b4aa0d62d90801d609eb591398cfdcd076f77e402909faa88c16579285fa855d22406de4cd24bfb6c1436e439fc4") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 03:49:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RREAD(r0, 0x0, 0x0) 03:49:28 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:28 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={0x0}}, 0x0) 03:49:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b66, &(0x7f0000000080)) 03:49:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x40080d0) 03:49:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) r1 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130c}}, 0x0) r2 = getpid() tkill(r2, 0x14) 03:49:29 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a00), 0x8, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 03:49:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) write$P9_RATTACH(r0, 0x0, 0xffffff1f) 03:49:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x7cea51ee, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 03:49:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 03:49:29 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) getsockname$packet(r0, 0x0, &(0x7f0000005d40)) 03:49:30 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(r0, 0x5450, 0x0) 03:49:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000040) 03:49:30 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 03:49:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000100)) 03:49:30 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff1f}}, 0x0) 03:49:30 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) close(r0) open$dir(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 03:49:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:49:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, 0x0, 0x0) 03:49:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VT_RESIZEX(r1, 0x4b60, 0x0) 03:49:30 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$nbd(r0, 0x0, 0x0) 03:49:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0xffffff79) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:49:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) 03:49:31 executing program 4: r0 = epoll_create(0x100080003) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:49:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r0, r3) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 03:49:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x15, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 03:49:32 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x40000001) tkill(r2, 0x1000000000016) 03:49:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x70, &(0x7f0000000140)={&(0x7f00000002c0)={0xac, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x94, 0x1, "b7eca2c02518a2527d83b7c09408807bfb980e98368337d1912a9b3fc2474a2c419973bdc529f56e3cbd25bdd6d9787a7f3500bc2ebf07773ce0fd34ffde347b0527f12d20cdf859426c201209384a37335503143e0d104fa0347e65fdd8a7e6ab37462f7daf9b4d180ca2ab6924a336bbf7239105bc868f460b33b93e7129adaa93fc98c7ca92025deae25871a5b15a5331d28a82060fd05e2e6e79ea47"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 03:49:32 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 03:49:32 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 03:49:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4080) 03:49:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:32 executing program 2: symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 03:49:32 executing program 1: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:49:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000180)=@unspec, 0xc) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:33 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) r1 = dup(r0) getrandom(&(0x7f0000000600)=""/4096, 0x1000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 03:49:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup(r0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7}, 0x7) 03:49:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0xe, 0x0, &(0x7f0000000100)) 03:49:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={0x0}}, 0x20000000) 03:49:34 executing program 0: sched_setscheduler(0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x8, 0x0, 0x156, &(0x7f0000000100)="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"}) 03:49:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:49:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) 03:49:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x5427, 0x0) 03:49:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40080d0) 03:49:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 03:49:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000100)=""/190, 0xbe) 03:49:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BLKDISCARD(r2, 0x2, &(0x7f0000000000)) 03:49:34 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 03:49:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) r1 = dup2(r0, r0) write$cgroup_devices(r1, 0x0, 0x8) 03:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) r3 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) 03:49:35 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_devices(r0, 0x0, 0x9) 03:49:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 03:49:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) 03:49:35 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0x7) 03:49:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 03:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) 03:49:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() write$P9_RLERROR(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x40000001) tkill(r1, 0x1000000000016) 03:49:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r2, r1) dup2(r1, r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 03:49:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0xf, 0x0, &(0x7f0000000100)) 03:49:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKDISCARD(r0, 0x2, &(0x7f0000000040)) 03:49:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$P9_RREADDIR(r1, 0x0, 0x0) shutdown(r1, 0x0) 03:49:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FIONCLEX(r0, 0x5450) 03:49:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RWRITE(r0, 0x0, 0x0) 03:49:41 executing program 1: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 03:49:41 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000100)) 03:49:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) 03:49:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0) 03:49:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="c5", 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r4, r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r3, &(0x7f0000001140)=ANY=[], 0x6c1) tkill(r2, 0x14) 03:49:41 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x402c542b, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) 03:49:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 03:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_mreq(r1, 0x29, 0x19, 0x0, &(0x7f0000000200)) 03:49:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000000) 03:49:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x10000000040040, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) 03:49:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, 0x0, 0x0) 03:49:44 executing program 1: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:49:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc800) 03:49:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 03:49:44 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000240)) 03:49:44 executing program 3: r0 = eventfd(0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) 03:49:44 executing program 2: 03:49:44 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x0) 03:49:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f0000000100)=""/145) 03:49:45 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 03:49:45 executing program 5: process_vm_writev(0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:49:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 03:49:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 03:49:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xb, 0x0, 0x0) 03:49:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x803}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:49:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:49:45 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 03:49:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') dup3(r0, r1, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000003d80)) 03:49:46 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:46 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 03:49:46 executing program 0: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfffffe58) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:devpts_t:s0\x00', 0x1e) 03:49:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 03:49:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000540)) 03:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000000)) 03:49:46 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0), 0x4) 03:49:47 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) capget(0x0, 0x0) getrandom(&(0x7f0000000040)=""/4099, 0x1003, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 03:49:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 03:49:47 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) 03:49:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 03:49:47 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:49:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x6, 0x0, &(0x7f0000000000)=0x3f) 03:49:48 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) 03:49:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:49:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 03:49:48 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x19, 0x0, 0x0) 03:49:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x896a04c86f21e685) 03:49:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 03:49:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) 03:49:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010002, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 03:49:48 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000000040, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:49:48 executing program 4: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) 03:49:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x1) 03:49:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$RNDGETENTCNT(r0, 0x5450, 0x0) 03:49:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000300)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:49:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000880), 0x4) 03:49:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 03:49:49 executing program 2: r0 = epoll_create(0x9) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 03:49:49 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000001c0)) 03:49:50 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x50}}, 0x0) 03:49:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 03:49:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$RNDGETENTCNT(r0, 0x5452, &(0x7f0000000140)) 03:49:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, 0x0, 0x0) 03:49:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) fgetxattr(r1, &(0x7f0000000400)=@known='system.sockprotoname\x00', 0x0, 0x0) 03:49:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0) 03:49:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:49:51 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(r0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:51 executing program 0: r0 = inotify_init1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSBRK(r0, 0x5409, 0x0) 03:49:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x50) 03:49:52 executing program 3: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) fchdir(r0) 03:49:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r2, r1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 03:49:52 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 03:49:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:49:52 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write(r1, 0x0, 0x0) close(r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r2, 0x0) tkill(r0, 0x1000000000016) 03:49:52 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:49:52 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) 03:49:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000080)) 03:49:52 executing program 0: r0 = inotify_init1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a84350ed4d44c44965624c68c12e7e6e22e252"}) 03:49:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) close(r0) r2 = gettid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) 03:49:53 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x5450, 0x0) 03:49:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) write$vga_arbiter(r1, 0x0, 0x0) 03:49:53 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5421, &(0x7f0000000080)={'syz_tun\x00'}) 03:49:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x23, 0x0, &(0x7f0000000040)) 03:49:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSND(r0, 0x5451, 0x0) 03:49:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000500), 0x1c) sendto$packet(r0, &(0x7f0000002f40), 0x0, 0x0, 0x0, 0x0) 03:49:54 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write$P9_RCREATE(r2, 0x0, 0x0) 03:49:54 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x3}}) 03:49:54 executing program 4: r0 = epoll_create1(0x0) ioctl$LOOP_SET_STATUS(r0, 0x5450, 0x0) 03:49:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) 03:49:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:54 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) 03:49:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x0, 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000480)=@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @calipso={0x7, 0x8}]}, 0x28) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r2, 0x0, 0x0) dup2(r2, r1) r3 = dup(r1) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) write$P9_RLOPEN(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x23c}}, 0x0) 03:49:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2923.387512][T22581] device lo entered promiscuous mode [ 2923.415620][T22575] device lo left promiscuous mode [ 2923.444237][T22583] device lo entered promiscuous mode [ 2923.482034][T22575] device lo left promiscuous mode 03:49:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2000c010) 03:49:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x190}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:49:55 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc0, 0x0) 03:49:55 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 03:49:55 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) write$binfmt_elf32(r2, 0x0, 0x960) shutdown(r2, 0x0) 03:49:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 03:49:55 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x7, 0x0, &(0x7f0000000100)) 03:49:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000000000017e, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 03:49:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:49:56 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:56 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f00000001c0), 0x0, 0x10000, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:56 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 03:49:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) 03:49:56 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) 03:49:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$P9_RXATTRWALK(r0, 0x0, 0x0) 03:49:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 03:49:57 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setflags(r0, 0x2, 0x0) 03:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000007e80)={0x0}}, 0x0) 03:49:57 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='net/unix\x00') sendfile(r0, r1, 0x0, 0xfe) 03:49:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RWRITE(r0, 0x0, 0x0) 03:49:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:49:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x0) 03:49:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) write$P9_RWSTAT(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) 03:49:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:49:58 executing program 1: r0 = socket(0x1, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000001100)) 03:49:58 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f0000000180)) 03:49:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5450, 0x0) 03:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x6, 0x0, 0x0) 03:49:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSBRKP(r2, 0x5425, 0x0) 03:49:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 03:49:59 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file2\x00', r0, &(0x7f0000000040)='./file2\x00') readlinkat(r0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)=""/26, 0x1a) 03:49:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xd35cac87, 0x0, 0x46}}], 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) 03:49:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x8903, &(0x7f0000000240)) 03:49:59 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:49:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) write$P9_RSTATu(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 03:49:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FITHAW(r0, 0x5450) 03:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xd976406a25c5f4b7) 03:49:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_FSGETXATTR(r1, 0x5450, 0x0) 03:50:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, 0x0) 03:50:04 executing program 2: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = fcntl$dupfd(r1, 0x0, r1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) ioctl$BLKALIGNOFF(r2, 0x127a, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) 03:50:04 executing program 1: r0 = epoll_create(0x1f) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x2, &(0x7f0000000080)={@mcast2}) 03:50:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {{0x0, 0xea60}}], 0x2c9b1f70) r1 = dup2(r0, r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:50:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) 03:50:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 03:50:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) write$vga_arbiter(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 03:50:04 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) getcwd(0x0, 0x0) 03:50:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80) close(r1) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 03:50:05 executing program 2: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 03:50:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 03:50:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0cf3857a3ec8d98b"}) 03:50:05 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:50:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 03:50:05 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 03:50:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x5452, &(0x7f0000000080)=@get={0x1, 0x0}) 03:50:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f0000000180)) 03:50:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x8c}}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 03:50:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 03:50:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 03:50:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:50:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) socket(0x2, 0xa, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) tkill(r2, 0x1000000000016) 03:50:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030) ioctl$TUNGETIFF(r0, 0x800454e1, 0x0) 03:50:07 executing program 0: r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x24a) 03:50:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) r2 = dup2(r0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0) 03:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:50:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 03:50:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:50:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0xd, 0x0, &(0x7f0000000040)) 03:50:07 executing program 1: r0 = inotify_init1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)) 03:50:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x17, &(0x7f0000000280)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "00000000000000000003000c0000000000000000000000edffffffff7f0000000000000000000000000000000000000000000000000000000200"}, 0xd8) 03:50:08 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000001880)) 03:50:08 executing program 0: r0 = socket(0xa, 0x3, 0xf5) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc5, &(0x7f0000000040)={&(0x7f0000000180)={0x98, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x54}, @TIPC_NLA_NODE={0x30}]}, 0x98}}, 0x0) 03:50:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x100) 03:50:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 03:50:09 executing program 3: r0 = epoll_create(0xab) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0x2, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 03:50:09 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 03:50:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 03:50:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f00000001c0)=""/158) 03:50:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, 0x0) 03:50:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:50:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:50:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) getpeername$inet6(r1, 0x0, &(0x7f00000001c0)) 03:50:09 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 03:50:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 03:50:10 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x20841) dup3(r1, r0, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 03:50:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[], 0x5c}}, 0x0) 03:50:10 executing program 3: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 03:50:10 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000000)="549aa8362e56fb3bd60b082a50e8ccc9a02c8f8c", 0x14) 03:50:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x4e, 0xfffffffa, 0x0, @mcast2, @dev, 0x0, 0x40, 0x101, 0x8000}}) 03:50:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) 03:50:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000140)) 03:50:10 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) read(r2, 0x0, 0x0) 03:50:10 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:50:11 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:50:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 03:50:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:50:11 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) sendmsg$inet(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000640)="ccd438d50409feaa6d5bd1271b07f5", 0xf}], 0x1}, 0x0) 03:50:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000012c0)="ebef4ad5", 0x4) 03:50:11 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) write$P9_RCLUNK(r1, &(0x7f0000000140)={0x7}, 0x7) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) write$P9_RWALK(r1, 0x0, 0x0) 03:50:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x5451, 0x0) 03:50:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x8001, 0x0) tkill(r2, 0x1000000000016) 03:50:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:12 executing program 3: r0 = socket(0x11, 0xa, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 03:50:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) dup3(r0, r1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f00000000c0)) 03:50:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 03:50:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom$packet(r1, 0x0, 0x0, 0xee3764b206602b6, 0x0, 0x0) 03:50:13 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:50:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x20008082) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={0x0}}, 0x0) 03:50:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 03:50:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:50:13 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454ca, 0x400000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:50:14 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000580)) 03:50:14 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000640), 0x8) 03:50:14 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:14 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score\x00') connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x60) sendfile(r2, r3, 0x0, 0x0) 03:50:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000380)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGID(r0, 0x80084502, 0x0) 03:50:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/fib_trie\x00') read$char_raw(r0, 0x0, 0xc00) 03:50:15 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) flistxattr(r0, 0x0, 0x0) 03:50:15 executing program 0: capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={0x0}}, 0x0) 03:50:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getrandom(&(0x7f0000000080)=""/4122, 0x101a, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 03:50:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCSETSF2(r2, 0x402c542d, 0x0) 03:50:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 03:50:15 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:15 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:50:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x2, 0x0, &(0x7f0000000180)) 03:50:16 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:50:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:20 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read$char_usb(r1, &(0x7f00000002c0)=""/4096, 0x1000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 03:50:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 03:50:20 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 03:50:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 03:50:20 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 03:50:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2005c084, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r0) r2 = gettid() openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 03:50:20 executing program 2: r0 = eventfd(0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 03:50:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0xffffff79) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKRAGET(r1, 0x1263, 0x0) 03:50:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 03:50:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2001c080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = gettid() tkill(r5, 0x1000000000016) 03:50:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) write$P9_RREADLINK(r1, 0x0, 0x0) 03:50:21 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 03:50:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) write$evdev(r1, &(0x7f0000000040), 0x0) 03:50:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) 03:50:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000880d000000000020000000000a00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, 0x0) 03:50:25 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x5450, 0x0) 03:50:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKDISCARD(r1, 0x1277, 0x0) 03:50:25 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5450, 0x0) 03:50:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) 03:50:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) futimesat(r0, 0x0, 0x0) 03:50:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCSBRK(r0, 0x5427) 03:50:26 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/50, &(0x7f0000000080)=0x29) 03:50:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, 0x0) 03:50:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r1, r0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 03:50:26 executing program 0: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8401000}, 0xc, &(0x7f0000000600)={0x0}}, 0x0) 03:50:26 executing program 2: r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x232580, 0x32) 03:50:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x1a, 0x0, &(0x7f0000000000)) 03:50:26 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000000040)={'batadv_slave_1\x00'}) 03:50:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) 03:50:27 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$TUNGETIFF(r0, 0x2, &(0x7f0000000140)) 03:50:27 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:50:27 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 03:50:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:50:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSETATTR(r2, 0x0, 0x0) 03:50:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000008c0)=0x80) fcntl$setownex(r1, 0xf, &(0x7f0000000980)) 03:50:27 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$BLKPG(r0, 0x5450, 0x0) 03:50:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x40141242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000080)) 03:50:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:50:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 03:50:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) pipe(&(0x7f0000000000)) tkill(r2, 0x1000000000016) [ 2956.921890][T23188] not chained 1810000 origins [ 2956.926623][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2956.935295][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2956.945356][T23188] Call Trace: [ 2956.948655][T23188] dump_stack+0x21c/0x280 [ 2956.952986][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2956.958704][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2956.963898][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2956.969723][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2956.974913][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2956.980800][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2956.986862][T23188] ? _copy_from_user+0x201/0x310 [ 2956.991792][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2956.996984][T23188] __msan_chain_origin+0x50/0x90 [ 2957.001922][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.007036][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.011974][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.016482][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2957.021676][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2957.027561][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2957.032757][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2957.038034][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2957.042785][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2957.047640][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.052322][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.058401][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.064547][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.069744][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.074590][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.079175][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.085488][T23188] RIP: 0023:0xf7f96549 [ 2957.089543][T23188] Code: Bad RIP value. [ 2957.093595][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2957.102008][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2957.110062][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2957.118025][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2957.125984][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2957.133954][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2957.141926][T23188] Uninit was stored to memory at: [ 2957.146948][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.152666][T23188] __msan_chain_origin+0x50/0x90 [ 2957.157597][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.162700][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.167626][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.172121][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.176802][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.182860][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.189004][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.194208][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.199050][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.203545][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.209848][T23188] [ 2957.212161][T23188] Uninit was stored to memory at: [ 2957.217176][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.222882][T23188] __msan_chain_origin+0x50/0x90 [ 2957.227808][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.232907][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.237845][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.242336][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.247003][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.253060][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.259203][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.264390][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.269241][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.273871][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.280197][T23188] [ 2957.282515][T23188] Uninit was stored to memory at: [ 2957.287542][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.293256][T23188] __msan_chain_origin+0x50/0x90 [ 2957.298187][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.303288][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.308216][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.312727][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.317415][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.323479][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.329625][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.334838][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.339678][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.344172][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.350484][T23188] [ 2957.352809][T23188] Uninit was stored to memory at: [ 2957.357826][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.363535][T23188] __msan_chain_origin+0x50/0x90 [ 2957.368462][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.373567][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.378498][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.383007][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.387675][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.393746][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.399902][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.405088][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.409942][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.414437][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.420741][T23188] [ 2957.423053][T23188] Uninit was stored to memory at: [ 2957.428085][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.433805][T23188] __msan_chain_origin+0x50/0x90 [ 2957.438737][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.443837][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.448764][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.453254][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.457922][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.463981][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.470128][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.475318][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.480251][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.484756][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.491073][T23188] [ 2957.493386][T23188] Uninit was stored to memory at: [ 2957.498405][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.504110][T23188] __msan_chain_origin+0x50/0x90 [ 2957.509038][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.514138][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.519063][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.523554][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.528224][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.534281][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.540425][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.545625][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.550465][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.554970][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.561274][T23188] [ 2957.563588][T23188] Uninit was stored to memory at: [ 2957.568603][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2957.574309][T23188] __msan_chain_origin+0x50/0x90 [ 2957.579238][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2957.584340][T23188] get_compat_msghdr+0x108/0x2b0 [ 2957.589265][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2957.593754][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2957.598424][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2957.604481][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2957.610625][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2957.615812][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2957.620655][T23188] do_SYSENTER_32+0x73/0x90 [ 2957.625148][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2957.631452][T23188] [ 2957.633778][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2957.640441][T23188] do_recvmmsg+0xbf/0x22c0 [ 2957.644851][T23188] do_recvmmsg+0xbf/0x22c0 03:50:29 executing program 4: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:50:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000fffe, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) r2 = gettid() sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x20050001) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) tkill(r2, 0x1000000000015) 03:50:30 executing program 3: r0 = epoll_create(0x6) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RMKDIR(r0, 0x0, 0x0) 03:50:30 executing program 4: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) [ 2959.050717][T23188] not chained 1820000 origins [ 2959.055439][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2959.064107][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2959.074333][T23188] Call Trace: [ 2959.077624][T23188] dump_stack+0x21c/0x280 [ 2959.081956][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2959.087673][T23188] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 2959.093841][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2959.099031][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2959.104585][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2959.110672][T23188] ? _copy_from_user+0x201/0x310 [ 2959.115613][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2959.120806][T23188] __msan_chain_origin+0x50/0x90 [ 2959.125742][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.130876][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.135813][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.140321][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2959.145511][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2959.151397][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2959.156588][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2959.161877][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2959.166630][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2959.171387][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.176095][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.182160][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.188317][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.193515][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.198362][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.202865][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.209177][T23188] RIP: 0023:0xf7f96549 [ 2959.213230][T23188] Code: Bad RIP value. [ 2959.217282][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2959.225766][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2959.233734][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2959.241711][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2959.249680][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2959.257654][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2959.265623][T23188] Uninit was stored to memory at: [ 2959.270670][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.276392][T23188] __msan_chain_origin+0x50/0x90 [ 2959.281336][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.286463][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.291398][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.295890][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.300575][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.306640][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.312782][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.317968][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.322810][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.327303][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.333607][T23188] [ 2959.335919][T23188] Uninit was stored to memory at: [ 2959.340944][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.346651][T23188] __msan_chain_origin+0x50/0x90 [ 2959.351579][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.356678][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.361603][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.366093][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.370760][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.376819][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.382970][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.388158][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.392997][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.397489][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.403792][T23188] [ 2959.406107][T23188] Uninit was stored to memory at: [ 2959.411125][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.416831][T23188] __msan_chain_origin+0x50/0x90 [ 2959.421757][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.426853][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.431780][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.436270][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.440937][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.446992][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.453132][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.458320][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.463178][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.467769][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.474161][T23188] [ 2959.476473][T23188] Uninit was stored to memory at: [ 2959.481487][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.487191][T23188] __msan_chain_origin+0x50/0x90 [ 2959.492119][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.497218][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.502143][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.506644][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.511310][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.517372][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.523514][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.528702][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.533543][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.538048][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.544351][T23188] [ 2959.546663][T23188] Uninit was stored to memory at: [ 2959.551679][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.557395][T23188] __msan_chain_origin+0x50/0x90 [ 2959.562324][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.567423][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.572363][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.576856][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.581548][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.587605][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.593763][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.598950][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.603788][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.608280][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.614595][T23188] [ 2959.616909][T23188] Uninit was stored to memory at: [ 2959.621926][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.627633][T23188] __msan_chain_origin+0x50/0x90 [ 2959.632561][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.637662][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.642588][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.647094][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.651788][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.657845][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.663988][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.669178][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.674017][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.678511][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.684812][T23188] [ 2959.687124][T23188] Uninit was stored to memory at: [ 2959.692140][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2959.697856][T23188] __msan_chain_origin+0x50/0x90 [ 2959.702788][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2959.707894][T23188] get_compat_msghdr+0x108/0x2b0 [ 2959.712818][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2959.717311][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2959.721976][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2959.728033][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2959.734175][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2959.739365][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2959.744203][T23188] do_SYSENTER_32+0x73/0x90 [ 2959.748699][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2959.755006][T23188] [ 2959.757316][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2959.763980][T23188] do_recvmmsg+0xbf/0x22c0 [ 2959.768396][T23188] do_recvmmsg+0xbf/0x22c0 [ 2960.576260][T23188] not chained 1830000 origins [ 2960.580990][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2960.589655][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2960.599711][T23188] Call Trace: [ 2960.603015][T23188] dump_stack+0x21c/0x280 [ 2960.607357][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2960.613109][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2960.618317][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2960.623874][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2960.629949][T23188] ? _copy_from_user+0x201/0x310 [ 2960.634897][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2960.640104][T23188] __msan_chain_origin+0x50/0x90 [ 2960.645056][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2960.650202][T23188] get_compat_msghdr+0x108/0x2b0 [ 2960.655246][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2960.659776][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2960.664991][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2960.670891][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2960.676101][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2960.681396][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2960.686182][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2960.690954][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2960.695654][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2960.701735][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2960.707897][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2960.713113][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2960.717974][T23188] do_SYSENTER_32+0x73/0x90 [ 2960.722486][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2960.728815][T23188] RIP: 0023:0xf7f96549 [ 2960.732875][T23188] Code: Bad RIP value. [ 2960.736937][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2960.745354][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2960.753327][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2960.761324][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2960.769301][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2960.777279][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2960.785262][T23188] Uninit was stored to memory at: [ 2960.790303][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2960.796031][T23188] __msan_chain_origin+0x50/0x90 [ 2960.800987][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2960.806107][T23188] get_compat_msghdr+0x108/0x2b0 [ 2960.811047][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2960.815552][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2960.820240][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2960.826311][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2960.832476][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2960.837683][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2960.842535][T23188] do_SYSENTER_32+0x73/0x90 [ 2960.847042][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2960.853356][T23188] [ 2960.855678][T23188] Uninit was stored to memory at: [ 2960.860707][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2960.866429][T23188] __msan_chain_origin+0x50/0x90 [ 2960.871369][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2960.876482][T23188] get_compat_msghdr+0x108/0x2b0 [ 2960.881421][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2960.885926][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2960.890609][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2960.896680][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2960.902840][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2960.908152][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2960.913008][T23188] do_SYSENTER_32+0x73/0x90 [ 2960.917519][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2960.923837][T23188] [ 2960.926161][T23188] Uninit was stored to memory at: [ 2960.931183][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2960.936925][T23188] __msan_chain_origin+0x50/0x90 [ 2960.941838][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2960.946924][T23188] get_compat_msghdr+0x108/0x2b0 [ 2960.951835][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2960.956317][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2960.960971][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2960.967052][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2960.973218][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2960.978403][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2960.983239][T23188] do_SYSENTER_32+0x73/0x90 [ 2960.987719][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2960.994025][T23188] [ 2960.996329][T23188] Uninit was stored to memory at: [ 2961.001350][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.007480][T23188] __msan_chain_origin+0x50/0x90 [ 2961.012396][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.017482][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.022398][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.026875][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.031542][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.037596][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.043738][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.048911][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.053737][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.058216][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.064530][T23188] [ 2961.066923][T23188] Uninit was stored to memory at: [ 2961.071937][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.077628][T23188] __msan_chain_origin+0x50/0x90 [ 2961.082641][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.087724][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.092651][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.097147][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.101810][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.107897][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.114071][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.119284][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.124148][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.128630][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.134930][T23188] [ 2961.137237][T23188] Uninit was stored to memory at: [ 2961.142246][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.147945][T23188] __msan_chain_origin+0x50/0x90 [ 2961.152861][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.157948][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.162898][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.167396][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.172084][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.178164][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.184335][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.189611][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.194468][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.199239][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.205555][T23188] [ 2961.207879][T23188] Uninit was stored to memory at: [ 2961.212919][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.218657][T23188] __msan_chain_origin+0x50/0x90 [ 2961.223599][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.228721][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.233662][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.238170][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.242857][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.248937][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.255102][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.260327][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.265189][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.269740][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.276060][T23188] [ 2961.278384][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2961.285151][T23188] do_recvmmsg+0xbf/0x22c0 [ 2961.289748][T23188] do_recvmmsg+0xbf/0x22c0 [ 2961.555234][T23188] not chained 1840000 origins [ 2961.560050][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2961.568832][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2961.578972][T23188] Call Trace: [ 2961.582274][T23188] dump_stack+0x21c/0x280 [ 2961.586619][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2961.592367][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2961.597572][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2961.603125][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2961.609204][T23188] ? _copy_from_user+0x201/0x310 [ 2961.614150][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2961.619356][T23188] __msan_chain_origin+0x50/0x90 [ 2961.624301][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.629429][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.634389][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.638914][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2961.644119][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2961.650020][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2961.655334][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2961.660732][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2961.665498][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2961.670266][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.674962][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.681043][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.687205][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.692414][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.697272][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.701781][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.708170][T23188] RIP: 0023:0xf7f96549 [ 2961.712262][T23188] Code: Bad RIP value. [ 2961.716344][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2961.724731][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2961.732680][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2961.740657][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2961.748930][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2961.756888][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2961.764844][T23188] Uninit was stored to memory at: [ 2961.769853][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.775554][T23188] __msan_chain_origin+0x50/0x90 [ 2961.780471][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.785563][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.790478][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.795011][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.799765][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.805812][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.811944][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.817118][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.821944][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.826465][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.832801][T23188] [ 2961.835107][T23188] Uninit was stored to memory at: [ 2961.840149][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.845843][T23188] __msan_chain_origin+0x50/0x90 [ 2961.850757][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.855855][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.860769][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.865244][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.869898][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.875941][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.882080][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.887255][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.892083][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.896561][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.902868][T23188] [ 2961.905171][T23188] Uninit was stored to memory at: [ 2961.910173][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.915866][T23188] __msan_chain_origin+0x50/0x90 [ 2961.920779][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.925863][T23188] get_compat_msghdr+0x108/0x2b0 [ 2961.930775][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2961.935250][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2961.939904][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2961.945950][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2961.952092][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2961.957266][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2961.962092][T23188] do_SYSENTER_32+0x73/0x90 [ 2961.966572][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2961.972865][T23188] [ 2961.975177][T23188] Uninit was stored to memory at: [ 2961.980176][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2961.985882][T23188] __msan_chain_origin+0x50/0x90 [ 2961.990807][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2961.995906][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.000819][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.005296][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.009948][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.015990][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.022136][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.027311][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.032138][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.036629][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.042930][T23188] [ 2962.045229][T23188] Uninit was stored to memory at: [ 2962.050230][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.055924][T23188] __msan_chain_origin+0x50/0x90 [ 2962.060847][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.065934][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.070867][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.075346][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.080001][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.086044][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.092176][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.097349][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.102185][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.106664][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.112972][T23188] [ 2962.115272][T23188] Uninit was stored to memory at: [ 2962.120285][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.126006][T23188] __msan_chain_origin+0x50/0x90 [ 2962.130933][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.136026][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.140943][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.145420][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.150072][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.156114][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.162244][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.167464][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.172289][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.176769][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.183115][T23188] [ 2962.185418][T23188] Uninit was stored to memory at: [ 2962.190433][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.196212][T23188] __msan_chain_origin+0x50/0x90 [ 2962.201125][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.206252][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.211164][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.215687][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.220339][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.226381][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.232513][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.237689][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.242513][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.246992][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.253303][T23188] [ 2962.255609][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2962.262257][T23188] do_recvmmsg+0xbf/0x22c0 [ 2962.266659][T23188] do_recvmmsg+0xbf/0x22c0 [ 2962.443160][T23188] not chained 1850000 origins [ 2962.447887][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2962.456551][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2962.466601][T23188] Call Trace: [ 2962.470110][T23188] dump_stack+0x21c/0x280 [ 2962.474455][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2962.480197][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2962.485401][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2962.490954][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2962.497027][T23188] ? _copy_from_user+0x201/0x310 [ 2962.501973][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2962.507176][T23188] __msan_chain_origin+0x50/0x90 [ 2962.512120][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.517248][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.522199][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.526723][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2962.531937][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2962.537835][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2962.543042][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2962.548332][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2962.553095][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2962.557865][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.562558][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.568636][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.574803][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.580015][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.584872][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.589384][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.595707][T23188] RIP: 0023:0xf7f96549 [ 2962.599765][T23188] Code: Bad RIP value. [ 2962.603827][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2962.612232][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2962.620179][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2962.628132][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2962.636090][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2962.644056][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2962.652058][T23188] Uninit was stored to memory at: [ 2962.657065][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.662760][T23188] __msan_chain_origin+0x50/0x90 [ 2962.667673][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.672758][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.677670][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.682148][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.686802][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.692887][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.699030][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.704238][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.709064][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.713554][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.719849][T23188] [ 2962.722163][T23188] Uninit was stored to memory at: [ 2962.727176][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.732882][T23188] __msan_chain_origin+0x50/0x90 [ 2962.737807][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.742896][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.747806][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.752282][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.756935][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.763012][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.769152][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.774381][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.779213][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.784263][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.790572][T23188] [ 2962.792879][T23188] Uninit was stored to memory at: [ 2962.797884][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.803581][T23188] __msan_chain_origin+0x50/0x90 [ 2962.808496][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.813586][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.818544][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.823123][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.827778][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.833820][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.839951][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.845125][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.849952][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.854434][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.860728][T23188] [ 2962.863075][T23188] Uninit was stored to memory at: [ 2962.868088][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.873799][T23188] __msan_chain_origin+0x50/0x90 [ 2962.878719][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.883807][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.888721][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.893242][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.897894][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.903935][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.910064][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.915235][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.920060][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.924579][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2962.930910][T23188] [ 2962.933213][T23188] Uninit was stored to memory at: [ 2962.938250][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2962.943946][T23188] __msan_chain_origin+0x50/0x90 [ 2962.948860][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2962.953945][T23188] get_compat_msghdr+0x108/0x2b0 [ 2962.958858][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2962.963338][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2962.967992][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2962.974033][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2962.980163][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2962.985334][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2962.990159][T23188] do_SYSENTER_32+0x73/0x90 [ 2962.994635][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.000930][T23188] [ 2963.003231][T23188] Uninit was stored to memory at: [ 2963.008232][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.013923][T23188] __msan_chain_origin+0x50/0x90 [ 2963.018838][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.023928][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.028840][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.033319][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.037970][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.044059][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.050203][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.055391][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.060217][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.064697][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.071008][T23188] [ 2963.073312][T23188] Uninit was stored to memory at: [ 2963.078323][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.084015][T23188] __msan_chain_origin+0x50/0x90 [ 2963.088930][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.094017][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.098929][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.103418][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.108110][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.114164][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.120304][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.125481][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.130310][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.134795][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.141110][T23188] [ 2963.143417][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2963.150110][T23188] do_recvmmsg+0xbf/0x22c0 [ 2963.154501][T23188] do_recvmmsg+0xbf/0x22c0 [ 2963.343815][T23188] not chained 1860000 origins [ 2963.348539][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2963.357203][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2963.367252][T23188] Call Trace: [ 2963.370563][T23188] dump_stack+0x21c/0x280 [ 2963.374907][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2963.380656][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2963.385860][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2963.391414][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2963.397493][T23188] ? _copy_from_user+0x201/0x310 [ 2963.402441][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2963.408169][T23188] __msan_chain_origin+0x50/0x90 [ 2963.413121][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.418312][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.423235][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.427742][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2963.432930][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2963.438908][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2963.444114][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2963.449378][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2963.454119][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2963.458880][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.463560][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.469611][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.475745][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.480927][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.485756][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.490254][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.496572][T23188] RIP: 0023:0xf7f96549 [ 2963.500632][T23188] Code: Bad RIP value. [ 2963.504672][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2963.513926][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2963.521876][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2963.529822][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2963.537781][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2963.545730][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2963.553687][T23188] Uninit was stored to memory at: [ 2963.558697][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.564395][T23188] __msan_chain_origin+0x50/0x90 [ 2963.569310][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.574417][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.579330][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.584765][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.589424][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.595466][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.601600][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.606775][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.611603][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.616084][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.622397][T23188] [ 2963.624702][T23188] Uninit was stored to memory at: [ 2963.629708][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.635414][T23188] __msan_chain_origin+0x50/0x90 [ 2963.640330][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.645417][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.650330][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.654808][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.659463][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.665508][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.671662][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.676837][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.681682][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.686171][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.692467][T23188] [ 2963.694776][T23188] Uninit was stored to memory at: [ 2963.699782][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.705596][T23188] __msan_chain_origin+0x50/0x90 [ 2963.710511][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.715603][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.720516][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.724995][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.729649][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.735695][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.741827][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.747000][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.751827][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.756307][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.762616][T23188] [ 2963.764931][T23188] Uninit was stored to memory at: [ 2963.769952][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.775646][T23188] __msan_chain_origin+0x50/0x90 [ 2963.780567][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.785673][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.790599][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.795164][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.799836][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.805879][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.812025][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.817199][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.822042][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.826522][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.832904][T23188] [ 2963.835217][T23188] Uninit was stored to memory at: [ 2963.840220][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.845917][T23188] __msan_chain_origin+0x50/0x90 [ 2963.850834][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.855925][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.860839][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.865317][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.869972][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.876016][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.882147][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.887320][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.892149][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.896627][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.902945][T23188] [ 2963.905249][T23188] Uninit was stored to memory at: [ 2963.910339][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.916048][T23188] __msan_chain_origin+0x50/0x90 [ 2963.920962][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.926068][T23188] get_compat_msghdr+0x108/0x2b0 [ 2963.930984][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2963.935463][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2963.940118][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2963.946164][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2963.952310][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2963.957571][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2963.962415][T23188] do_SYSENTER_32+0x73/0x90 [ 2963.966895][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2963.973189][T23188] [ 2963.975494][T23188] Uninit was stored to memory at: [ 2963.980497][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2963.986364][T23188] __msan_chain_origin+0x50/0x90 [ 2963.991296][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2963.996384][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.001300][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.005780][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.010435][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.016492][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.022625][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.027815][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.032643][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.037127][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.043423][T23188] [ 2964.045726][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2964.052376][T23188] do_recvmmsg+0xbf/0x22c0 [ 2964.056769][T23188] do_recvmmsg+0xbf/0x22c0 [ 2964.294765][T23188] not chained 1870000 origins [ 2964.299540][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2964.308235][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2964.318322][T23188] Call Trace: [ 2964.321625][T23188] dump_stack+0x21c/0x280 [ 2964.326002][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2964.331753][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2964.336961][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2964.342519][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2964.348596][T23188] ? _copy_from_user+0x201/0x310 [ 2964.353553][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2964.358762][T23188] __msan_chain_origin+0x50/0x90 [ 2964.363712][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.368851][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.373812][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.378343][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2964.383555][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2964.389464][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2964.394678][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2964.399973][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2964.404758][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2964.409533][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.414235][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.420326][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.426486][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.431712][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.436576][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.441113][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.447442][T23188] RIP: 0023:0xf7f96549 [ 2964.451503][T23188] Code: Bad RIP value. [ 2964.455568][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2964.463982][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2964.471959][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2964.479937][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2964.488023][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2964.495995][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2964.503981][T23188] Uninit was stored to memory at: [ 2964.509018][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.514740][T23188] __msan_chain_origin+0x50/0x90 [ 2964.519685][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.524799][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.529738][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.534242][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.538928][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.544999][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.551168][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.556373][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.561226][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.565733][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.572047][T23188] [ 2964.574369][T23188] Uninit was stored to memory at: [ 2964.579399][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.585118][T23188] __msan_chain_origin+0x50/0x90 [ 2964.590217][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.595332][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.600271][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.604778][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.609459][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.615531][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.621690][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.626914][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.631771][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.636278][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.642589][T23188] [ 2964.644914][T23188] Uninit was stored to memory at: [ 2964.649947][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.655668][T23188] __msan_chain_origin+0x50/0x90 [ 2964.660608][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.665748][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.670666][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.675146][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.679808][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.685854][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.692092][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.697272][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.702104][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.706629][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.712930][T23188] [ 2964.715235][T23188] Uninit was stored to memory at: [ 2964.720239][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.725933][T23188] __msan_chain_origin+0x50/0x90 [ 2964.730850][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.735996][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.740921][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.745416][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.750072][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.756117][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.762308][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.767529][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.772361][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.776843][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.783141][T23188] [ 2964.785447][T23188] Uninit was stored to memory at: [ 2964.790451][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.796194][T23188] __msan_chain_origin+0x50/0x90 [ 2964.801154][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.806243][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.811160][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.815640][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.820311][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.826356][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.832679][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.838040][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.842882][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.847378][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.853686][T23188] [ 2964.855992][T23188] Uninit was stored to memory at: [ 2964.861014][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.866712][T23188] __msan_chain_origin+0x50/0x90 [ 2964.872079][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.877169][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.882095][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.886582][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.891246][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.897297][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.903436][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.908649][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.913479][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.917989][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2964.924301][T23188] [ 2964.926631][T23188] Uninit was stored to memory at: [ 2964.931723][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2964.937420][T23188] __msan_chain_origin+0x50/0x90 [ 2964.942343][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2964.947435][T23188] get_compat_msghdr+0x108/0x2b0 [ 2964.952422][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2964.956925][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2964.961604][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2964.968369][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2964.975197][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2964.980390][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2964.985240][T23188] do_SYSENTER_32+0x73/0x90 [ 2964.994768][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.001065][T23188] [ 2965.003385][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2965.010047][T23188] do_recvmmsg+0xbf/0x22c0 [ 2965.014440][T23188] do_recvmmsg+0xbf/0x22c0 [ 2965.188089][T23188] not chained 1880000 origins [ 2965.192823][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2965.201474][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2965.211508][T23188] Call Trace: [ 2965.214781][T23188] dump_stack+0x21c/0x280 [ 2965.219114][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2965.224851][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.230048][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.235237][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.240430][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2965.245968][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2965.252070][T23188] ? _copy_from_user+0x201/0x310 [ 2965.257092][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.262273][T23188] __msan_chain_origin+0x50/0x90 [ 2965.267191][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.272309][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.277256][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.281807][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.287022][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2965.292930][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2965.298143][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2965.303445][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2965.308199][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2965.312940][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.317618][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.323675][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.329823][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.335012][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.339874][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.344369][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.350671][T23188] RIP: 0023:0xf7f96549 [ 2965.354708][T23188] Code: Bad RIP value. [ 2965.358759][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2965.367161][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2965.375113][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2965.383152][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2965.391108][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2965.399064][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2965.407031][T23188] Uninit was stored to memory at: [ 2965.412041][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.417756][T23188] __msan_chain_origin+0x50/0x90 [ 2965.422675][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.427768][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.432683][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.437167][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.441839][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.447882][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.454010][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.459196][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.464037][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.468517][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.474808][T23188] [ 2965.477110][T23188] Uninit was stored to memory at: [ 2965.482117][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.487831][T23188] __msan_chain_origin+0x50/0x90 [ 2965.492746][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.498466][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.503393][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.507886][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.512555][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.518610][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.524756][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.529943][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.534767][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.539259][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.545576][T23188] [ 2965.547893][T23188] Uninit was stored to memory at: [ 2965.552915][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.558622][T23188] __msan_chain_origin+0x50/0x90 [ 2965.563562][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.568651][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.573567][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.578070][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.582751][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.588796][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.594924][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.600116][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.604962][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.609614][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.615954][T23188] [ 2965.618283][T23188] Uninit was stored to memory at: [ 2965.623306][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.629013][T23188] __msan_chain_origin+0x50/0x90 [ 2965.633957][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.639058][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.643984][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.648463][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.653116][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.659170][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.665328][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.670504][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.675330][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.679822][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.686129][T23188] [ 2965.688432][T23188] Uninit was stored to memory at: [ 2965.693436][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.699231][T23188] __msan_chain_origin+0x50/0x90 [ 2965.704173][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.709274][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.714186][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.718673][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.723340][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.729392][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.735552][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.740740][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.745582][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.750065][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.756369][T23188] [ 2965.758675][T23188] Uninit was stored to memory at: [ 2965.763719][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.769418][T23188] __msan_chain_origin+0x50/0x90 [ 2965.774341][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.779441][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.784369][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.788860][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.793514][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.799569][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.805713][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.810909][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.815733][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.820227][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.826535][T23188] [ 2965.828838][T23188] Uninit was stored to memory at: [ 2965.833842][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2965.839565][T23188] __msan_chain_origin+0x50/0x90 [ 2965.844496][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2965.849592][T23188] get_compat_msghdr+0x108/0x2b0 [ 2965.854517][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2965.859005][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2965.863673][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2965.869730][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2965.875861][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2965.881055][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2965.885893][T23188] do_SYSENTER_32+0x73/0x90 [ 2965.890373][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2965.896674][T23188] [ 2965.898989][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2965.905653][T23188] do_recvmmsg+0xbf/0x22c0 [ 2965.910058][T23188] do_recvmmsg+0xbf/0x22c0 [ 2966.112245][T23188] not chained 1890000 origins [ 2966.116969][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2966.125632][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2966.135689][T23188] Call Trace: [ 2966.138991][T23188] dump_stack+0x21c/0x280 [ 2966.143334][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2966.149083][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2966.155070][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2966.160624][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2966.166726][T23188] ? _copy_from_user+0x201/0x310 [ 2966.171673][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2966.176878][T23188] __msan_chain_origin+0x50/0x90 [ 2966.181826][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.186959][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.191914][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.196439][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2966.201653][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2966.207551][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2966.212761][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2966.218056][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2966.222820][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2966.227588][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.232294][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.238382][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.244547][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.249762][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.254627][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.259139][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.265466][T23188] RIP: 0023:0xf7f96549 [ 2966.270915][T23188] Code: Bad RIP value. [ 2966.275055][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2966.283534][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2966.291537][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2966.299502][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2966.307452][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2966.315406][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2966.323363][T23188] Uninit was stored to memory at: [ 2966.328384][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.334096][T23188] __msan_chain_origin+0x50/0x90 [ 2966.339014][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.344139][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.349057][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.353538][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.358196][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.364241][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.370394][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.375612][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.380438][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.384918][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.391232][T23188] [ 2966.393535][T23188] Uninit was stored to memory at: [ 2966.398550][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.404257][T23188] __msan_chain_origin+0x50/0x90 [ 2966.409206][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.414297][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.419212][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.423709][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.428368][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.434412][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.440550][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.445743][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.450575][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.455074][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.461370][T23188] [ 2966.463675][T23188] Uninit was stored to memory at: [ 2966.469549][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.475245][T23188] __msan_chain_origin+0x50/0x90 [ 2966.480186][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.485274][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.490208][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.494689][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.499360][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.505434][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.511568][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.516758][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.521587][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.526066][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.532361][T23188] [ 2966.534680][T23188] Uninit was stored to memory at: [ 2966.539703][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.545397][T23188] __msan_chain_origin+0x50/0x90 [ 2966.550315][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.555403][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.560425][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.564903][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.569558][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.575601][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.581735][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.586934][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.591821][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.596316][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.602612][T23188] [ 2966.604919][T23188] Uninit was stored to memory at: [ 2966.609935][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.615668][T23188] __msan_chain_origin+0x50/0x90 [ 2966.620611][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.625714][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.630633][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.635115][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.639771][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.645815][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.651949][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.657124][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.661953][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.666448][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.672761][T23188] [ 2966.675064][T23188] Uninit was stored to memory at: [ 2966.680069][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.685773][T23188] __msan_chain_origin+0x50/0x90 [ 2966.690688][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.695801][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.700715][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.705211][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.709894][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.715943][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.722079][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.727253][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.732083][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.736563][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.742901][T23188] [ 2966.745205][T23188] Uninit was stored to memory at: [ 2966.750210][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2966.755904][T23188] __msan_chain_origin+0x50/0x90 [ 2966.760819][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2966.765906][T23188] get_compat_msghdr+0x108/0x2b0 [ 2966.770820][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2966.775301][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2966.779958][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2966.786002][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2966.792134][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2966.797311][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2966.802139][T23188] do_SYSENTER_32+0x73/0x90 [ 2966.806621][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2966.812916][T23188] [ 2966.815238][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2966.823807][T23188] do_recvmmsg+0xbf/0x22c0 [ 2966.828213][T23188] do_recvmmsg+0xbf/0x22c0 [ 2967.040964][T23188] not chained 1900000 origins [ 2967.045693][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2967.054360][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2967.064416][T23188] Call Trace: [ 2967.067719][T23188] dump_stack+0x21c/0x280 [ 2967.072063][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2967.077799][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2967.083011][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2967.088835][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2967.094043][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2967.099600][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2967.105678][T23188] ? _copy_from_user+0x201/0x310 [ 2967.110667][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2967.115869][T23188] __msan_chain_origin+0x50/0x90 [ 2967.120803][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.125945][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.130869][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.135387][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2967.140592][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2967.146486][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2967.151673][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2967.156940][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2967.161705][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2967.166465][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.171133][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.177190][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.183333][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.188533][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.193401][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.197910][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.204236][T23188] RIP: 0023:0xf7f96549 [ 2967.208292][T23188] Code: Bad RIP value. [ 2967.212352][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2967.220767][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2967.228738][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2967.236775][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2967.244726][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2967.252711][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2967.260687][T23188] Uninit was stored to memory at: [ 2967.265734][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.271448][T23188] __msan_chain_origin+0x50/0x90 [ 2967.276381][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.281471][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.286394][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.290896][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.295726][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.301854][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.308010][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.313215][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.318048][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.322532][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.328835][T23188] [ 2967.331183][T23188] Uninit was stored to memory at: [ 2967.336278][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.342025][T23188] __msan_chain_origin+0x50/0x90 [ 2967.347463][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.352557][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.357473][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.361953][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.366628][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.372676][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.378821][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.384011][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.388850][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.393354][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.399773][T23188] [ 2967.402086][T23188] Uninit was stored to memory at: [ 2967.407092][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.412799][T23188] __msan_chain_origin+0x50/0x90 [ 2967.417717][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.422806][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.427719][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.432202][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.436860][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.442903][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.449048][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.454237][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.459067][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.463546][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.469848][T23188] [ 2967.472200][T23188] Uninit was stored to memory at: [ 2967.477204][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.482903][T23188] __msan_chain_origin+0x50/0x90 [ 2967.487828][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.492933][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.497860][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.502352][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.507006][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.513077][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.519311][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.524489][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.529331][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.533844][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.540169][T23188] [ 2967.542493][T23188] Uninit was stored to memory at: [ 2967.547497][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.553212][T23188] __msan_chain_origin+0x50/0x90 [ 2967.558129][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.563228][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.568161][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.572678][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.577351][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.583399][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.589804][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.594994][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.599844][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.604357][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.610659][T23188] [ 2967.612967][T23188] Uninit was stored to memory at: [ 2967.617985][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.623709][T23188] __msan_chain_origin+0x50/0x90 [ 2967.628641][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.633844][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.638770][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.643255][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.647928][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.654000][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.660137][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.665445][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.670288][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.674784][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.681343][T23188] [ 2967.683646][T23188] Uninit was stored to memory at: [ 2967.688663][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2967.694372][T23188] __msan_chain_origin+0x50/0x90 [ 2967.699291][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2967.704378][T23188] get_compat_msghdr+0x108/0x2b0 [ 2967.709304][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2967.713797][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2967.718454][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2967.724512][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2967.730660][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2967.735851][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2967.740687][T23188] do_SYSENTER_32+0x73/0x90 [ 2967.745173][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2967.751470][T23188] [ 2967.753775][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2967.760445][T23188] do_recvmmsg+0xbf/0x22c0 [ 2967.764838][T23188] do_recvmmsg+0xbf/0x22c0 [ 2968.051111][T23188] not chained 1910000 origins [ 2968.055830][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2968.064488][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2968.074537][T23188] Call Trace: [ 2968.077845][T23188] dump_stack+0x21c/0x280 [ 2968.082174][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2968.087906][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.093101][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2968.098647][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2968.104696][T23188] ? _copy_from_user+0x201/0x310 [ 2968.109638][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.114830][T23188] __msan_chain_origin+0x50/0x90 [ 2968.119770][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.124885][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.129837][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.134361][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.139632][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2968.145506][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.150705][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2968.155994][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2968.160740][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2968.165530][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.170217][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.176302][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.182445][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.187630][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.195331][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.199820][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.206122][T23188] RIP: 0023:0xf7f96549 [ 2968.210170][T23188] Code: Bad RIP value. [ 2968.214269][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2968.222658][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2968.230620][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2968.238583][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2968.246543][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2968.254569][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2968.262718][T23188] Uninit was stored to memory at: [ 2968.267768][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.273483][T23188] __msan_chain_origin+0x50/0x90 [ 2968.278414][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.283530][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.288469][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.292973][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.297633][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.303696][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.309863][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.315066][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.319945][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.324428][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.330726][T23188] [ 2968.333032][T23188] Uninit was stored to memory at: [ 2968.338038][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.343734][T23188] __msan_chain_origin+0x50/0x90 [ 2968.348662][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.353768][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.358712][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.363192][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.367861][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.373928][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.380061][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.385245][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.390093][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.394585][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.400882][T23188] [ 2968.403187][T23188] Uninit was stored to memory at: [ 2968.408206][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.413938][T23188] __msan_chain_origin+0x50/0x90 [ 2968.418856][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.423944][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.428867][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.433361][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.438029][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.444087][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.450235][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.455442][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.460272][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.464768][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.471075][T23188] [ 2968.473398][T23188] Uninit was stored to memory at: [ 2968.478428][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.484156][T23188] __msan_chain_origin+0x50/0x90 [ 2968.489089][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.494217][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.499141][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.503634][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.508304][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.514464][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.520620][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.525818][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.530669][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.535173][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.541470][T23188] [ 2968.543775][T23188] Uninit was stored to memory at: [ 2968.548880][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.554591][T23188] __msan_chain_origin+0x50/0x90 [ 2968.559528][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.564617][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.569552][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.574071][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.578731][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.584789][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.591285][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.596474][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.601313][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.605810][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.612113][T23188] [ 2968.614537][T23188] Uninit was stored to memory at: [ 2968.619543][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.625844][T23188] __msan_chain_origin+0x50/0x90 [ 2968.630760][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.635847][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.640760][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.645238][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.649904][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.655962][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.662095][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.667286][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.672116][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.676597][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.682891][T23188] [ 2968.685211][T23188] Uninit was stored to memory at: [ 2968.690227][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2968.695953][T23188] __msan_chain_origin+0x50/0x90 [ 2968.700871][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.705960][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.710875][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.715354][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2968.720024][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2968.726119][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2968.732252][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2968.737426][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2968.742275][T23188] do_SYSENTER_32+0x73/0x90 [ 2968.746754][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2968.753054][T23188] [ 2968.755445][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2968.762097][T23188] do_recvmmsg+0xbf/0x22c0 [ 2968.766505][T23188] do_recvmmsg+0xbf/0x22c0 [ 2968.914911][T23188] not chained 1920000 origins [ 2968.919639][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2968.928371][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2968.938429][T23188] Call Trace: [ 2968.941734][T23188] dump_stack+0x21c/0x280 [ 2968.946110][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2968.951859][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.957065][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2968.962631][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2968.968712][T23188] ? _copy_from_user+0x201/0x310 [ 2968.973660][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2968.978864][T23188] __msan_chain_origin+0x50/0x90 [ 2968.983816][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2968.988951][T23188] get_compat_msghdr+0x108/0x2b0 [ 2968.993904][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2968.998431][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.003638][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2969.009544][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.014877][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2969.020176][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2969.025043][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2969.029822][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.034527][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.040615][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.046781][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.052691][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.057555][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.062100][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.068454][T23188] RIP: 0023:0xf7f96549 [ 2969.072647][T23188] Code: Bad RIP value. [ 2969.076716][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2969.085378][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2969.093362][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2969.101336][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2969.109314][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2969.117288][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2969.125270][T23188] Uninit was stored to memory at: [ 2969.130310][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.136038][T23188] __msan_chain_origin+0x50/0x90 [ 2969.140981][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.146095][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.151035][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.155544][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.160226][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.166296][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.172458][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.177657][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.182513][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.187369][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.194815][T23188] [ 2969.197140][T23188] Uninit was stored to memory at: [ 2969.202179][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.207902][T23188] __msan_chain_origin+0x50/0x90 [ 2969.212855][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.217970][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.222907][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.227408][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.232091][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.238162][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.244414][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.249603][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.254447][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.258938][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.265236][T23188] [ 2969.267541][T23188] Uninit was stored to memory at: [ 2969.272561][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.278274][T23188] __msan_chain_origin+0x50/0x90 [ 2969.283250][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.289309][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.295195][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.299693][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.304406][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.310500][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.316704][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.321952][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.326782][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.331267][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.337579][T23188] [ 2969.339887][T23188] Uninit was stored to memory at: [ 2969.344895][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.350691][T23188] __msan_chain_origin+0x50/0x90 [ 2969.355624][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.360717][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.365631][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.370119][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.374787][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.380835][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.386990][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.392178][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.397024][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.401504][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.407806][T23188] [ 2969.410127][T23188] Uninit was stored to memory at: [ 2969.415146][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.420853][T23188] __msan_chain_origin+0x50/0x90 [ 2969.425788][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.430876][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.435791][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.440269][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.444923][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.450998][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.457131][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.462314][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.467142][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.471642][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.477960][T23188] [ 2969.480301][T23188] Uninit was stored to memory at: [ 2969.485310][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.491019][T23188] __msan_chain_origin+0x50/0x90 [ 2969.495947][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.501054][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.505969][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.510468][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.515154][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.521214][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.527363][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.532556][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.537383][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.541864][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.548175][T23188] [ 2969.550496][T23188] Uninit was stored to memory at: [ 2969.555512][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2969.561211][T23188] __msan_chain_origin+0x50/0x90 [ 2969.566126][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.571216][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.576138][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.581157][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.585831][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.591878][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.598021][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.603210][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.608050][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.612565][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.618862][T23188] [ 2969.621189][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2969.627848][T23188] do_recvmmsg+0xbf/0x22c0 [ 2969.632255][T23188] do_recvmmsg+0xbf/0x22c0 [ 2969.847327][T23188] not chained 1930000 origins [ 2969.852057][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2969.860726][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2969.870821][T23188] Call Trace: [ 2969.874098][T23188] dump_stack+0x21c/0x280 [ 2969.878499][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2969.884219][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.889396][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2969.894918][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2969.900963][T23188] ? _copy_from_user+0x201/0x310 [ 2969.905879][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.911081][T23188] __msan_chain_origin+0x50/0x90 [ 2969.916000][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2969.921099][T23188] get_compat_msghdr+0x108/0x2b0 [ 2969.926018][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2969.930768][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.936025][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2969.941897][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2969.947075][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2969.952339][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2969.957078][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2969.961827][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2969.966489][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2969.972552][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2969.978689][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2969.983870][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2969.988721][T23188] do_SYSENTER_32+0x73/0x90 [ 2969.993226][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2969.999529][T23188] RIP: 0023:0xf7f96549 [ 2970.003567][T23188] Code: Bad RIP value. [ 2970.007609][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2970.016008][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2970.023958][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2970.031907][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2970.039866][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2970.047814][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2970.055768][T23188] Uninit was stored to memory at: [ 2970.060784][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.066480][T23188] __msan_chain_origin+0x50/0x90 [ 2970.071396][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.076657][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.081588][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.086067][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.090826][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.096869][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.103015][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.108194][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.113022][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.117590][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.123908][T23188] [ 2970.126228][T23188] Uninit was stored to memory at: [ 2970.131250][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.137300][T23188] __msan_chain_origin+0x50/0x90 [ 2970.142220][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.147309][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.152267][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.156811][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.161468][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.167521][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.173725][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.178900][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.183727][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.188208][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.194504][T23188] [ 2970.196825][T23188] Uninit was stored to memory at: [ 2970.201845][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.208418][T23188] __msan_chain_origin+0x50/0x90 [ 2970.213337][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.218425][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.223338][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.227818][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.233183][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.239226][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.246430][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.251609][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.256437][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.260941][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.267238][T23188] [ 2970.269557][T23188] Uninit was stored to memory at: [ 2970.274568][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.280263][T23188] __msan_chain_origin+0x50/0x90 [ 2970.285290][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.290379][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.295317][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.299802][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.304460][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.310515][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.316658][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.321837][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.326689][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.331173][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.337468][T23188] [ 2970.339773][T23188] Uninit was stored to memory at: [ 2970.344777][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.350470][T23188] __msan_chain_origin+0x50/0x90 [ 2970.355400][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.360488][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.365402][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.369882][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.374538][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.380606][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.386735][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.391912][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.396737][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.401219][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.407513][T23188] [ 2970.409816][T23188] Uninit was stored to memory at: [ 2970.414819][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.420514][T23188] __msan_chain_origin+0x50/0x90 [ 2970.425433][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.430521][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.435464][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.439946][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.444628][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.450677][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.456824][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.462003][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.467628][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.472121][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.478417][T23188] [ 2970.480720][T23188] Uninit was stored to memory at: [ 2970.485740][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.491447][T23188] __msan_chain_origin+0x50/0x90 [ 2970.496362][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.501448][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.506361][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.510855][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.515533][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.521591][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.527811][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.533029][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.537856][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.542335][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.548630][T23188] [ 2970.550932][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2970.557586][T23188] do_recvmmsg+0xbf/0x22c0 [ 2970.561992][T23188] do_recvmmsg+0xbf/0x22c0 [ 2970.706170][T23188] not chained 1940000 origins [ 2970.710896][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2970.719562][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2970.729611][T23188] Call Trace: [ 2970.732910][T23188] dump_stack+0x21c/0x280 [ 2970.737250][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2970.743003][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2970.748381][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2970.753931][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2970.760007][T23188] ? _copy_from_user+0x201/0x310 [ 2970.764954][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2970.770156][T23188] __msan_chain_origin+0x50/0x90 [ 2970.775106][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.780237][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.785186][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.789711][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2970.794920][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2970.800821][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2970.806029][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2970.811353][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2970.816121][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2970.820891][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.825611][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.831690][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.837850][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.843059][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.847921][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.852432][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.858757][T23188] RIP: 0023:0xf7f96549 [ 2970.862830][T23188] Code: Bad RIP value. [ 2970.866894][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2970.875343][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2970.883318][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2970.891288][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2970.899257][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2970.907229][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2970.915210][T23188] Uninit was stored to memory at: [ 2970.920681][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.926402][T23188] __msan_chain_origin+0x50/0x90 [ 2970.931342][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2970.936452][T23188] get_compat_msghdr+0x108/0x2b0 [ 2970.941394][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2970.945896][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2970.950579][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2970.956675][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2970.962806][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2970.967995][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2970.972823][T23188] do_SYSENTER_32+0x73/0x90 [ 2970.977303][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2970.983598][T23188] [ 2970.985902][T23188] Uninit was stored to memory at: [ 2970.990922][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2970.996634][T23188] __msan_chain_origin+0x50/0x90 [ 2971.001565][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.006669][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.011597][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.016105][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.020758][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.026803][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.032932][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.038109][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.042936][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.047439][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.053741][T23188] [ 2971.056052][T23188] Uninit was stored to memory at: [ 2971.061063][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.066765][T23188] __msan_chain_origin+0x50/0x90 [ 2971.074268][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.079362][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.084278][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.088802][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.093481][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.099528][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.105663][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.110847][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.115674][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.120157][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.126458][T23188] [ 2971.128766][T23188] Uninit was stored to memory at: [ 2971.133769][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.139464][T23188] __msan_chain_origin+0x50/0x90 [ 2971.144380][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.149467][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.154380][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.158864][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.163518][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.169561][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.175698][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.180959][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.185784][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.190316][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.196667][T23188] [ 2971.199021][T23188] Uninit was stored to memory at: [ 2971.204068][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.209798][T23188] __msan_chain_origin+0x50/0x90 [ 2971.214720][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.219846][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.224758][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.229235][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.233887][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.239928][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.246152][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.251327][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.256194][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.260674][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.267103][T23188] [ 2971.269420][T23188] Uninit was stored to memory at: [ 2971.274435][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.280139][T23188] __msan_chain_origin+0x50/0x90 [ 2971.285187][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.290288][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.295252][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.299743][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.304409][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.310452][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.316582][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.321761][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.326590][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.331074][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.337457][T23188] [ 2971.339759][T23188] Uninit was stored to memory at: [ 2971.344764][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.350463][T23188] __msan_chain_origin+0x50/0x90 [ 2971.355377][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.360463][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.365376][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.369853][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.374504][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.380553][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.386682][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.391894][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.396754][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.401236][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.407534][T23188] [ 2971.409846][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2971.416491][T23188] do_recvmmsg+0xbf/0x22c0 [ 2971.420878][T23188] do_recvmmsg+0xbf/0x22c0 [ 2971.573483][T23188] not chained 1950000 origins [ 2971.578203][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2971.586865][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2971.596916][T23188] Call Trace: [ 2971.600214][T23188] dump_stack+0x21c/0x280 [ 2971.604553][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2971.610297][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2971.615501][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2971.621051][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2971.627122][T23188] ? _copy_from_user+0x201/0x310 [ 2971.632065][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2971.637278][T23188] __msan_chain_origin+0x50/0x90 [ 2971.642220][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.647346][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.652297][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.656839][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2971.662042][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2971.667948][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2971.673152][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2971.678525][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2971.683302][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2971.688073][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.692767][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.698851][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.705010][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.710220][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.715067][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.719555][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.725856][T23188] RIP: 0023:0xf7f96549 [ 2971.729896][T23188] Code: Bad RIP value. [ 2971.733936][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2971.742322][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2971.750272][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2971.758229][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2971.766187][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2971.774134][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2971.782089][T23188] Uninit was stored to memory at: [ 2971.787108][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.792802][T23188] __msan_chain_origin+0x50/0x90 [ 2971.797718][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.802989][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.807901][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.812380][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.817033][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.823099][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.829229][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.834406][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.839244][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.843724][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.850018][T23188] [ 2971.852336][T23188] Uninit was stored to memory at: [ 2971.857338][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.863031][T23188] __msan_chain_origin+0x50/0x90 [ 2971.867946][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.873032][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.877956][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.882433][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.887084][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.893124][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.899267][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.904441][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.909278][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.913754][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.920049][T23188] [ 2971.922351][T23188] Uninit was stored to memory at: [ 2971.927354][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2971.933061][T23188] __msan_chain_origin+0x50/0x90 [ 2971.938036][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2971.943132][T23188] get_compat_msghdr+0x108/0x2b0 [ 2971.948071][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2971.952552][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2971.957208][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2971.963251][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2971.969423][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2971.974599][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2971.979427][T23188] do_SYSENTER_32+0x73/0x90 [ 2971.983904][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2971.990196][T23188] [ 2971.992498][T23188] Uninit was stored to memory at: [ 2971.997509][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.003213][T23188] __msan_chain_origin+0x50/0x90 [ 2972.008126][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.013224][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.018135][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.022611][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.027268][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.033322][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.039452][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.044640][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.049465][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.053945][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.060252][T23188] [ 2972.062564][T23188] Uninit was stored to memory at: [ 2972.067566][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.073266][T23188] __msan_chain_origin+0x50/0x90 [ 2972.078178][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.083266][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.088191][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.092667][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.097327][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.103367][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.109498][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.114671][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.119519][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.123996][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.130296][T23188] [ 2972.132605][T23188] Uninit was stored to memory at: [ 2972.137657][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.143352][T23188] __msan_chain_origin+0x50/0x90 [ 2972.148270][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.153371][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.158283][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.162757][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.167412][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.173454][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.179582][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.184756][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.189580][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.194059][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.200367][T23188] [ 2972.202669][T23188] Uninit was stored to memory at: [ 2972.207670][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.213363][T23188] __msan_chain_origin+0x50/0x90 [ 2972.218274][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.223357][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.228269][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.232760][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.237412][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.243452][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.249586][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.254777][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.259603][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.264082][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.270376][T23188] [ 2972.272680][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2972.279325][T23188] do_recvmmsg+0xbf/0x22c0 [ 2972.283728][T23188] do_recvmmsg+0xbf/0x22c0 [ 2972.444051][T23188] not chained 1960000 origins [ 2972.448781][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2972.457443][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2972.467496][T23188] Call Trace: [ 2972.470802][T23188] dump_stack+0x21c/0x280 [ 2972.475141][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2972.480887][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2972.486088][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2972.491641][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2972.497715][T23188] ? _copy_from_user+0x201/0x310 [ 2972.502665][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2972.507865][T23188] __msan_chain_origin+0x50/0x90 [ 2972.512810][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.517939][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.522888][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.527410][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2972.532613][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2972.538510][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2972.543715][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2972.549005][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2972.553772][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2972.558541][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.563238][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.569319][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.575481][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.580691][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.585549][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.590056][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.596378][T23188] RIP: 0023:0xf7f96549 [ 2972.600435][T23188] Code: Bad RIP value. [ 2972.604498][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2972.612922][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2972.621034][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2972.629004][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2972.636968][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2972.644918][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2972.652909][T23188] Uninit was stored to memory at: [ 2972.657913][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.663605][T23188] __msan_chain_origin+0x50/0x90 [ 2972.668518][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.673602][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.678515][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.682994][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.687647][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.693688][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.699817][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.705003][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.709829][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.714482][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.720774][T23188] [ 2972.723088][T23188] Uninit was stored to memory at: [ 2972.728086][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.733864][T23188] __msan_chain_origin+0x50/0x90 [ 2972.738776][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.743870][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.748780][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.753267][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.757920][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.763973][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.770111][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.775283][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.780110][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.784589][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.790883][T23188] [ 2972.793196][T23188] Uninit was stored to memory at: [ 2972.798207][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.803912][T23188] __msan_chain_origin+0x50/0x90 [ 2972.808827][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.813912][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.818825][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.823302][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.827954][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.833997][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.840136][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.845320][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.850149][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.854716][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.861010][T23188] [ 2972.863312][T23188] Uninit was stored to memory at: [ 2972.868324][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.874026][T23188] __msan_chain_origin+0x50/0x90 [ 2972.878937][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.884022][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.888958][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.893436][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.898087][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.904138][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.910267][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.915440][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.920266][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.924755][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2972.931049][T23188] [ 2972.933350][T23188] Uninit was stored to memory at: [ 2972.938361][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2972.944054][T23188] __msan_chain_origin+0x50/0x90 [ 2972.948969][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2972.954065][T23188] get_compat_msghdr+0x108/0x2b0 [ 2972.958976][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2972.963451][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2972.968116][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2972.974172][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2972.980315][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2972.985502][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2972.990336][T23188] do_SYSENTER_32+0x73/0x90 [ 2972.994812][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.001120][T23188] [ 2973.003422][T23188] Uninit was stored to memory at: [ 2973.008421][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.014115][T23188] __msan_chain_origin+0x50/0x90 [ 2973.019027][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.024111][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.029035][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.033511][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.038164][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.044202][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.050330][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.055504][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.060328][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.064806][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.071100][T23188] [ 2973.073401][T23188] Uninit was stored to memory at: [ 2973.078413][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.084105][T23188] __msan_chain_origin+0x50/0x90 [ 2973.089018][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.094116][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.099028][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.103505][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.108156][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.114198][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.120352][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.125538][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.130365][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.134850][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.141144][T23188] [ 2973.143450][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2973.150107][T23188] do_recvmmsg+0xbf/0x22c0 [ 2973.154538][T23188] do_recvmmsg+0xbf/0x22c0 [ 2973.431306][T23188] not chained 1970000 origins [ 2973.436015][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2973.444681][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2973.454733][T23188] Call Trace: [ 2973.458032][T23188] dump_stack+0x21c/0x280 [ 2973.462373][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2973.468121][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2973.473338][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2973.478891][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2973.484964][T23188] ? _copy_from_user+0x201/0x310 [ 2973.489910][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2973.495099][T23188] __msan_chain_origin+0x50/0x90 [ 2973.500020][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.505117][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.510039][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.514529][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2973.519708][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2973.525580][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2973.530816][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2973.536077][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2973.540815][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2973.545559][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.550220][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.556353][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.562620][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.567796][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.572621][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.577102][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.583418][T23188] RIP: 0023:0xf7f96549 [ 2973.587457][T23188] Code: Bad RIP value. [ 2973.591496][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2973.599887][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2973.607832][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2973.615779][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2973.623726][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2973.632639][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2973.640659][T23188] Uninit was stored to memory at: [ 2973.645664][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.651403][T23188] __msan_chain_origin+0x50/0x90 [ 2973.656328][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.661414][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.666325][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.670839][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.675525][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.681588][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.687721][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.692894][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.697762][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.702242][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.708540][T23188] [ 2973.710844][T23188] Uninit was stored to memory at: [ 2973.715845][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.721537][T23188] __msan_chain_origin+0x50/0x90 [ 2973.726484][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.731568][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.736478][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.740954][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.745610][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.751650][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.757778][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.762949][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.767774][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.772250][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.778663][T23188] [ 2973.780966][T23188] Uninit was stored to memory at: [ 2973.785966][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.791659][T23188] __msan_chain_origin+0x50/0x90 [ 2973.796573][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.801664][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.806574][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.811051][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.815705][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.821763][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.827891][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.833063][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.837903][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.842394][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.848688][T23188] [ 2973.850987][T23188] Uninit was stored to memory at: [ 2973.855985][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.861699][T23188] __msan_chain_origin+0x50/0x90 [ 2973.866609][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.871694][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.876607][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.881087][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.885743][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.891784][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.897927][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.903142][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.908077][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.912555][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.918859][T23188] [ 2973.921159][T23188] Uninit was stored to memory at: [ 2973.926157][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2973.931851][T23188] __msan_chain_origin+0x50/0x90 [ 2973.936763][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2973.941848][T23188] get_compat_msghdr+0x108/0x2b0 [ 2973.946760][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2973.951254][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2973.955908][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2973.961949][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2973.968079][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2973.973252][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2973.978089][T23188] do_SYSENTER_32+0x73/0x90 [ 2973.982566][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2973.988860][T23188] [ 2973.991162][T23188] Uninit was stored to memory at: [ 2973.996162][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.001881][T23188] __msan_chain_origin+0x50/0x90 [ 2974.006793][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.011890][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.019495][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.023981][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.028632][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.034672][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.040801][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.045996][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.050821][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.055301][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.061594][T23188] [ 2974.063895][T23188] Uninit was stored to memory at: [ 2974.068908][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.074607][T23188] __msan_chain_origin+0x50/0x90 [ 2974.079519][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.084616][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.089538][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.094016][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.098666][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.104715][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.110853][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.116035][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.120871][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.125363][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.131763][T23188] [ 2974.134069][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2974.140720][T23188] do_recvmmsg+0xbf/0x22c0 [ 2974.145158][T23188] do_recvmmsg+0xbf/0x22c0 [ 2974.331338][T23188] not chained 1980000 origins [ 2974.336059][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2974.344724][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2974.354781][T23188] Call Trace: [ 2974.358167][T23188] dump_stack+0x21c/0x280 [ 2974.362507][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2974.368250][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2974.373455][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2974.379007][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2974.385080][T23188] ? _copy_from_user+0x201/0x310 [ 2974.390023][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2974.395224][T23188] __msan_chain_origin+0x50/0x90 [ 2974.400170][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.405298][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.410277][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.414799][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2974.420005][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2974.425904][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2974.431110][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2974.436398][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2974.441162][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2974.445928][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.450621][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.456697][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.462858][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.468068][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.472925][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.477433][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.483770][T23188] RIP: 0023:0xf7f96549 [ 2974.487827][T23188] Code: Bad RIP value. [ 2974.491887][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2974.500298][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2974.508268][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2974.516236][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2974.524186][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2974.532160][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2974.540234][T23188] Uninit was stored to memory at: [ 2974.545242][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.550946][T23188] __msan_chain_origin+0x50/0x90 [ 2974.555861][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.560960][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.565871][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.570360][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.575015][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.581057][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.587185][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.592359][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.597209][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.601689][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.607995][T23188] [ 2974.610325][T23188] Uninit was stored to memory at: [ 2974.615324][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.621028][T23188] __msan_chain_origin+0x50/0x90 [ 2974.625939][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.631025][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.635933][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.640409][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.645060][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.651101][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.657232][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.662418][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.667242][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.671721][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.678023][T23188] [ 2974.680324][T23188] Uninit was stored to memory at: [ 2974.685324][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.691028][T23188] __msan_chain_origin+0x50/0x90 [ 2974.695940][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.701024][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.705933][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.710410][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.715061][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.721100][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.727226][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.732413][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.737237][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.741715][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.748107][T23188] [ 2974.750407][T23188] Uninit was stored to memory at: [ 2974.755407][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.761110][T23188] __msan_chain_origin+0x50/0x90 [ 2974.766023][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.771109][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.776032][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.780508][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.785178][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.791221][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.797362][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.802538][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.807369][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.811851][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.818155][T23188] [ 2974.820457][T23188] Uninit was stored to memory at: [ 2974.825459][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.831154][T23188] __msan_chain_origin+0x50/0x90 [ 2974.836080][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.841165][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.846075][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.850559][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.855220][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.861277][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.867406][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.872581][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.877407][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.881886][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.888180][T23188] [ 2974.890482][T23188] Uninit was stored to memory at: [ 2974.895480][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.901174][T23188] __msan_chain_origin+0x50/0x90 [ 2974.906096][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.911182][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.916092][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.920569][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.925221][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2974.931387][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2974.937520][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2974.942694][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2974.947523][T23188] do_SYSENTER_32+0x73/0x90 [ 2974.952001][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2974.958295][T23188] [ 2974.960597][T23188] Uninit was stored to memory at: [ 2974.965695][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2974.971416][T23188] __msan_chain_origin+0x50/0x90 [ 2974.976330][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2974.981427][T23188] get_compat_msghdr+0x108/0x2b0 [ 2974.986338][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2974.990814][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2974.995482][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.001544][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.007673][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.012846][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.017671][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.022160][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.028453][T23188] [ 2975.030754][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2975.037402][T23188] do_recvmmsg+0xbf/0x22c0 [ 2975.041792][T23188] do_recvmmsg+0xbf/0x22c0 [ 2975.200271][T23188] not chained 1990000 origins [ 2975.204995][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2975.213661][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2975.223714][T23188] Call Trace: [ 2975.227014][T23188] dump_stack+0x21c/0x280 [ 2975.231357][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2975.237104][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2975.242344][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2975.247896][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2975.253977][T23188] ? _copy_from_user+0x201/0x310 [ 2975.258922][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2975.264123][T23188] __msan_chain_origin+0x50/0x90 [ 2975.269066][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.274194][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.279146][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.283671][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2975.288879][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2975.294779][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2975.300001][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2975.305295][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2975.310061][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2975.314830][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.319525][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.325608][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.331770][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.336991][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.341853][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.346354][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.352829][T23188] RIP: 0023:0xf7f96549 [ 2975.356868][T23188] Code: Bad RIP value. [ 2975.360915][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2975.369307][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2975.377262][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2975.385224][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2975.393172][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2975.401134][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2975.409125][T23188] Uninit was stored to memory at: [ 2975.414167][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.419915][T23188] __msan_chain_origin+0x50/0x90 [ 2975.424833][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.429963][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.434880][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.439362][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.444018][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.450098][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.456229][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.461404][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.466358][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.470835][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.477165][T23188] [ 2975.479508][T23188] Uninit was stored to memory at: [ 2975.484515][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.490232][T23188] __msan_chain_origin+0x50/0x90 [ 2975.495144][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.500233][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.505154][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.509634][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.514286][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.520326][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.526452][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.531624][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.536448][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.540925][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.547219][T23188] [ 2975.549525][T23188] Uninit was stored to memory at: [ 2975.554538][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.560241][T23188] __msan_chain_origin+0x50/0x90 [ 2975.565154][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.570252][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.575174][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.579652][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.584304][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.590358][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.596491][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.601677][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.606522][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.611003][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.617306][T23188] [ 2975.619625][T23188] Uninit was stored to memory at: [ 2975.624638][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.630344][T23188] __msan_chain_origin+0x50/0x90 [ 2975.635257][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.640342][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.645271][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.649750][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.654404][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.660447][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.666577][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.671751][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.676575][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.681141][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.687446][T23188] [ 2975.689748][T23188] Uninit was stored to memory at: [ 2975.694760][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.700452][T23188] __msan_chain_origin+0x50/0x90 [ 2975.705372][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.710471][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.715390][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.719867][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.724519][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.730572][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.736700][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.741886][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.746722][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.751203][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.757497][T23188] [ 2975.759799][T23188] Uninit was stored to memory at: [ 2975.764813][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.770507][T23188] __msan_chain_origin+0x50/0x90 [ 2975.775423][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.780508][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.785424][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.789899][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.794552][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.800595][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.806727][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.811900][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.816724][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.821214][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.827508][T23188] [ 2975.829809][T23188] Uninit was stored to memory at: [ 2975.834821][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2975.840514][T23188] __msan_chain_origin+0x50/0x90 [ 2975.845433][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2975.850522][T23188] get_compat_msghdr+0x108/0x2b0 [ 2975.855439][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2975.859930][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2975.864602][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2975.870645][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2975.876772][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2975.881948][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2975.886771][T23188] do_SYSENTER_32+0x73/0x90 [ 2975.891249][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2975.897556][T23188] [ 2975.899859][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2975.906506][T23188] do_recvmmsg+0xbf/0x22c0 [ 2975.910897][T23188] do_recvmmsg+0xbf/0x22c0 [ 2976.102038][T23188] not chained 2000000 origins [ 2976.106870][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2976.115547][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2976.125610][T23188] Call Trace: [ 2976.128913][T23188] dump_stack+0x21c/0x280 [ 2976.133263][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2976.139009][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2976.144214][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2976.149767][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2976.155842][T23188] ? _copy_from_user+0x201/0x310 [ 2976.160786][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2976.165991][T23188] __msan_chain_origin+0x50/0x90 [ 2976.170945][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.176073][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.181025][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.185550][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2976.190755][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2976.196655][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2976.201863][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2976.207151][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2976.211917][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2976.216692][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.221388][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.227471][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.233631][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.238841][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.243696][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.248208][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.254525][T23188] RIP: 0023:0xf7f96549 [ 2976.258568][T23188] Code: Bad RIP value. [ 2976.262635][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2976.271035][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2976.279025][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2976.287023][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2976.295013][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2976.303090][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2976.311046][T23188] Uninit was stored to memory at: [ 2976.316054][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.321765][T23188] __msan_chain_origin+0x50/0x90 [ 2976.326678][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.331763][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.336673][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.341152][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.345804][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.351846][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.357977][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.363164][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.368002][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.372484][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.378780][T23188] [ 2976.381083][T23188] Uninit was stored to memory at: [ 2976.386097][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.391881][T23188] __msan_chain_origin+0x50/0x90 [ 2976.396793][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.401879][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.406790][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.411269][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.415918][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.421957][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.428096][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.433272][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.438097][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.442573][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.448881][T23188] [ 2976.451181][T23188] Uninit was stored to memory at: [ 2976.456178][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.461886][T23188] __msan_chain_origin+0x50/0x90 [ 2976.467031][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.472131][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.477050][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.481543][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.486213][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.492260][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.498391][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.503565][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.508405][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.512890][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.519194][T23188] [ 2976.521500][T23188] Uninit was stored to memory at: [ 2976.526506][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.532204][T23188] __msan_chain_origin+0x50/0x90 [ 2976.537117][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.542247][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.547159][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.551683][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.556345][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.562391][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.568524][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.573697][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.578540][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.583018][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.589310][T23188] [ 2976.591622][T23188] Uninit was stored to memory at: [ 2976.596623][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.602316][T23188] __msan_chain_origin+0x50/0x90 [ 2976.607250][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.612337][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.617252][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.621741][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.626402][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.632443][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.638572][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.643745][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.648570][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.653050][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.659342][T23188] [ 2976.661644][T23188] Uninit was stored to memory at: [ 2976.666654][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.672349][T23188] __msan_chain_origin+0x50/0x90 [ 2976.677264][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.682352][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.687284][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.691760][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.696411][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.702450][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.708580][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.713765][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.718591][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.723081][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.729374][T23188] [ 2976.731677][T23188] Uninit was stored to memory at: [ 2976.736784][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2976.742493][T23188] __msan_chain_origin+0x50/0x90 [ 2976.747405][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2976.752500][T23188] get_compat_msghdr+0x108/0x2b0 [ 2976.757411][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2976.761898][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2976.766569][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2976.772616][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2976.778745][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2976.783930][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2976.788768][T23188] do_SYSENTER_32+0x73/0x90 [ 2976.793246][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2976.799539][T23188] [ 2976.801839][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2976.808487][T23188] do_recvmmsg+0xbf/0x22c0 [ 2976.812877][T23188] do_recvmmsg+0xbf/0x22c0 [ 2977.002330][T23188] not chained 2010000 origins [ 2977.007051][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2977.015716][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2977.025765][T23188] Call Trace: [ 2977.029073][T23188] dump_stack+0x21c/0x280 [ 2977.033417][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2977.039161][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.044366][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2977.049918][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2977.056000][T23188] ? _copy_from_user+0x201/0x310 [ 2977.060950][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.066152][T23188] __msan_chain_origin+0x50/0x90 [ 2977.071097][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.076227][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.081178][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.085701][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.090912][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2977.096843][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.102053][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2977.107351][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2977.112119][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2977.116890][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.121621][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.127718][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.133888][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.139106][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.143971][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.148511][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.154838][T23188] RIP: 0023:0xf7f96549 [ 2977.158896][T23188] Code: Bad RIP value. [ 2977.162977][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2977.171383][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2977.179337][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2977.187285][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2977.195233][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2977.203180][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2977.212311][T23188] Uninit was stored to memory at: [ 2977.217326][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.223022][T23188] __msan_chain_origin+0x50/0x90 [ 2977.227938][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.233028][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.237965][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.242441][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.247094][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.253137][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.259276][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.264450][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.269290][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.273780][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.280085][T23188] [ 2977.282389][T23188] Uninit was stored to memory at: [ 2977.287400][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.293110][T23188] __msan_chain_origin+0x50/0x90 [ 2977.298045][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.303133][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.308049][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.312529][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.317194][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.323242][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.329372][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.334548][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.339460][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.343953][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.350250][T23188] [ 2977.352564][T23188] Uninit was stored to memory at: [ 2977.357566][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.363270][T23188] __msan_chain_origin+0x50/0x90 [ 2977.368184][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.373370][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.378289][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.382779][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.387434][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.393489][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.399632][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.404808][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.409642][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.414122][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.420427][T23188] [ 2977.422741][T23188] Uninit was stored to memory at: [ 2977.427753][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.433446][T23188] __msan_chain_origin+0x50/0x90 [ 2977.438372][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.443459][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.448383][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.452859][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.457517][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.463557][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.469687][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.474869][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.479695][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.484185][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.490480][T23188] [ 2977.492807][T23188] Uninit was stored to memory at: [ 2977.498936][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.504633][T23188] __msan_chain_origin+0x50/0x90 [ 2977.509549][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.514645][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.520698][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.525174][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.529843][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.535896][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.542026][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.547200][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.552036][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.556524][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.562817][T23188] [ 2977.565118][T23188] Uninit was stored to memory at: [ 2977.570129][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.575822][T23188] __msan_chain_origin+0x50/0x90 [ 2977.580734][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.585819][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.590730][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.595203][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.599855][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.605906][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.612140][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.617318][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.622157][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.626634][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.632928][T23188] [ 2977.635230][T23188] Uninit was stored to memory at: [ 2977.640241][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2977.645946][T23188] __msan_chain_origin+0x50/0x90 [ 2977.650858][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.655950][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.660862][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.665340][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.670000][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2977.676041][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2977.682181][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2977.687357][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2977.692179][T23188] do_SYSENTER_32+0x73/0x90 [ 2977.696657][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2977.702957][T23188] [ 2977.705257][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2977.711915][T23188] do_recvmmsg+0xbf/0x22c0 [ 2977.716308][T23188] do_recvmmsg+0xbf/0x22c0 [ 2977.874894][T23188] not chained 2020000 origins [ 2977.879616][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2977.888280][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2977.899462][T23188] Call Trace: [ 2977.902759][T23188] dump_stack+0x21c/0x280 [ 2977.907105][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2977.912847][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.918049][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2977.923600][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2977.929678][T23188] ? _copy_from_user+0x201/0x310 [ 2977.934625][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.939827][T23188] __msan_chain_origin+0x50/0x90 [ 2977.944774][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2977.949923][T23188] get_compat_msghdr+0x108/0x2b0 [ 2977.954882][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2977.959409][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.964739][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2977.970646][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2977.975938][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2977.981229][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2977.985995][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2977.990766][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2977.995462][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.001567][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.007730][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.012948][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.017805][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.022314][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.028739][T23188] RIP: 0023:0xf7f96549 [ 2978.032802][T23188] Code: Bad RIP value. [ 2978.036853][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2978.045238][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2978.053188][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2978.061147][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2978.069092][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2978.077039][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2978.084993][T23188] Uninit was stored to memory at: [ 2978.090001][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.095691][T23188] __msan_chain_origin+0x50/0x90 [ 2978.100604][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.105686][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.110622][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.115144][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.119807][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.125853][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.131986][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.137162][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.142037][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.146563][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.152860][T23188] [ 2978.155160][T23188] Uninit was stored to memory at: [ 2978.160161][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.165853][T23188] __msan_chain_origin+0x50/0x90 [ 2978.170767][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.175895][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.180849][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.185324][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.189977][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.196029][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.202159][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.207332][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.212169][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.216645][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.222938][T23188] [ 2978.225239][T23188] Uninit was stored to memory at: [ 2978.230242][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.235944][T23188] __msan_chain_origin+0x50/0x90 [ 2978.240857][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.245941][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.250852][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.255326][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.259993][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.266033][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.272171][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.277344][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.282169][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.286705][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.293146][T23188] [ 2978.295455][T23188] Uninit was stored to memory at: [ 2978.300464][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.306155][T23188] __msan_chain_origin+0x50/0x90 [ 2978.311068][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.316192][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.321103][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.325580][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.330236][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.336276][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.342405][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.347582][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.352422][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.357001][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.363302][T23188] [ 2978.365607][T23188] Uninit was stored to memory at: [ 2978.370614][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.376307][T23188] __msan_chain_origin+0x50/0x90 [ 2978.381229][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.386313][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.391226][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.395702][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.400356][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.406414][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.412544][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.417716][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.422554][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.427032][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.433350][T23188] [ 2978.435666][T23188] Uninit was stored to memory at: [ 2978.440767][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.446461][T23188] __msan_chain_origin+0x50/0x90 [ 2978.451374][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.456473][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.461400][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.465889][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.470556][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.476595][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.482731][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.487905][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.492730][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.497208][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.503501][T23188] [ 2978.505799][T23188] Uninit was stored to memory at: [ 2978.510821][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2978.516512][T23188] __msan_chain_origin+0x50/0x90 [ 2978.521427][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.526510][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.531420][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.535894][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.540584][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.546626][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2978.552758][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2978.557973][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2978.562799][T23188] do_SYSENTER_32+0x73/0x90 [ 2978.567287][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2978.573588][T23188] [ 2978.575891][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2978.582540][T23188] do_recvmmsg+0xbf/0x22c0 [ 2978.586928][T23188] do_recvmmsg+0xbf/0x22c0 [ 2978.872097][T23188] not chained 2030000 origins [ 2978.876909][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2978.885574][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2978.895605][T23188] Call Trace: [ 2978.898965][T23188] dump_stack+0x21c/0x280 [ 2978.903278][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2978.908990][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2978.914166][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2978.919718][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2978.925776][T23188] ? _copy_from_user+0x201/0x310 [ 2978.930725][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2978.935915][T23188] __msan_chain_origin+0x50/0x90 [ 2978.940869][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2978.945965][T23188] get_compat_msghdr+0x108/0x2b0 [ 2978.950886][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2978.955377][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2978.960557][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2978.966430][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2978.971621][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2978.976883][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2978.981622][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2978.986377][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2978.991040][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2978.997106][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.003340][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.008521][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.013355][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.017838][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.024136][T23188] RIP: 0023:0xf7f96549 [ 2979.028183][T23188] Code: Bad RIP value. [ 2979.032237][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2979.040638][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2979.048585][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2979.056530][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2979.064478][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2979.072433][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2979.080388][T23188] Uninit was stored to memory at: [ 2979.085395][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.091092][T23188] __msan_chain_origin+0x50/0x90 [ 2979.096009][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.101134][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.106055][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.110540][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.115208][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.121269][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.127409][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.132622][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.137460][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.141952][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.148249][T23188] [ 2979.150564][T23188] Uninit was stored to memory at: [ 2979.155566][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.161263][T23188] __msan_chain_origin+0x50/0x90 [ 2979.166180][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.171269][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.176181][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.180658][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.185397][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.191441][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.197573][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.202745][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.207572][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.212050][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.218381][T23188] [ 2979.220683][T23188] Uninit was stored to memory at: [ 2979.225686][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.231380][T23188] __msan_chain_origin+0x50/0x90 [ 2979.236295][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.241438][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.246392][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.250883][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.255548][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.261590][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.267721][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.272894][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.277720][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.282210][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.288529][T23188] [ 2979.290841][T23188] Uninit was stored to memory at: [ 2979.295847][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.301546][T23188] __msan_chain_origin+0x50/0x90 [ 2979.306459][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.311547][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.316499][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.320977][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.325653][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.331701][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.337834][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.343170][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.348014][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.352518][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.358831][T23188] [ 2979.361153][T23188] Uninit was stored to memory at: [ 2979.366169][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.371867][T23188] __msan_chain_origin+0x50/0x90 [ 2979.376781][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.381876][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.386787][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.391263][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.395918][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.401960][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.408127][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.413319][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.418146][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.422625][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.428919][T23188] [ 2979.431223][T23188] Uninit was stored to memory at: [ 2979.436225][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.441920][T23188] __msan_chain_origin+0x50/0x90 [ 2979.446875][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.451974][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.456888][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.461368][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.466031][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.472091][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.478223][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.483495][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.488337][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.492840][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.499135][T23188] [ 2979.501452][T23188] Uninit was stored to memory at: [ 2979.506455][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.512147][T23188] __msan_chain_origin+0x50/0x90 [ 2979.517071][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.522169][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.527176][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.531653][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.536304][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.542348][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.548480][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.553651][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.558476][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.562955][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.569248][T23188] [ 2979.571549][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2979.578207][T23188] do_recvmmsg+0xbf/0x22c0 [ 2979.582609][T23188] do_recvmmsg+0xbf/0x22c0 [ 2979.765904][T23188] not chained 2040000 origins [ 2979.770655][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2979.779321][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2979.789565][T23188] Call Trace: [ 2979.792873][T23188] dump_stack+0x21c/0x280 [ 2979.797236][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2979.802985][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2979.808186][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2979.813738][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2979.819814][T23188] ? _copy_from_user+0x201/0x310 [ 2979.824757][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2979.829964][T23188] __msan_chain_origin+0x50/0x90 [ 2979.834912][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.840045][T23188] get_compat_msghdr+0x108/0x2b0 [ 2979.844992][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2979.849522][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2979.854757][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2979.860666][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2979.865872][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2979.871164][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2979.875932][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2979.880700][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2979.885395][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2979.891475][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2979.897631][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2979.902940][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2979.907795][T23188] do_SYSENTER_32+0x73/0x90 [ 2979.912307][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2979.918630][T23188] RIP: 0023:0xf7f96549 [ 2979.922688][T23188] Code: Bad RIP value. [ 2979.926747][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2979.935158][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2979.943162][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2979.951132][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2979.959189][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2979.967162][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2979.975130][T23188] Uninit was stored to memory at: [ 2979.980165][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2979.985862][T23188] __msan_chain_origin+0x50/0x90 [ 2979.990777][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2979.995864][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.000780][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.005260][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.009932][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.015982][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.022127][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.027319][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.032146][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.036629][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.042927][T23188] [ 2980.045229][T23188] Uninit was stored to memory at: [ 2980.050239][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.055952][T23188] __msan_chain_origin+0x50/0x90 [ 2980.060878][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.065970][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.070889][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.075375][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.080045][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.086091][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.092233][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.101512][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.106343][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.110853][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.117253][T23188] [ 2980.119578][T23188] Uninit was stored to memory at: [ 2980.124602][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.130316][T23188] __msan_chain_origin+0x50/0x90 [ 2980.135332][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.140424][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.145338][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.149825][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.154481][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.160539][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.166686][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.171884][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.176709][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.181211][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.187510][T23188] [ 2980.189925][T23188] Uninit was stored to memory at: [ 2980.194942][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.200641][T23188] __msan_chain_origin+0x50/0x90 [ 2980.205575][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.210677][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.215588][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.220068][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.224735][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.230782][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.237041][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.242249][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.247106][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.251608][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.257908][T23188] [ 2980.260287][T23188] Uninit was stored to memory at: [ 2980.266039][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.271756][T23188] __msan_chain_origin+0x50/0x90 [ 2980.276676][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.281856][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.286773][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.291357][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.296090][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.302170][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.308306][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.313524][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.318365][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.322864][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.329163][T23188] [ 2980.331469][T23188] Uninit was stored to memory at: [ 2980.336474][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.342176][T23188] __msan_chain_origin+0x50/0x90 [ 2980.347920][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.353022][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.358395][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.362891][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.367551][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.373606][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.379750][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.384938][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.389775][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.394255][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.400592][T23188] [ 2980.402908][T23188] Uninit was stored to memory at: [ 2980.407913][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.413624][T23188] __msan_chain_origin+0x50/0x90 [ 2980.418553][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.423654][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.428570][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.433152][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.437857][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.443916][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.450052][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.455227][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.460068][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.464562][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.470858][T23188] [ 2980.473188][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2980.479844][T23188] do_recvmmsg+0xbf/0x22c0 [ 2980.484236][T23188] do_recvmmsg+0xbf/0x22c0 [ 2980.724613][T23188] not chained 2050000 origins [ 2980.729359][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2980.738002][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2980.748121][T23188] Call Trace: [ 2980.751394][T23188] dump_stack+0x21c/0x280 [ 2980.755707][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2980.761435][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2980.766614][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2980.772145][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2980.778192][T23188] ? _copy_from_user+0x201/0x310 [ 2980.783126][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2980.788304][T23188] __msan_chain_origin+0x50/0x90 [ 2980.794179][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.799279][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.804199][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.808694][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2980.813883][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2980.819755][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2980.824932][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2980.830216][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2980.834960][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2980.839705][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.844369][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.850470][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.856623][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.861814][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.866644][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.871129][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2980.877898][T23188] RIP: 0023:0xf7f96549 [ 2980.881992][T23188] Code: Bad RIP value. [ 2980.886121][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2980.894513][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2980.902476][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2980.910425][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2980.918383][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2980.926334][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2980.934291][T23188] Uninit was stored to memory at: [ 2980.939825][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2980.945532][T23188] __msan_chain_origin+0x50/0x90 [ 2980.950494][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2980.955595][T23188] get_compat_msghdr+0x108/0x2b0 [ 2980.960509][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2980.964994][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2980.969669][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2980.975722][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2980.981868][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2980.987047][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2980.991873][T23188] do_SYSENTER_32+0x73/0x90 [ 2980.996699][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.002994][T23188] [ 2981.005312][T23188] Uninit was stored to memory at: [ 2981.010325][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.016023][T23188] __msan_chain_origin+0x50/0x90 [ 2981.020936][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.026019][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.030934][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.035426][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.040080][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.046123][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.052254][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.057447][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.062292][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.066803][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.073104][T23188] [ 2981.075413][T23188] Uninit was stored to memory at: [ 2981.080422][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.086119][T23188] __msan_chain_origin+0x50/0x90 [ 2981.091079][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.096168][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.101083][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.105648][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.110302][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.116368][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.122509][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.127747][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.132582][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.139868][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.146193][T23188] [ 2981.148502][T23188] Uninit was stored to memory at: [ 2981.153508][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.159210][T23188] __msan_chain_origin+0x50/0x90 [ 2981.164128][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.169915][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.174831][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.179310][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.183964][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.190009][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.196190][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.201415][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.206241][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.210735][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.217465][T23188] [ 2981.219767][T23188] Uninit was stored to memory at: [ 2981.224769][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.230464][T23188] __msan_chain_origin+0x50/0x90 [ 2981.235463][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.240553][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.245465][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.249947][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.254600][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.260644][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.266789][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.271964][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.276806][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.281382][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.287680][T23188] [ 2981.289982][T23188] Uninit was stored to memory at: [ 2981.295048][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.300757][T23188] __msan_chain_origin+0x50/0x90 [ 2981.305691][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.310780][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.315705][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.320189][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.324846][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.330891][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.337025][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.342204][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.347033][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.351515][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.357813][T23188] [ 2981.360116][T23188] Uninit was stored to memory at: [ 2981.365117][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.370810][T23188] __msan_chain_origin+0x50/0x90 [ 2981.375724][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.380817][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.385761][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.390241][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.394894][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.400942][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.407076][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.412253][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.417080][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.421559][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.427855][T23188] [ 2981.430177][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2981.436825][T23188] do_recvmmsg+0xbf/0x22c0 [ 2981.441236][T23188] do_recvmmsg+0xbf/0x22c0 [ 2981.676087][T23188] not chained 2060000 origins [ 2981.680809][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2981.689475][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2981.699527][T23188] Call Trace: [ 2981.702827][T23188] dump_stack+0x21c/0x280 [ 2981.707212][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2981.712959][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2981.718164][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2981.723717][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2981.729793][T23188] ? _copy_from_user+0x201/0x310 [ 2981.736131][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2981.741336][T23188] __msan_chain_origin+0x50/0x90 [ 2981.746284][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.751420][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.756379][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.760908][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2981.766117][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2981.772023][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2981.777230][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2981.782522][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2981.787289][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2981.792048][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.796758][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.802841][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.808979][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.814159][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.818988][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.824552][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.830903][T23188] RIP: 0023:0xf7f96549 [ 2981.834994][T23188] Code: Bad RIP value. [ 2981.839035][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2981.847426][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2981.855655][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2981.863625][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2981.871594][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2981.879545][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2981.887501][T23188] Uninit was stored to memory at: [ 2981.893640][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.899348][T23188] __msan_chain_origin+0x50/0x90 [ 2981.904304][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.909392][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.914477][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.918973][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.923629][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.929690][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2981.935829][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2981.941006][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2981.945832][T23188] do_SYSENTER_32+0x73/0x90 [ 2981.950315][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2981.956610][T23188] [ 2981.958930][T23188] Uninit was stored to memory at: [ 2981.963935][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2981.969640][T23188] __msan_chain_origin+0x50/0x90 [ 2981.974554][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2981.979643][T23188] get_compat_msghdr+0x108/0x2b0 [ 2981.984556][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2981.989036][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2981.993690][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2981.999739][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.005894][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.011083][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.015929][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.020520][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.026831][T23188] [ 2982.029146][T23188] Uninit was stored to memory at: [ 2982.034151][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.039848][T23188] __msan_chain_origin+0x50/0x90 [ 2982.044775][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.049862][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.054801][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.059298][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.063954][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.069999][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.076147][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.081343][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.087140][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.091636][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.098018][T23188] [ 2982.100322][T23188] Uninit was stored to memory at: [ 2982.105326][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.111040][T23188] __msan_chain_origin+0x50/0x90 [ 2982.115960][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.121053][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.125981][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.130480][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.135145][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.141196][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.148248][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.153426][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.158311][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.162794][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.169352][T23188] [ 2982.171658][T23188] Uninit was stored to memory at: [ 2982.176676][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.182373][T23188] __msan_chain_origin+0x50/0x90 [ 2982.187293][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.192403][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.197318][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.201798][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.206451][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.212495][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.218642][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.223819][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.228664][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.233161][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.239458][T23188] [ 2982.241761][T23188] Uninit was stored to memory at: [ 2982.246760][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.252459][T23188] __msan_chain_origin+0x50/0x90 [ 2982.257376][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.262464][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.267393][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.271874][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.276528][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.282590][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.288744][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.293924][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.298765][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.303300][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.309601][T23188] [ 2982.311908][T23188] Uninit was stored to memory at: [ 2982.316929][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.323691][T23188] __msan_chain_origin+0x50/0x90 [ 2982.328611][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.333700][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.338628][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.343122][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.347781][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.353845][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.359989][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.365169][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.370090][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.374624][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.383111][T23188] [ 2982.385436][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2982.392096][T23188] do_recvmmsg+0xbf/0x22c0 [ 2982.396505][T23188] do_recvmmsg+0xbf/0x22c0 [ 2982.539989][T23188] not chained 2070000 origins [ 2982.544712][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2982.553380][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2982.563434][T23188] Call Trace: [ 2982.566738][T23188] dump_stack+0x21c/0x280 [ 2982.571082][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2982.576833][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2982.582034][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2982.587584][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2982.593663][T23188] ? _copy_from_user+0x201/0x310 [ 2982.598616][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2982.603823][T23188] __msan_chain_origin+0x50/0x90 [ 2982.608770][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.613905][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.618860][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.623386][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2982.628604][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2982.634510][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2982.639725][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2982.645020][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2982.649807][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2982.654587][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.659292][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.665380][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.672501][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.677753][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.682623][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.687171][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.694021][T23188] RIP: 0023:0xf7f96549 [ 2982.698085][T23188] Code: Bad RIP value. [ 2982.702152][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2982.710598][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2982.718580][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2982.727511][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2982.735485][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2982.743457][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2982.751438][T23188] Uninit was stored to memory at: [ 2982.756473][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.762203][T23188] __msan_chain_origin+0x50/0x90 [ 2982.767145][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.772259][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.777208][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.781974][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.786655][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.793418][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.799579][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.804823][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.809681][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.814190][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.820503][T23188] [ 2982.822830][T23188] Uninit was stored to memory at: [ 2982.827860][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.833581][T23188] __msan_chain_origin+0x50/0x90 [ 2982.838514][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.843607][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.848550][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.853044][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.857707][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.863810][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.869945][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.875129][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.880005][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.884490][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.890791][T23188] [ 2982.893119][T23188] Uninit was stored to memory at: [ 2982.898136][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.903865][T23188] __msan_chain_origin+0x50/0x90 [ 2982.908794][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.913897][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.918811][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.923289][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2982.927960][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2982.934990][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2982.941205][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2982.946382][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2982.951223][T23188] do_SYSENTER_32+0x73/0x90 [ 2982.956889][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2982.963245][T23188] [ 2982.965551][T23188] Uninit was stored to memory at: [ 2982.970557][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2982.976260][T23188] __msan_chain_origin+0x50/0x90 [ 2982.981174][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2982.986261][T23188] get_compat_msghdr+0x108/0x2b0 [ 2982.991177][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2982.995658][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.000325][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.006403][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.012535][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.017712][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.022543][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.027057][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.033486][T23188] [ 2983.035878][T23188] Uninit was stored to memory at: [ 2983.040881][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.046574][T23188] __msan_chain_origin+0x50/0x90 [ 2983.051498][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.056593][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.061509][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.065998][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.070716][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.076789][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.083301][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.088515][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.093368][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.097856][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.104163][T23188] [ 2983.106468][T23188] Uninit was stored to memory at: [ 2983.111490][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.117214][T23188] __msan_chain_origin+0x50/0x90 [ 2983.122146][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.127253][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.132215][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.136698][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.141360][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.147432][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.153603][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.158896][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.163725][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.168228][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.174556][T23188] [ 2983.176868][T23188] Uninit was stored to memory at: [ 2983.181904][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.187621][T23188] __msan_chain_origin+0x50/0x90 [ 2983.192563][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.197675][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.202711][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.207208][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.211864][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.217929][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.224087][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.229271][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.234105][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.238603][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.244996][T23188] [ 2983.247305][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2983.253960][T23188] do_recvmmsg+0xbf/0x22c0 [ 2983.259324][T23188] do_recvmmsg+0xbf/0x22c0 [ 2983.480438][T23188] not chained 2080000 origins [ 2983.485139][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2983.493788][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2983.503876][T23188] Call Trace: [ 2983.507167][T23188] dump_stack+0x21c/0x280 [ 2983.511512][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2983.517260][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2983.522450][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2983.527975][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2983.534021][T23188] ? _copy_from_user+0x201/0x310 [ 2983.538957][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2983.544219][T23188] __msan_chain_origin+0x50/0x90 [ 2983.549183][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.554295][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.559236][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.563741][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2983.568990][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2983.574864][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2983.580044][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2983.585369][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2983.591068][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2983.595858][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.600532][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.606728][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.612896][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.618132][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.622992][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.627477][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.633780][T23188] RIP: 0023:0xf7f96549 [ 2983.637828][T23188] Code: Bad RIP value. [ 2983.641898][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2983.650286][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2983.658244][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2983.666248][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2983.674208][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2983.682179][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2983.690248][T23188] Uninit was stored to memory at: [ 2983.695273][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.700968][T23188] __msan_chain_origin+0x50/0x90 [ 2983.705886][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.710979][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.715909][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.720387][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.725043][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.731107][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.737240][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.742506][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.747346][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.751842][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.758137][T23188] [ 2983.760443][T23188] Uninit was stored to memory at: [ 2983.765445][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.771153][T23188] __msan_chain_origin+0x50/0x90 [ 2983.776101][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.781190][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.786121][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.790609][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.795268][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.801314][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.807457][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.812647][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.817476][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.821956][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.828259][T23188] [ 2983.830586][T23188] Uninit was stored to memory at: [ 2983.835617][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.841337][T23188] __msan_chain_origin+0x50/0x90 [ 2983.846323][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.851417][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.856339][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.860820][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.865476][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.871523][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.877667][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.882868][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.887709][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.892190][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.898494][T23188] [ 2983.900808][T23188] Uninit was stored to memory at: [ 2983.905813][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.911509][T23188] __msan_chain_origin+0x50/0x90 [ 2983.916422][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.921563][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.926480][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2983.930958][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2983.935613][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2983.941658][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2983.947792][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2983.952968][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2983.957927][T23188] do_SYSENTER_32+0x73/0x90 [ 2983.962420][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2983.968736][T23188] [ 2983.971039][T23188] Uninit was stored to memory at: [ 2983.976043][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2983.981763][T23188] __msan_chain_origin+0x50/0x90 [ 2983.986777][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2983.991896][T23188] get_compat_msghdr+0x108/0x2b0 [ 2983.996820][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.001344][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.008348][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.014390][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.020524][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.025729][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.030576][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.035146][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.041445][T23188] [ 2984.043768][T23188] Uninit was stored to memory at: [ 2984.048776][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.054577][T23188] __msan_chain_origin+0x50/0x90 [ 2984.059505][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.064596][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.069515][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.074021][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.078691][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.084756][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.090911][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.096092][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.100931][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.105426][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.111727][T23188] [ 2984.114032][T23188] Uninit was stored to memory at: [ 2984.119056][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.124778][T23188] __msan_chain_origin+0x50/0x90 [ 2984.129755][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.134846][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.141766][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.146284][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.150942][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.157000][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.163220][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.168399][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.173238][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.177737][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.184045][T23188] [ 2984.186384][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2984.194213][T23188] do_recvmmsg+0xbf/0x22c0 [ 2984.198623][T23188] do_recvmmsg+0xbf/0x22c0 [ 2984.352848][T23188] not chained 2090000 origins [ 2984.357581][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2984.366246][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2984.376301][T23188] Call Trace: [ 2984.379604][T23188] dump_stack+0x21c/0x280 [ 2984.383952][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2984.390575][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2984.395782][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2984.401343][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2984.408382][T23188] ? _copy_from_user+0x201/0x310 [ 2984.413343][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2984.418548][T23188] __msan_chain_origin+0x50/0x90 [ 2984.423498][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.429324][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.435230][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.439758][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2984.444967][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2984.450870][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2984.456079][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2984.461386][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2984.466151][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2984.470923][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.475616][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.481706][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.487866][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.493076][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.497938][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.502453][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.508779][T23188] RIP: 0023:0xf7f96549 [ 2984.512835][T23188] Code: Bad RIP value. [ 2984.516894][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2984.525306][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2984.533278][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2984.541250][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2984.549223][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2984.557806][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2984.565790][T23188] Uninit was stored to memory at: [ 2984.570835][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.576562][T23188] __msan_chain_origin+0x50/0x90 [ 2984.581514][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.586625][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.591572][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.596076][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.600761][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.606881][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.613042][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.618247][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.623102][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.627617][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.634635][T23188] [ 2984.636957][T23188] Uninit was stored to memory at: [ 2984.641988][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.647713][T23188] __msan_chain_origin+0x50/0x90 [ 2984.652660][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.657784][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.662722][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.667243][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.671926][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.678179][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.684335][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.689540][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.694405][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.698913][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.705227][T23188] [ 2984.707551][T23188] Uninit was stored to memory at: [ 2984.712585][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.718312][T23188] __msan_chain_origin+0x50/0x90 [ 2984.723253][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.728383][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.733324][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.737830][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.742512][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.748588][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.754747][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.760885][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.765712][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.770215][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.776589][T23188] [ 2984.778909][T23188] Uninit was stored to memory at: [ 2984.783916][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.789614][T23188] __msan_chain_origin+0x50/0x90 [ 2984.794539][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.799719][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.804706][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.809188][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.813843][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.819890][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.826026][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.831295][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.836125][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.840610][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.847011][T23188] [ 2984.849329][T23188] Uninit was stored to memory at: [ 2984.854339][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.860037][T23188] __msan_chain_origin+0x50/0x90 [ 2984.864953][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.870062][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.874992][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.879482][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.884171][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.890219][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.896349][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.901528][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.906354][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.910839][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.917139][T23188] [ 2984.919476][T23188] Uninit was stored to memory at: [ 2984.924498][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2984.930210][T23188] __msan_chain_origin+0x50/0x90 [ 2984.935125][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2984.940213][T23188] get_compat_msghdr+0x108/0x2b0 [ 2984.945124][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2984.949960][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2984.954635][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2984.960696][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2984.966837][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2984.972027][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2984.976865][T23188] do_SYSENTER_32+0x73/0x90 [ 2984.981358][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2984.987658][T23188] [ 2984.989979][T23188] Uninit was stored to memory at: [ 2984.995017][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.000716][T23188] __msan_chain_origin+0x50/0x90 [ 2985.005632][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.010732][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.015662][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.020143][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.024811][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.030857][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.037003][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.042210][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.047052][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.051647][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.057969][T23188] [ 2985.060287][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2985.066948][T23188] do_recvmmsg+0xbf/0x22c0 [ 2985.071372][T23188] do_recvmmsg+0xbf/0x22c0 [ 2985.322814][T23188] not chained 2100000 origins [ 2985.327531][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2985.336191][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2985.346605][T23188] Call Trace: [ 2985.349920][T23188] dump_stack+0x21c/0x280 [ 2985.354258][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2985.359981][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2985.365182][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2985.370717][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2985.376781][T23188] ? _copy_from_user+0x201/0x310 [ 2985.381714][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2985.387002][T23188] __msan_chain_origin+0x50/0x90 [ 2985.391955][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.397073][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.402022][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.406538][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2985.411747][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2985.417639][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2985.422819][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2985.428102][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2985.432869][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2985.437646][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.442313][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.448381][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.454544][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.459735][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.464572][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.469074][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.475479][T23188] RIP: 0023:0xf7f96549 [ 2985.479520][T23188] Code: Bad RIP value. [ 2985.483564][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2985.491951][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2985.499922][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2985.507882][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2985.515845][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2985.523795][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2985.531756][T23188] Uninit was stored to memory at: [ 2985.536811][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.542520][T23188] __msan_chain_origin+0x50/0x90 [ 2985.547448][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.552554][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.557469][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.562382][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.567051][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.573111][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.579247][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.584422][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.589260][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.593767][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.600081][T23188] [ 2985.602401][T23188] Uninit was stored to memory at: [ 2985.607431][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.613127][T23188] __msan_chain_origin+0x50/0x90 [ 2985.618056][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.623175][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.628090][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.632571][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.637237][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.643293][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.649436][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.654627][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.659467][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.663958][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.670253][T23188] [ 2985.672557][T23188] Uninit was stored to memory at: [ 2985.677573][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.683284][T23188] __msan_chain_origin+0x50/0x90 [ 2985.688222][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.693326][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.698253][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.702840][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.707497][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.713564][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.719806][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.725588][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.730417][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.734899][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.741214][T23188] [ 2985.743518][T23188] Uninit was stored to memory at: [ 2985.748535][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.754231][T23188] __msan_chain_origin+0x50/0x90 [ 2985.759156][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.764260][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.769176][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.773656][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.778323][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.784395][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.790558][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.795734][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.800567][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.805059][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.811372][T23188] [ 2985.813678][T23188] Uninit was stored to memory at: [ 2985.818694][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.824402][T23188] __msan_chain_origin+0x50/0x90 [ 2985.829320][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.834408][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.839335][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.843829][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.848503][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.854556][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.860689][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.865879][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.870718][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.875212][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.881536][T23188] [ 2985.883840][T23188] Uninit was stored to memory at: [ 2985.888858][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.894555][T23188] __msan_chain_origin+0x50/0x90 [ 2985.899511][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.904610][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.909538][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.914062][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.918731][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.924789][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2985.930948][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2985.936167][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2985.940999][T23188] do_SYSENTER_32+0x73/0x90 [ 2985.945486][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2985.951835][T23188] [ 2985.954156][T23188] Uninit was stored to memory at: [ 2985.960136][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2985.965842][T23188] __msan_chain_origin+0x50/0x90 [ 2985.970759][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2985.975866][T23188] get_compat_msghdr+0x108/0x2b0 [ 2985.980793][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2985.985287][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2985.989944][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2985.995986][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.002123][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.007303][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.012131][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.017241][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.023550][T23188] [ 2986.025854][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2986.032507][T23188] do_recvmmsg+0xbf/0x22c0 [ 2986.036917][T23188] do_recvmmsg+0xbf/0x22c0 [ 2986.187726][T23188] not chained 2110000 origins [ 2986.192450][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2986.206799][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2986.217202][T23188] Call Trace: [ 2986.220509][T23188] dump_stack+0x21c/0x280 [ 2986.224857][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2986.232171][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2986.237411][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2986.242972][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2986.249056][T23188] ? _copy_from_user+0x201/0x310 [ 2986.254009][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2986.259822][T23188] __msan_chain_origin+0x50/0x90 [ 2986.264779][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.269916][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.274954][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.279488][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2986.284700][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2986.290607][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2986.296002][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2986.301301][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2986.306076][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2986.310857][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.315579][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.321705][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.327878][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.333094][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.337961][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.342476][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.348801][T23188] RIP: 0023:0xf7f96549 [ 2986.352863][T23188] Code: Bad RIP value. [ 2986.356926][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2986.365425][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2986.373396][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2986.381377][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2986.390401][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2986.398373][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2986.406355][T23188] Uninit was stored to memory at: [ 2986.411411][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.417146][T23188] __msan_chain_origin+0x50/0x90 [ 2986.422092][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.427213][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.432155][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.436661][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.441341][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.447415][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.453574][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.458776][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.463640][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.468154][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.474472][T23188] [ 2986.476805][T23188] Uninit was stored to memory at: [ 2986.481841][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.487604][T23188] __msan_chain_origin+0x50/0x90 [ 2986.492546][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.497680][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.502620][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.507128][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.511858][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.517942][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.524102][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.529321][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.534173][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.538682][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.544998][T23188] [ 2986.547324][T23188] Uninit was stored to memory at: [ 2986.552355][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.558077][T23188] __msan_chain_origin+0x50/0x90 [ 2986.563015][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.568104][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.573052][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.577543][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.582213][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.588259][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.594391][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.599571][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.604401][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.608884][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.615182][T23188] [ 2986.617492][T23188] Uninit was stored to memory at: [ 2986.622566][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.628281][T23188] __msan_chain_origin+0x50/0x90 [ 2986.633222][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.638599][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.643527][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.648019][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.652693][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.658748][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.664894][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.670091][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.675551][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.680062][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.686360][T23188] [ 2986.688665][T23188] Uninit was stored to memory at: [ 2986.693677][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.699379][T23188] __msan_chain_origin+0x50/0x90 [ 2986.704305][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.709397][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.714332][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.718829][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.723501][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.729550][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.735681][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.740860][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.745686][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.750169][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.756558][T23188] [ 2986.758892][T23188] Uninit was stored to memory at: [ 2986.763910][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.770553][T23188] __msan_chain_origin+0x50/0x90 [ 2986.775470][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.780564][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.785499][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.789983][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.795162][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.801209][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.807343][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.812520][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.817359][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.821852][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.828148][T23188] [ 2986.830454][T23188] Uninit was stored to memory at: [ 2986.835500][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2986.841202][T23188] __msan_chain_origin+0x50/0x90 [ 2986.846119][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2986.851212][T23188] get_compat_msghdr+0x108/0x2b0 [ 2986.856212][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2986.860719][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2986.865375][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2986.871419][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2986.877564][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2986.882778][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2986.887616][T23188] do_SYSENTER_32+0x73/0x90 [ 2986.892103][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2986.898406][T23188] [ 2986.900724][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2986.907376][T23188] do_recvmmsg+0xbf/0x22c0 [ 2986.911782][T23188] do_recvmmsg+0xbf/0x22c0 [ 2987.108120][T23188] not chained 2120000 origins [ 2987.112870][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2987.121516][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2987.131601][T23188] Call Trace: [ 2987.134882][T23188] dump_stack+0x21c/0x280 [ 2987.139215][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2987.144957][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2987.150186][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2987.155714][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2987.161769][T23188] ? _copy_from_user+0x201/0x310 [ 2987.166704][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2987.171884][T23188] __msan_chain_origin+0x50/0x90 [ 2987.176820][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.181933][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.187046][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.191583][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2987.196796][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2987.202788][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2987.207982][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2987.213248][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2987.218002][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2987.222761][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.227427][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.233476][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.239611][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.244794][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.249627][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.254110][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.260414][T23188] RIP: 0023:0xf7f96549 [ 2987.264571][T23188] Code: Bad RIP value. [ 2987.268633][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2987.277030][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2987.284991][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2987.293462][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2987.301425][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2987.309390][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2987.317384][T23188] Uninit was stored to memory at: [ 2987.322416][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.328143][T23188] __msan_chain_origin+0x50/0x90 [ 2987.333071][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.338171][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.343101][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.347584][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.352237][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.358293][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.364438][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.369616][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.374444][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.378940][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.385249][T23188] [ 2987.387573][T23188] Uninit was stored to memory at: [ 2987.392580][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.398285][T23188] __msan_chain_origin+0x50/0x90 [ 2987.403214][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.408302][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.413216][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.417709][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.422392][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.428456][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.434596][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.439775][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.444603][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.449100][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.455400][T23188] [ 2987.457799][T23188] Uninit was stored to memory at: [ 2987.462848][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.468551][T23188] __msan_chain_origin+0x50/0x90 [ 2987.473467][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.478654][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.483583][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.491016][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.495673][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.501717][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.507867][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.514955][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.519814][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.524299][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.530599][T23188] [ 2987.532916][T23188] Uninit was stored to memory at: [ 2987.537937][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.543667][T23188] __msan_chain_origin+0x50/0x90 [ 2987.548610][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.553701][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.558627][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.563119][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.567792][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.573836][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.580076][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.585253][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.590085][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.594565][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.600885][T23188] [ 2987.603206][T23188] Uninit was stored to memory at: [ 2987.608214][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.613997][T23188] __msan_chain_origin+0x50/0x90 [ 2987.618936][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.624042][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.628983][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.633462][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.638131][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.644398][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.650621][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.656686][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.661530][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.666010][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.672313][T23188] [ 2987.674637][T23188] Uninit was stored to memory at: [ 2987.679667][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.685481][T23188] __msan_chain_origin+0x50/0x90 [ 2987.690426][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.695543][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.700460][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.704940][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.709601][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.715653][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.721784][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.726973][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.731820][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.736302][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.742707][T23188] [ 2987.745011][T23188] Uninit was stored to memory at: [ 2987.750026][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2987.755757][T23188] __msan_chain_origin+0x50/0x90 [ 2987.760676][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2987.765764][T23188] get_compat_msghdr+0x108/0x2b0 [ 2987.770683][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2987.775161][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2987.779833][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2987.785874][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2987.792024][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2987.797203][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2987.802031][T23188] do_SYSENTER_32+0x73/0x90 [ 2987.806524][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2987.812833][T23188] [ 2987.815139][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2987.821788][T23188] do_recvmmsg+0xbf/0x22c0 [ 2987.826197][T23188] do_recvmmsg+0xbf/0x22c0 [ 2987.975649][T23188] not chained 2130000 origins [ 2987.980376][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2987.989045][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2987.999129][T23188] Call Trace: [ 2988.002442][T23188] dump_stack+0x21c/0x280 [ 2988.006786][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2988.012538][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.017782][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2988.023335][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2988.030197][T23188] ? _copy_from_user+0x201/0x310 [ 2988.038181][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.043383][T23188] __msan_chain_origin+0x50/0x90 [ 2988.048330][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.053474][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.058427][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.062965][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.068185][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2988.074095][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.079320][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2988.084615][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2988.090168][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2988.094943][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.099648][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.105729][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.111893][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.117110][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.121976][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.126490][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.132831][T23188] RIP: 0023:0xf7f96549 [ 2988.136904][T23188] Code: Bad RIP value. [ 2988.140970][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2988.149390][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2988.157453][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2988.165428][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2988.173403][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2988.181375][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2988.189461][T23188] Uninit was stored to memory at: [ 2988.194498][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.200220][T23188] __msan_chain_origin+0x50/0x90 [ 2988.205162][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.210365][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.215303][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.219813][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.224496][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.230588][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.236747][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.241963][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.246824][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.251331][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.257646][T23188] [ 2988.260002][T23188] Uninit was stored to memory at: [ 2988.265033][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.270843][T23188] __msan_chain_origin+0x50/0x90 [ 2988.275854][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.280948][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.285926][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.290466][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.295203][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.301267][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.307423][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.312628][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.317482][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.321991][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.328308][T23188] [ 2988.330631][T23188] Uninit was stored to memory at: [ 2988.335660][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.341379][T23188] __msan_chain_origin+0x50/0x90 [ 2988.346326][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.351429][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.356457][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.360950][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.365606][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.371657][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.377795][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.382996][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.387848][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.392362][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.398681][T23188] [ 2988.401014][T23188] Uninit was stored to memory at: [ 2988.406051][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.411786][T23188] __msan_chain_origin+0x50/0x90 [ 2988.416733][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.421967][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.426911][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.431396][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.436106][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.442159][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.448295][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.453474][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.458317][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.462836][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.469136][T23188] [ 2988.471500][T23188] Uninit was stored to memory at: [ 2988.476518][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.482237][T23188] __msan_chain_origin+0x50/0x90 [ 2988.487176][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.492290][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.499468][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.503974][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.508644][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.514704][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.520858][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.526055][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.531025][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.535566][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.541982][T23188] [ 2988.544291][T23188] Uninit was stored to memory at: [ 2988.549303][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.555047][T23188] __msan_chain_origin+0x50/0x90 [ 2988.559972][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.565080][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.570010][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.574491][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.579160][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.585237][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.591640][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.596917][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.601781][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.606269][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.612587][T23188] [ 2988.614890][T23188] Uninit was stored to memory at: [ 2988.619914][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2988.625621][T23188] __msan_chain_origin+0x50/0x90 [ 2988.630564][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.635726][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.640645][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.645162][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.649821][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.655951][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.662085][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.667286][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.672115][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.676607][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.682913][T23188] [ 2988.685235][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2988.691897][T23188] do_recvmmsg+0xbf/0x22c0 [ 2988.696302][T23188] do_recvmmsg+0xbf/0x22c0 [ 2988.838373][T23188] not chained 2140000 origins [ 2988.843106][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2988.851777][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2988.861833][T23188] Call Trace: [ 2988.865137][T23188] dump_stack+0x21c/0x280 [ 2988.869479][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2988.875225][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.880440][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2988.885997][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2988.892076][T23188] ? _copy_from_user+0x201/0x310 [ 2988.897026][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.902228][T23188] __msan_chain_origin+0x50/0x90 [ 2988.907176][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2988.912307][T23188] get_compat_msghdr+0x108/0x2b0 [ 2988.917257][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2988.921785][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.926991][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2988.932893][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2988.938101][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2988.943394][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2988.948164][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2988.952934][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2988.957630][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2988.963709][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2988.969871][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2988.975078][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2988.979933][T23188] do_SYSENTER_32+0x73/0x90 [ 2988.984445][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2988.990770][T23188] RIP: 0023:0xf7f96549 [ 2988.994828][T23188] Code: Bad RIP value. [ 2988.998892][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2989.007303][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2989.015275][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2989.023247][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2989.031218][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2989.039191][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2989.047162][T23188] Uninit was stored to memory at: [ 2989.052174][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.057879][T23188] __msan_chain_origin+0x50/0x90 [ 2989.062807][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.067905][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.072840][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.077338][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.082014][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.088061][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.094196][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.099377][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.104228][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.108708][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.115022][T23188] [ 2989.117329][T23188] Uninit was stored to memory at: [ 2989.122348][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.128045][T23188] __msan_chain_origin+0x50/0x90 [ 2989.132960][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.138058][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.142999][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.147481][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.152137][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.158192][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.164336][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.169517][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.174343][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.178835][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.185144][T23188] [ 2989.187449][T23188] Uninit was stored to memory at: [ 2989.192553][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.198258][T23188] __msan_chain_origin+0x50/0x90 [ 2989.203185][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.208273][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.213185][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.217678][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.222363][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.228408][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.234539][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.239812][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.244645][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.249131][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.255432][T23188] [ 2989.257744][T23188] Uninit was stored to memory at: [ 2989.262767][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.268489][T23188] __msan_chain_origin+0x50/0x90 [ 2989.273422][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.278784][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.283717][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.288211][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.292882][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.298940][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.305084][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.310433][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.315261][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.319744][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.326092][T23188] [ 2989.328394][T23188] Uninit was stored to memory at: [ 2989.333399][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.339107][T23188] __msan_chain_origin+0x50/0x90 [ 2989.344058][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.349157][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.354086][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.358583][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.363265][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.369313][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.375494][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.380676][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.385502][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.389984][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.396371][T23188] [ 2989.398689][T23188] Uninit was stored to memory at: [ 2989.403739][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.409462][T23188] __msan_chain_origin+0x50/0x90 [ 2989.414392][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.419485][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.424553][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.429035][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.433729][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.439780][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.445914][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.451097][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.455940][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.460425][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.466726][T23188] [ 2989.469060][T23188] Uninit was stored to memory at: [ 2989.474067][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.479768][T23188] __msan_chain_origin+0x50/0x90 [ 2989.484693][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.489789][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.494705][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.499202][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.503891][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.509950][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.516119][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.521319][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.526149][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.530638][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.536951][T23188] [ 2989.539274][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2989.545929][T23188] do_recvmmsg+0xbf/0x22c0 [ 2989.551370][T23188] do_recvmmsg+0xbf/0x22c0 [ 2989.771059][T23188] not chained 2150000 origins [ 2989.775785][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2989.784459][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2989.796200][T23188] Call Trace: [ 2989.799510][T23188] dump_stack+0x21c/0x280 [ 2989.804127][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2989.809881][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2989.815121][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2989.820680][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2989.826796][T23188] ? _copy_from_user+0x201/0x310 [ 2989.831784][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2989.840121][T23188] __msan_chain_origin+0x50/0x90 [ 2989.845068][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2989.850204][T23188] get_compat_msghdr+0x108/0x2b0 [ 2989.855166][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2989.859701][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2989.864999][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2989.870907][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2989.876149][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2989.881447][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2989.886210][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2989.891048][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2989.896268][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2989.902333][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2989.908472][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2989.913657][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2989.918504][T23188] do_SYSENTER_32+0x73/0x90 [ 2989.923013][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2989.929317][T23188] RIP: 0023:0xf7f96549 [ 2989.933372][T23188] Code: Bad RIP value. [ 2989.937426][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2989.945845][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2989.953799][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2989.961773][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2989.969747][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2989.977707][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2989.985707][T23188] Uninit was stored to memory at: [ 2989.990719][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2989.996445][T23188] __msan_chain_origin+0x50/0x90 [ 2990.001374][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.006582][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.011498][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.015979][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.020638][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.026898][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.033049][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.038263][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.043126][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.047621][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.053920][T23188] [ 2990.056253][T23188] Uninit was stored to memory at: [ 2990.061286][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.067000][T23188] __msan_chain_origin+0x50/0x90 [ 2990.071920][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.077021][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.081995][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.086478][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.091137][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.097195][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.103350][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.108586][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.113432][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.117945][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.124264][T23188] [ 2990.126578][T23188] Uninit was stored to memory at: [ 2990.131633][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.137351][T23188] __msan_chain_origin+0x50/0x90 [ 2990.142286][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.147382][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.152317][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.156804][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.161474][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.167531][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.173689][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.178888][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.183734][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.188219][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.195386][T23188] [ 2990.197697][T23188] Uninit was stored to memory at: [ 2990.202752][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.208448][T23188] __msan_chain_origin+0x50/0x90 [ 2990.213364][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.218465][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.223393][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.227887][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.232655][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.238720][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.244911][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.250125][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.254985][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.259488][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.265786][T23188] [ 2990.268102][T23188] Uninit was stored to memory at: [ 2990.273124][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.278844][T23188] __msan_chain_origin+0x50/0x90 [ 2990.283780][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.288984][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.293919][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.298460][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.303344][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.309407][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.315556][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.320735][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.325561][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.330046][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.336346][T23188] [ 2990.338661][T23188] Uninit was stored to memory at: [ 2990.343667][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.349419][T23188] __msan_chain_origin+0x50/0x90 [ 2990.354343][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.359443][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.364368][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.368880][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.373549][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.379594][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.385728][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.390921][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.395763][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.400246][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.406549][T23188] [ 2990.408883][T23188] Uninit was stored to memory at: [ 2990.413901][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.419598][T23188] __msan_chain_origin+0x50/0x90 [ 2990.424520][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.429610][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.434524][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.439003][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.443657][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.449703][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.455834][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.461013][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.465843][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.470328][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.476629][T23188] [ 2990.478983][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2990.485646][T23188] do_recvmmsg+0xbf/0x22c0 [ 2990.490051][T23188] do_recvmmsg+0xbf/0x22c0 [ 2990.639304][T23188] not chained 2160000 origins [ 2990.644031][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2990.652701][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2990.662756][T23188] Call Trace: [ 2990.666063][T23188] dump_stack+0x21c/0x280 [ 2990.670406][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2990.676251][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2990.681459][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2990.687014][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2990.693093][T23188] ? _copy_from_user+0x201/0x310 [ 2990.698040][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2990.703243][T23188] __msan_chain_origin+0x50/0x90 [ 2990.708195][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.713334][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.718909][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.723438][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2990.728654][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2990.734556][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2990.739764][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2990.745056][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2990.749822][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2990.754598][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.759299][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.765389][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.771642][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.776861][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.781722][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.786233][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.792562][T23188] RIP: 0023:0xf7f96549 [ 2990.796623][T23188] Code: Bad RIP value. [ 2990.800690][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2990.809102][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2990.817077][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2990.825048][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2990.833021][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2990.840996][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2990.848978][T23188] Uninit was stored to memory at: [ 2990.854021][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.859746][T23188] __msan_chain_origin+0x50/0x90 [ 2990.864687][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.869800][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.874742][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.879248][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.884537][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.890631][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.896786][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.901981][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.906811][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.911308][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.917617][T23188] [ 2990.919940][T23188] Uninit was stored to memory at: [ 2990.924945][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2990.930644][T23188] __msan_chain_origin+0x50/0x90 [ 2990.935662][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2990.940754][T23188] get_compat_msghdr+0x108/0x2b0 [ 2990.945674][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2990.950164][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2990.954835][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2990.961837][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2990.967997][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2990.973173][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2990.978025][T23188] do_SYSENTER_32+0x73/0x90 [ 2990.982520][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2990.988818][T23188] [ 2990.991123][T23188] Uninit was stored to memory at: [ 2990.996127][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.001828][T23188] __msan_chain_origin+0x50/0x90 [ 2991.006747][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.011848][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.016773][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.021266][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.025920][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.031967][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.038110][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.043300][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.048129][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.052612][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.058916][T23188] [ 2991.061409][T23188] Uninit was stored to memory at: [ 2991.066437][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.072147][T23188] __msan_chain_origin+0x50/0x90 [ 2991.077076][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.082177][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.087094][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.091574][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.096241][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.102329][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.108474][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.114438][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.119332][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.123829][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.130131][T23188] [ 2991.132435][T23188] Uninit was stored to memory at: [ 2991.137455][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.143168][T23188] __msan_chain_origin+0x50/0x90 [ 2991.148090][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.153191][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.158122][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.162615][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.167286][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.173344][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.179479][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.184706][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.189538][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.194023][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.200367][T23188] [ 2991.202671][T23188] Uninit was stored to memory at: [ 2991.207701][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.213396][T23188] __msan_chain_origin+0x50/0x90 [ 2991.218323][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.223424][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.228338][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.232817][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.237488][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.243551][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.249685][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.254880][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.259716][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.264195][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.270491][T23188] [ 2991.272813][T23188] Uninit was stored to memory at: [ 2991.277917][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.283635][T23188] __msan_chain_origin+0x50/0x90 [ 2991.288567][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.293698][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.298637][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.303138][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.307845][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.313893][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.320124][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.325301][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.330131][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.334667][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.340968][T23188] [ 2991.343274][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2991.349938][T23188] do_recvmmsg+0xbf/0x22c0 [ 2991.354348][T23188] do_recvmmsg+0xbf/0x22c0 [ 2991.567663][T23188] not chained 2170000 origins [ 2991.572410][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2991.581058][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2991.591115][T23188] Call Trace: [ 2991.594483][T23188] dump_stack+0x21c/0x280 [ 2991.598809][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2991.604531][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2991.609723][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2991.615266][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2991.621378][T23188] ? _copy_from_user+0x201/0x310 [ 2991.626323][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2991.631521][T23188] __msan_chain_origin+0x50/0x90 [ 2991.636448][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.641549][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.646574][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.651067][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2991.656318][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2991.662205][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2991.667386][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2991.672652][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2991.677398][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2991.682145][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.686813][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.692880][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.699019][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.704220][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.709054][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.713539][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.719851][T23188] RIP: 0023:0xf7f96549 [ 2991.723904][T23188] Code: Bad RIP value. [ 2991.727947][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2991.736335][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2991.744284][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2991.752233][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2991.760186][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2991.768155][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2991.776114][T23188] Uninit was stored to memory at: [ 2991.781122][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.786930][T23188] __msan_chain_origin+0x50/0x90 [ 2991.791861][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.796955][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.801877][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.806380][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.811051][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.817158][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.823289][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.828481][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.833334][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.837832][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.844130][T23188] [ 2991.846435][T23188] Uninit was stored to memory at: [ 2991.851453][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.857149][T23188] __msan_chain_origin+0x50/0x90 [ 2991.862065][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.867153][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.872065][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.876545][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.881225][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.887281][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.893414][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.898608][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.903436][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.907933][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.914255][T23188] [ 2991.916562][T23188] Uninit was stored to memory at: [ 2991.921568][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.927286][T23188] __msan_chain_origin+0x50/0x90 [ 2991.932214][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2991.937317][T23188] get_compat_msghdr+0x108/0x2b0 [ 2991.942339][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2991.946830][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2991.951499][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2991.957550][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2991.963683][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2991.968859][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2991.973687][T23188] do_SYSENTER_32+0x73/0x90 [ 2991.978168][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2991.984467][T23188] [ 2991.986770][T23188] Uninit was stored to memory at: [ 2991.991774][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2991.997470][T23188] __msan_chain_origin+0x50/0x90 [ 2992.002404][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.007497][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.012414][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.016931][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.021602][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.027645][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.033789][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.038984][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.043820][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.048315][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.054623][T23188] [ 2992.056936][T23188] Uninit was stored to memory at: [ 2992.061970][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.067694][T23188] __msan_chain_origin+0x50/0x90 [ 2992.072619][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.077707][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.082636][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.087143][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.091799][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.097866][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.104084][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.109276][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.114137][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.118621][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.124919][T23188] [ 2992.127228][T23188] Uninit was stored to memory at: [ 2992.132299][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.138002][T23188] __msan_chain_origin+0x50/0x90 [ 2992.142922][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.148025][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.152960][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.157462][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.162206][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.168286][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.174422][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.179618][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.184446][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.188928][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.195748][T23188] [ 2992.198056][T23188] Uninit was stored to memory at: [ 2992.203063][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.208760][T23188] __msan_chain_origin+0x50/0x90 [ 2992.213676][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.218767][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.223682][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.228166][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.232822][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.238884][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.245028][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.250222][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.255101][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.259589][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.265889][T23188] [ 2992.268229][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2992.275090][T23188] do_recvmmsg+0xbf/0x22c0 [ 2992.279486][T23188] do_recvmmsg+0xbf/0x22c0 [ 2992.432612][T23188] not chained 2180000 origins [ 2992.437340][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2992.446005][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2992.456068][T23188] Call Trace: [ 2992.459372][T23188] dump_stack+0x21c/0x280 [ 2992.463718][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2992.469468][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2992.474678][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2992.480236][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2992.486312][T23188] ? _copy_from_user+0x201/0x310 [ 2992.491258][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2992.496460][T23188] __msan_chain_origin+0x50/0x90 [ 2992.501409][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.506545][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.511506][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.516036][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2992.521245][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2992.527146][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2992.532354][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2992.537645][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2992.542413][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2992.547185][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.551882][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.557971][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.564132][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.569348][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.574210][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.578723][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.585080][T23188] RIP: 0023:0xf7f96549 [ 2992.589153][T23188] Code: Bad RIP value. [ 2992.593221][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2992.602591][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2992.610567][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2992.618544][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2992.626513][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2992.634483][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2992.642467][T23188] Uninit was stored to memory at: [ 2992.647504][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.653232][T23188] __msan_chain_origin+0x50/0x90 [ 2992.658171][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.663284][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.668240][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.672746][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.677426][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.683496][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.689655][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.694862][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.699731][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.704239][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.710593][T23188] [ 2992.712916][T23188] Uninit was stored to memory at: [ 2992.717959][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.723687][T23188] __msan_chain_origin+0x50/0x90 [ 2992.728807][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.733939][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.738898][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.744366][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.749027][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.755070][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.761207][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.766499][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.771341][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.775823][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.782814][T23188] [ 2992.785123][T23188] Uninit was stored to memory at: [ 2992.790144][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.795864][T23188] __msan_chain_origin+0x50/0x90 [ 2992.800806][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.805942][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.810896][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.815392][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.820062][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.826144][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.832289][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.837478][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.842342][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.846827][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.853129][T23188] [ 2992.855435][T23188] Uninit was stored to memory at: [ 2992.860449][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.866186][T23188] __msan_chain_origin+0x50/0x90 [ 2992.871738][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.876859][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.881787][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.886270][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.890927][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.898202][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.904449][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.909626][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.914455][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.918955][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.925274][T23188] [ 2992.927583][T23188] Uninit was stored to memory at: [ 2992.932599][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2992.938316][T23188] __msan_chain_origin+0x50/0x90 [ 2992.943266][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2992.948366][T23188] get_compat_msghdr+0x108/0x2b0 [ 2992.953296][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2992.957793][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2992.962461][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2992.968515][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2992.974648][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2992.979827][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2992.984656][T23188] do_SYSENTER_32+0x73/0x90 [ 2992.989154][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2992.995453][T23188] [ 2992.997763][T23188] Uninit was stored to memory at: [ 2993.002800][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.008510][T23188] __msan_chain_origin+0x50/0x90 [ 2993.013426][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.018525][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.023452][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.027933][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.032677][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.038734][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.044898][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.050089][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.054925][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.059417][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.066180][T23188] [ 2993.068520][T23188] Uninit was stored to memory at: [ 2993.073524][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.079309][T23188] __msan_chain_origin+0x50/0x90 [ 2993.084228][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.089317][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.094233][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.098724][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.103408][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.109468][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.115764][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.120955][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.125789][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.130389][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.136695][T23188] [ 2993.139020][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2993.145700][T23188] do_recvmmsg+0xbf/0x22c0 [ 2993.150096][T23188] do_recvmmsg+0xbf/0x22c0 [ 2993.359447][T23188] not chained 2190000 origins [ 2993.364367][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2993.373009][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.383043][T23188] Call Trace: [ 2993.386319][T23188] dump_stack+0x21c/0x280 [ 2993.390731][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2993.396536][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2993.401741][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2993.407597][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2993.412784][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2993.418317][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2993.424397][T23188] ? _copy_from_user+0x201/0x310 [ 2993.429327][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2993.434537][T23188] __msan_chain_origin+0x50/0x90 [ 2993.439460][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.444578][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.449504][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.454084][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2993.459291][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2993.465183][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2993.470389][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2993.475653][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2993.480433][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2993.485177][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.489843][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.495894][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.502069][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.507257][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.512093][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.516578][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.522884][T23188] RIP: 0023:0xf7f96549 [ 2993.526924][T23188] Code: Bad RIP value. [ 2993.530966][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2993.539396][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2993.547433][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2993.555380][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2993.563436][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2993.571401][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2993.580655][T23188] Uninit was stored to memory at: [ 2993.585676][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.591373][T23188] __msan_chain_origin+0x50/0x90 [ 2993.596291][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.601394][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.606332][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.610811][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.615466][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.621529][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.627675][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.632850][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.637678][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.642159][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.648454][T23188] [ 2993.650785][T23188] Uninit was stored to memory at: [ 2993.655879][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.661574][T23188] __msan_chain_origin+0x50/0x90 [ 2993.667099][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.672184][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.677096][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.681589][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.686260][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.692312][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.698443][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.703633][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.708461][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.712941][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.719237][T23188] [ 2993.721538][T23188] Uninit was stored to memory at: [ 2993.727494][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.733189][T23188] __msan_chain_origin+0x50/0x90 [ 2993.738121][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.743213][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.748125][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.752620][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.757295][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.763339][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.769469][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.774659][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.779498][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.784082][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.790377][T23188] [ 2993.792847][T23188] Uninit was stored to memory at: [ 2993.797859][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.803555][T23188] __msan_chain_origin+0x50/0x90 [ 2993.808477][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.813570][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.818496][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.822974][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.827645][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.833687][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.839832][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.845015][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.849870][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.854378][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.861381][T23188] [ 2993.863686][T23188] Uninit was stored to memory at: [ 2993.868688][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.874400][T23188] __msan_chain_origin+0x50/0x90 [ 2993.879330][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.884854][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.889776][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.894265][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.898922][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.904962][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.911093][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.916271][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.921117][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.925619][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2993.931921][T23188] [ 2993.934225][T23188] Uninit was stored to memory at: [ 2993.939239][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2993.944934][T23188] __msan_chain_origin+0x50/0x90 [ 2993.949853][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2993.954940][T23188] get_compat_msghdr+0x108/0x2b0 [ 2993.959883][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2993.964360][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2993.969014][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2993.975056][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2993.981363][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2993.986547][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2993.992332][T23188] do_SYSENTER_32+0x73/0x90 [ 2993.996919][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.003220][T23188] [ 2994.005529][T23188] Uninit was stored to memory at: [ 2994.010663][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.016387][T23188] __msan_chain_origin+0x50/0x90 [ 2994.021305][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.026395][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.031349][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.035845][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.041370][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.047429][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.053576][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.058754][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.063580][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.068060][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.074373][T23188] [ 2994.076678][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2994.083328][T23188] do_recvmmsg+0xbf/0x22c0 [ 2994.087720][T23188] do_recvmmsg+0xbf/0x22c0 [ 2994.265094][T23188] not chained 2200000 origins [ 2994.269934][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2994.278604][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2994.288659][T23188] Call Trace: [ 2994.293189][T23188] dump_stack+0x21c/0x280 [ 2994.297547][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2994.303300][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2994.308525][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2994.314082][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2994.320160][T23188] ? _copy_from_user+0x201/0x310 [ 2994.325107][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2994.330331][T23188] __msan_chain_origin+0x50/0x90 [ 2994.335311][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.340443][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.345394][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.349922][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2994.355154][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2994.361057][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2994.366267][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2994.372254][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2994.377020][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2994.381794][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.386499][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.392585][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.398749][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.403963][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.408841][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.413354][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.419678][T23188] RIP: 0023:0xf7f96549 [ 2994.423741][T23188] Code: Bad RIP value. [ 2994.427807][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2994.436221][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2994.444191][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2994.452167][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2994.460140][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2994.468110][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2994.476178][T23188] Uninit was stored to memory at: [ 2994.481211][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.486936][T23188] __msan_chain_origin+0x50/0x90 [ 2994.491880][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.496993][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.501969][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.506474][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.511163][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.517242][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.523380][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.528559][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.533407][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.537892][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.544249][T23188] [ 2994.546589][T23188] Uninit was stored to memory at: [ 2994.551596][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.557335][T23188] __msan_chain_origin+0x50/0x90 [ 2994.562301][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.567390][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.572327][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.576806][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.581459][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.587507][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.593689][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.598865][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.603692][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.608172][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.614466][T23188] [ 2994.616773][T23188] Uninit was stored to memory at: [ 2994.621784][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.627479][T23188] __msan_chain_origin+0x50/0x90 [ 2994.632409][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.637496][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.642423][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.646918][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.651574][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.657636][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.663779][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.668955][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.673782][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.678262][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.684555][T23188] [ 2994.686876][T23188] Uninit was stored to memory at: [ 2994.691896][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.697606][T23188] __msan_chain_origin+0x50/0x90 [ 2994.702520][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.707628][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.712542][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.717021][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.721692][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.727734][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.733867][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.739058][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.743882][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.748388][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.754683][T23188] [ 2994.756986][T23188] Uninit was stored to memory at: [ 2994.762004][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.767697][T23188] __msan_chain_origin+0x50/0x90 [ 2994.772620][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.777722][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.782657][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.787141][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.791797][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.797858][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.803990][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.809174][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.814000][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.818489][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.824798][T23188] [ 2994.827189][T23188] Uninit was stored to memory at: [ 2994.832191][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.837886][T23188] __msan_chain_origin+0x50/0x90 [ 2994.842800][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.847905][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.852822][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.857319][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.861998][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.868041][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.874181][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.879357][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.884184][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.888666][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.894977][T23188] [ 2994.897280][T23188] Uninit was stored to memory at: [ 2994.902297][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2994.908005][T23188] __msan_chain_origin+0x50/0x90 [ 2994.912933][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2994.918021][T23188] get_compat_msghdr+0x108/0x2b0 [ 2994.922946][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2994.927422][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2994.932078][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2994.938121][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2994.944252][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2994.949426][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2994.954265][T23188] do_SYSENTER_32+0x73/0x90 [ 2994.958756][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2994.965189][T23188] [ 2994.967587][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2994.974235][T23188] do_recvmmsg+0xbf/0x22c0 [ 2994.978625][T23188] do_recvmmsg+0xbf/0x22c0 [ 2995.195648][T23188] not chained 2210000 origins [ 2995.200366][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2995.209034][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2995.219095][T23188] Call Trace: [ 2995.222400][T23188] dump_stack+0x21c/0x280 [ 2995.226750][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2995.232573][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2995.237770][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2995.243572][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2995.248752][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2995.255233][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2995.261311][T23188] ? _copy_from_user+0x201/0x310 [ 2995.266249][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2995.271427][T23188] __msan_chain_origin+0x50/0x90 [ 2995.276346][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.284742][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.289676][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.294189][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2995.299376][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2995.305252][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2995.310435][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2995.315707][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2995.320446][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2995.325187][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.330004][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.336055][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.342243][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.348033][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.352902][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.357386][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.363688][T23188] RIP: 0023:0xf7f96549 [ 2995.367731][T23188] Code: Bad RIP value. [ 2995.371771][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2995.380199][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2995.388671][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2995.396618][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2995.404566][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2995.412600][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2995.420556][T23188] Uninit was stored to memory at: [ 2995.425573][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.431272][T23188] __msan_chain_origin+0x50/0x90 [ 2995.436188][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.441289][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.446213][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.450690][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.455347][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.461390][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.467521][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.472723][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.477559][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.482041][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.488335][T23188] [ 2995.490655][T23188] Uninit was stored to memory at: [ 2995.495654][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.501349][T23188] __msan_chain_origin+0x50/0x90 [ 2995.506279][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.511382][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.516296][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.520774][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.525443][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.531486][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.537633][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.542808][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.547635][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.552131][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.558441][T23188] [ 2995.560757][T23188] Uninit was stored to memory at: [ 2995.565756][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.571470][T23188] __msan_chain_origin+0x50/0x90 [ 2995.576398][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.581494][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.586412][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.590892][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.595559][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.601824][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.610317][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.615502][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.620334][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.624818][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.631121][T23188] [ 2995.633431][T23188] Uninit was stored to memory at: [ 2995.638448][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.644152][T23188] __msan_chain_origin+0x50/0x90 [ 2995.649072][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.654159][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.659074][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.663555][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.668212][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.674252][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.680381][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.685556][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.690427][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.694909][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.701205][T23188] [ 2995.703550][T23188] Uninit was stored to memory at: [ 2995.708551][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.714244][T23188] __msan_chain_origin+0x50/0x90 [ 2995.719159][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.724245][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.729198][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.733678][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.738332][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.744392][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.751492][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.756677][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.761503][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.765985][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.772299][T23188] [ 2995.774602][T23188] Uninit was stored to memory at: [ 2995.779602][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.785299][T23188] __msan_chain_origin+0x50/0x90 [ 2995.790300][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.795385][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.800295][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.804771][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.809424][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.815466][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.821595][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.826810][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.831634][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.836113][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.842407][T23188] [ 2995.844752][T23188] Uninit was stored to memory at: [ 2995.849754][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2995.855483][T23188] __msan_chain_origin+0x50/0x90 [ 2995.860429][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2995.865513][T23188] get_compat_msghdr+0x108/0x2b0 [ 2995.870428][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2995.874905][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2995.879555][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2995.885639][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2995.891767][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2995.896941][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2995.901807][T23188] do_SYSENTER_32+0x73/0x90 [ 2995.906285][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2995.912591][T23188] [ 2995.914892][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2995.921551][T23188] do_recvmmsg+0xbf/0x22c0 [ 2995.925943][T23188] do_recvmmsg+0xbf/0x22c0 [ 2996.141387][T23188] not chained 2220000 origins [ 2996.146112][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2996.154777][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2996.164829][T23188] Call Trace: [ 2996.168130][T23188] dump_stack+0x21c/0x280 [ 2996.172479][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2996.178223][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2996.183424][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2996.188994][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2996.195069][T23188] ? _copy_from_user+0x201/0x310 [ 2996.200015][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2996.205218][T23188] __msan_chain_origin+0x50/0x90 [ 2996.210162][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.215291][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.220240][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.224765][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2996.229974][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2996.235892][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2996.241101][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2996.246390][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2996.251153][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2996.255920][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.260620][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.266711][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.272868][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.278209][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.283040][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.287531][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.293943][T23188] RIP: 0023:0xf7f96549 [ 2996.297984][T23188] Code: Bad RIP value. [ 2996.302067][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2996.310456][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2996.318409][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2996.326357][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2996.334305][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2996.342256][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2996.350210][T23188] Uninit was stored to memory at: [ 2996.355302][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.361037][T23188] __msan_chain_origin+0x50/0x90 [ 2996.365950][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.371034][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.375944][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.380463][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.385152][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.391231][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.397362][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.402534][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.407373][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.411863][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.418162][T23188] [ 2996.420465][T23188] Uninit was stored to memory at: [ 2996.425467][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.431161][T23188] __msan_chain_origin+0x50/0x90 [ 2996.436073][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.441160][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.446073][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.450565][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.455221][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.461275][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.467414][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.472590][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.477415][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.481895][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.488201][T23188] [ 2996.490504][T23188] Uninit was stored to memory at: [ 2996.495522][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.501214][T23188] __msan_chain_origin+0x50/0x90 [ 2996.506139][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.511224][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.516135][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.520611][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.525275][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.531598][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.537734][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.542907][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.547739][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.552217][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.558509][T23188] [ 2996.560813][T23188] Uninit was stored to memory at: [ 2996.565828][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.571535][T23188] __msan_chain_origin+0x50/0x90 [ 2996.576459][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.581555][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.586474][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.590950][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.595601][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.601644][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.607774][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.612947][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.617776][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.622255][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.628549][T23188] [ 2996.630871][T23188] Uninit was stored to memory at: [ 2996.635880][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.641598][T23188] __msan_chain_origin+0x50/0x90 [ 2996.646522][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.651606][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.656516][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.660991][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.665641][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.671682][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.677810][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.682998][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.687823][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.692299][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.698594][T23188] [ 2996.700895][T23188] Uninit was stored to memory at: [ 2996.705896][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.711602][T23188] __msan_chain_origin+0x50/0x90 [ 2996.716528][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.721614][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.726528][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.731005][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.735657][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.741698][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.747846][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.753018][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.757843][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.762341][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.768635][T23188] [ 2996.770934][T23188] Uninit was stored to memory at: [ 2996.775933][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2996.781625][T23188] __msan_chain_origin+0x50/0x90 [ 2996.786537][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2996.791630][T23188] get_compat_msghdr+0x108/0x2b0 [ 2996.796575][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2996.801053][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2996.805706][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2996.811749][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2996.817891][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2996.823066][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2996.827908][T23188] do_SYSENTER_32+0x73/0x90 [ 2996.832385][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2996.838687][T23188] [ 2996.840990][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2996.847641][T23188] do_recvmmsg+0xbf/0x22c0 [ 2996.852032][T23188] do_recvmmsg+0xbf/0x22c0 [ 2997.044322][T23188] not chained 2230000 origins [ 2997.049045][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2997.057706][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.067787][T23188] Call Trace: [ 2997.071088][T23188] dump_stack+0x21c/0x280 [ 2997.075428][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2997.081173][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.086377][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2997.091929][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2997.098008][T23188] ? _copy_from_user+0x201/0x310 [ 2997.102952][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.108153][T23188] __msan_chain_origin+0x50/0x90 [ 2997.113273][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.118408][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.123363][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.127890][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.133096][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2997.138997][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.144193][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2997.149464][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2997.154203][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2997.159007][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.163724][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.169776][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.176052][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.181239][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.186077][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.190564][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.196913][T23188] RIP: 0023:0xf7f96549 [ 2997.200956][T23188] Code: Bad RIP value. [ 2997.204994][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2997.213418][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2997.221367][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2997.229351][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2997.237305][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2997.245261][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2997.253218][T23188] Uninit was stored to memory at: [ 2997.258229][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.263944][T23188] __msan_chain_origin+0x50/0x90 [ 2997.268859][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.273943][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.278857][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.283334][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.287986][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.294042][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.300189][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.305378][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.310216][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.314699][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.320996][T23188] [ 2997.323300][T23188] Uninit was stored to memory at: [ 2997.328308][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.334031][T23188] __msan_chain_origin+0x50/0x90 [ 2997.338948][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.344033][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.348945][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.353422][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.358076][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.364128][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.370259][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.375449][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.380292][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.384774][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.391083][T23188] [ 2997.393385][T23188] Uninit was stored to memory at: [ 2997.398387][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.404080][T23188] __msan_chain_origin+0x50/0x90 [ 2997.408994][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.414092][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.419003][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.423481][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.428133][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.434186][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.440316][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.445487][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.450315][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.454794][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.461099][T23188] [ 2997.463400][T23188] Uninit was stored to memory at: [ 2997.468401][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.474094][T23188] __msan_chain_origin+0x50/0x90 [ 2997.479023][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.484122][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.489032][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.493507][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.498160][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.504201][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.510330][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.515503][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.520337][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.524813][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.531118][T23188] [ 2997.533419][T23188] Uninit was stored to memory at: [ 2997.538430][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.544122][T23188] __msan_chain_origin+0x50/0x90 [ 2997.549034][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.554132][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.559046][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.563521][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.568172][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.574230][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.580378][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.585560][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.590384][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.594860][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.601154][T23188] [ 2997.603455][T23188] Uninit was stored to memory at: [ 2997.608456][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.614147][T23188] __msan_chain_origin+0x50/0x90 [ 2997.619072][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.624159][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.629072][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.633548][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.638202][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.644253][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.650382][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.655575][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.660400][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.664877][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.671171][T23188] [ 2997.673471][T23188] Uninit was stored to memory at: [ 2997.678475][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2997.684182][T23188] __msan_chain_origin+0x50/0x90 [ 2997.689098][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.694183][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.699095][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.703571][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2997.708238][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2997.714291][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2997.720421][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2997.725594][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2997.730421][T23188] do_SYSENTER_32+0x73/0x90 [ 2997.734898][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2997.741193][T23188] [ 2997.743495][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2997.750142][T23188] do_recvmmsg+0xbf/0x22c0 [ 2997.754531][T23188] do_recvmmsg+0xbf/0x22c0 [ 2997.914496][T23188] not chained 2240000 origins [ 2997.919308][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2997.927973][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.938022][T23188] Call Trace: [ 2997.941321][T23188] dump_stack+0x21c/0x280 [ 2997.945660][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2997.951406][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.956615][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2997.962197][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2997.968301][T23188] ? _copy_from_user+0x201/0x310 [ 2997.973245][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2997.979141][T23188] __msan_chain_origin+0x50/0x90 [ 2997.984083][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2997.989210][T23188] get_compat_msghdr+0x108/0x2b0 [ 2997.994157][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2997.998680][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.003886][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2998.009785][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.014990][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2998.020384][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2998.025146][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2998.029916][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.034622][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.040702][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.046861][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.052071][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.056926][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.061437][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.067766][T23188] RIP: 0023:0xf7f96549 [ 2998.071830][T23188] Code: Bad RIP value. [ 2998.075904][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2998.084317][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2998.092318][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2998.100322][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2998.108384][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2998.116359][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2998.124316][T23188] Uninit was stored to memory at: [ 2998.129331][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.135030][T23188] __msan_chain_origin+0x50/0x90 [ 2998.139950][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.145041][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.149958][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.154436][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.159103][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.165144][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.171273][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.176448][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.181275][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.185765][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.192084][T23188] [ 2998.194421][T23188] Uninit was stored to memory at: [ 2998.199423][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.205235][T23188] __msan_chain_origin+0x50/0x90 [ 2998.210162][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.215266][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.220183][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.224664][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.229373][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.235422][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.241563][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.246750][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.251577][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.256063][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.262357][T23188] [ 2998.264659][T23188] Uninit was stored to memory at: [ 2998.269663][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.275369][T23188] __msan_chain_origin+0x50/0x90 [ 2998.280376][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.287722][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.292647][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.297178][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.301847][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.307893][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.314027][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.319241][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.324069][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.328550][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.334846][T23188] [ 2998.337150][T23188] Uninit was stored to memory at: [ 2998.342189][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.347882][T23188] __msan_chain_origin+0x50/0x90 [ 2998.352794][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.357883][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.362794][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.367269][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.371932][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.377977][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.384124][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.389299][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.394124][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.398604][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.404899][T23188] [ 2998.407198][T23188] Uninit was stored to memory at: [ 2998.413069][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.418762][T23188] __msan_chain_origin+0x50/0x90 [ 2998.423700][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.428805][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.433717][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.438198][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.442851][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.448893][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.455022][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.460198][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.465025][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.469504][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.475904][T23188] [ 2998.478214][T23188] Uninit was stored to memory at: [ 2998.483224][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.489966][T23188] __msan_chain_origin+0x50/0x90 [ 2998.494887][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.500024][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.504945][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.509427][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.514080][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.520125][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.526257][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.531436][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.536268][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.540763][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.547057][T23188] [ 2998.549368][T23188] Uninit was stored to memory at: [ 2998.554369][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2998.560067][T23188] __msan_chain_origin+0x50/0x90 [ 2998.565007][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.570094][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.575021][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.579501][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.584153][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.590198][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.596329][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.601503][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.606331][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.610811][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.617194][T23188] [ 2998.619499][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2998.626500][T23188] do_recvmmsg+0xbf/0x22c0 [ 2998.630890][T23188] do_recvmmsg+0xbf/0x22c0 [ 2998.792047][T23188] not chained 2250000 origins [ 2998.796777][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2998.805481][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.815535][T23188] Call Trace: [ 2998.818837][T23188] dump_stack+0x21c/0x280 [ 2998.823182][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2998.828925][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.834127][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2998.839685][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2998.845763][T23188] ? _copy_from_user+0x201/0x310 [ 2998.850705][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.855910][T23188] __msan_chain_origin+0x50/0x90 [ 2998.860945][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2998.866083][T23188] get_compat_msghdr+0x108/0x2b0 [ 2998.871034][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2998.875560][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.880768][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2998.886851][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2998.892059][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2998.897411][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2998.902184][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2998.906956][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2998.911651][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2998.917735][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2998.923897][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2998.929107][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2998.933965][T23188] do_SYSENTER_32+0x73/0x90 [ 2998.938483][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2998.944807][T23188] RIP: 0023:0xf7f96549 [ 2998.948867][T23188] Code: Bad RIP value. [ 2998.952930][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2998.961342][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2998.972785][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2998.980750][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2998.988699][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2998.996647][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2999.004611][T23188] Uninit was stored to memory at: [ 2999.009618][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.015314][T23188] __msan_chain_origin+0x50/0x90 [ 2999.020229][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.025318][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.030247][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.034760][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.039428][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.045473][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.051606][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.056784][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.061611][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.066792][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.073103][T23188] [ 2999.075408][T23188] Uninit was stored to memory at: [ 2999.080410][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.087772][T23188] __msan_chain_origin+0x50/0x90 [ 2999.092703][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.097791][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.102702][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.107182][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.111861][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.117916][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.124051][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.129232][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.134064][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.138545][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.144844][T23188] [ 2999.147153][T23188] Uninit was stored to memory at: [ 2999.152168][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.157878][T23188] __msan_chain_origin+0x50/0x90 [ 2999.162810][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.167897][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.172810][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.177305][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.181977][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.188020][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.194150][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.199326][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.204153][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.208632][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.214927][T23188] [ 2999.217227][T23188] Uninit was stored to memory at: [ 2999.222229][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.227924][T23188] __msan_chain_origin+0x50/0x90 [ 2999.232839][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.237927][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.242839][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.247321][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.251974][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.258017][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.264199][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.269391][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.274237][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.278863][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.285173][T23188] [ 2999.287525][T23188] Uninit was stored to memory at: [ 2999.292536][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.298238][T23188] __msan_chain_origin+0x50/0x90 [ 2999.303302][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.308394][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.313308][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.317788][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.322496][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.328543][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.334673][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.339852][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.344693][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.349173][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.355467][T23188] [ 2999.357771][T23188] Uninit was stored to memory at: [ 2999.362773][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.368469][T23188] __msan_chain_origin+0x50/0x90 [ 2999.373401][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.378928][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.383859][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.388337][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.392992][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.399037][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.405187][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.410365][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.415190][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.419683][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.425979][T23188] [ 2999.428281][T23188] Uninit was stored to memory at: [ 2999.433298][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.438992][T23188] __msan_chain_origin+0x50/0x90 [ 2999.443925][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.449013][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.453926][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.458420][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.463075][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.469279][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.475410][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.480586][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.485414][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.489895][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.496189][T23188] [ 2999.498495][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 2999.505160][T23188] do_recvmmsg+0xbf/0x22c0 [ 2999.509554][T23188] do_recvmmsg+0xbf/0x22c0 [ 2999.724732][T23188] not chained 2260000 origins [ 2999.729455][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2999.738122][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2999.748176][T23188] Call Trace: [ 2999.751464][T23188] dump_stack+0x21c/0x280 [ 2999.755779][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 2999.761486][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2999.766663][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 2999.772187][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2999.778233][T23188] ? _copy_from_user+0x201/0x310 [ 2999.783150][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2999.788357][T23188] __msan_chain_origin+0x50/0x90 [ 2999.793290][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.798407][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.803332][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.807843][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2999.813023][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2999.818894][T23188] ? kmsan_get_metadata+0x116/0x180 [ 2999.824071][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 2999.829335][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2999.834090][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 2999.838848][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.843550][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.849601][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.855736][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.860916][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.865745][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.870229][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2999.876555][T23188] RIP: 0023:0xf7f96549 [ 2999.880608][T23188] Code: Bad RIP value. [ 2999.884647][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2999.893033][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2999.900983][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2999.908933][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2999.916881][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2999.924829][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2999.932797][T23188] Uninit was stored to memory at: [ 2999.937834][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 2999.943529][T23188] __msan_chain_origin+0x50/0x90 [ 2999.948443][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 2999.953542][T23188] get_compat_msghdr+0x108/0x2b0 [ 2999.958458][T23188] do_recvmmsg+0xdbb/0x22c0 [ 2999.962938][T23188] __sys_recvmmsg+0x5dd/0x610 [ 2999.967600][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2999.973643][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2999.979789][T23188] __do_fast_syscall_32+0x2af/0x480 [ 2999.984979][T23188] do_fast_syscall_32+0x6b/0xd0 [ 2999.989916][T23188] do_SYSENTER_32+0x73/0x90 [ 2999.994833][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.001128][T23188] [ 3000.003443][T23188] Uninit was stored to memory at: [ 3000.008461][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.014156][T23188] __msan_chain_origin+0x50/0x90 [ 3000.019070][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.024163][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.029093][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.033589][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.038244][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.044297][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.050445][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.055632][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.060471][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.064965][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.071277][T23188] [ 3000.073597][T23188] Uninit was stored to memory at: [ 3000.078624][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.084342][T23188] __msan_chain_origin+0x50/0x90 [ 3000.089258][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.094349][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.099285][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.103765][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.108417][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.114458][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.120612][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.125805][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.130631][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.135112][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.141407][T23188] [ 3000.143709][T23188] Uninit was stored to memory at: [ 3000.148798][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.154492][T23188] __msan_chain_origin+0x50/0x90 [ 3000.160622][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.165757][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.170676][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.175154][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.179948][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.186100][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.192233][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.197412][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.202242][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.206746][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.213059][T23188] [ 3000.215364][T23188] Uninit was stored to memory at: [ 3000.220368][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.226063][T23188] __msan_chain_origin+0x50/0x90 [ 3000.230979][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.236081][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.241008][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.245503][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.250175][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.256220][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.262358][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.267532][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.272358][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.276839][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.283133][T23188] [ 3000.285444][T23188] Uninit was stored to memory at: [ 3000.290461][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.296161][T23188] __msan_chain_origin+0x50/0x90 [ 3000.301080][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.306168][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.311228][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.315709][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.320364][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.326406][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.332539][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.337717][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.342594][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.347078][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.353424][T23188] [ 3000.355727][T23188] Uninit was stored to memory at: [ 3000.360744][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.366441][T23188] __msan_chain_origin+0x50/0x90 [ 3000.371355][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.376450][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.381381][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.385862][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.390523][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.396566][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.402698][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.407873][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.412699][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.417178][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.423473][T23188] [ 3000.425795][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3000.433415][T23188] do_recvmmsg+0xbf/0x22c0 [ 3000.437808][T23188] do_recvmmsg+0xbf/0x22c0 [ 3000.701379][T23188] not chained 2270000 origins [ 3000.706101][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3000.714770][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3000.724822][T23188] Call Trace: [ 3000.728124][T23188] dump_stack+0x21c/0x280 [ 3000.732466][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3000.738211][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3000.743430][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3000.748987][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3000.755069][T23188] ? _copy_from_user+0x201/0x310 [ 3000.760016][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3000.765225][T23188] __msan_chain_origin+0x50/0x90 [ 3000.770191][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.775330][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.780283][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.784810][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3000.790019][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3000.795961][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3000.801182][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3000.806480][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3000.811252][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3000.816287][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.820984][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.827053][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.833186][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.840212][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.845057][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.849544][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.855847][T23188] RIP: 0023:0xf7f96549 [ 3000.859901][T23188] Code: Bad RIP value. [ 3000.863944][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3000.872344][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3000.880292][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3000.888510][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3000.896471][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3000.904416][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3000.912378][T23188] Uninit was stored to memory at: [ 3000.917384][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.923088][T23188] __msan_chain_origin+0x50/0x90 [ 3000.928020][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3000.933104][T23188] get_compat_msghdr+0x108/0x2b0 [ 3000.938017][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3000.942502][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3000.947154][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3000.953195][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3000.959340][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3000.964524][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3000.969362][T23188] do_SYSENTER_32+0x73/0x90 [ 3000.973839][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3000.980131][T23188] [ 3000.982432][T23188] Uninit was stored to memory at: [ 3000.987432][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3000.993124][T23188] __msan_chain_origin+0x50/0x90 [ 3000.998039][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.003121][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.008044][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.012522][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.017957][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.023996][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.030133][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.035304][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.040131][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.044619][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.050911][T23188] [ 3001.053213][T23188] Uninit was stored to memory at: [ 3001.058308][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.064015][T23188] __msan_chain_origin+0x50/0x90 [ 3001.068930][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.074014][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.078927][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.083405][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.088060][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.094102][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.100230][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.105402][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.110228][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.114719][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.121012][T23188] [ 3001.123313][T23188] Uninit was stored to memory at: [ 3001.128314][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.134021][T23188] __msan_chain_origin+0x50/0x90 [ 3001.138934][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.144032][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.148945][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.153423][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.158076][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.164115][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.170245][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.175419][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.180245][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.184723][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.191016][T23188] [ 3001.193318][T23188] Uninit was stored to memory at: [ 3001.198317][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.204107][T23188] __msan_chain_origin+0x50/0x90 [ 3001.209017][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.214101][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.219108][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.223586][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.228237][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.234283][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.240411][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.245589][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.250414][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.254890][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.261188][T23188] [ 3001.263501][T23188] Uninit was stored to memory at: [ 3001.268502][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.274199][T23188] __msan_chain_origin+0x50/0x90 [ 3001.279114][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.284251][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.289172][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.293652][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.298317][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.304371][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.310536][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.315724][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.320610][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.325091][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.331387][T23188] [ 3001.333694][T23188] Uninit was stored to memory at: [ 3001.338704][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.344514][T23188] __msan_chain_origin+0x50/0x90 [ 3001.349443][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.354537][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.359468][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.363950][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.368606][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.374706][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.380877][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.386069][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.390898][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.395386][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.401780][T23188] [ 3001.404098][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3001.410757][T23188] do_recvmmsg+0xbf/0x22c0 [ 3001.415175][T23188] do_recvmmsg+0xbf/0x22c0 [ 3001.628625][T23188] not chained 2280000 origins [ 3001.633350][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3001.642048][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3001.652099][T23188] Call Trace: [ 3001.655402][T23188] dump_stack+0x21c/0x280 [ 3001.659746][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3001.665475][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3001.670678][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3001.676498][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3001.681699][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3001.687249][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3001.693352][T23188] ? _copy_from_user+0x201/0x310 [ 3001.698322][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3001.703522][T23188] __msan_chain_origin+0x50/0x90 [ 3001.708469][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.713599][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.718546][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.723072][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3001.728271][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3001.734144][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3001.739337][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3001.744610][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3001.749354][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3001.754097][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.758762][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.764820][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.770953][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.776135][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.780963][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.785445][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.791763][T23188] RIP: 0023:0xf7f96549 [ 3001.795818][T23188] Code: Bad RIP value. [ 3001.799859][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3001.808245][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3001.816193][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3001.824139][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3001.832093][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3001.842651][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3001.850613][T23188] Uninit was stored to memory at: [ 3001.855624][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.861317][T23188] __msan_chain_origin+0x50/0x90 [ 3001.866236][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.871321][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.876233][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.880710][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.885361][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.891506][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.897637][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.902821][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.907748][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.912225][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.918517][T23188] [ 3001.920823][T23188] Uninit was stored to memory at: [ 3001.925824][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3001.931629][T23188] __msan_chain_origin+0x50/0x90 [ 3001.936562][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3001.941653][T23188] get_compat_msghdr+0x108/0x2b0 [ 3001.946565][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3001.951044][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3001.955700][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3001.961745][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3001.967877][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3001.973053][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3001.977898][T23188] do_SYSENTER_32+0x73/0x90 [ 3001.982378][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3001.988673][T23188] [ 3001.990976][T23188] Uninit was stored to memory at: [ 3001.995977][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.001684][T23188] __msan_chain_origin+0x50/0x90 [ 3002.006600][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.011688][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.016615][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.021096][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.025766][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.031810][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.037956][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.043149][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.048001][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.052484][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.058780][T23188] [ 3002.061107][T23188] Uninit was stored to memory at: [ 3002.066111][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.072414][T23188] __msan_chain_origin+0x50/0x90 [ 3002.077331][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.082434][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.087369][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.091847][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.096501][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.102546][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.108693][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.113870][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.118701][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.123197][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.129590][T23188] [ 3002.131901][T23188] Uninit was stored to memory at: [ 3002.136914][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.142620][T23188] __msan_chain_origin+0x50/0x90 [ 3002.147538][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.152644][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.157560][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.162039][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.166748][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.172795][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.178926][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.184310][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.189194][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.194643][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.200964][T23188] [ 3002.203270][T23188] Uninit was stored to memory at: [ 3002.208280][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.213990][T23188] __msan_chain_origin+0x50/0x90 [ 3002.218907][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.223993][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.228994][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.233473][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.238141][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.244182][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.250312][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.255498][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.260329][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.264809][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.272080][T23188] [ 3002.274402][T23188] Uninit was stored to memory at: [ 3002.279405][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.285206][T23188] __msan_chain_origin+0x50/0x90 [ 3002.290122][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.295220][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.300138][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.304619][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.309272][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.315314][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.321445][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.326621][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.331447][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.336643][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.342952][T23188] [ 3002.345257][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3002.351920][T23188] do_recvmmsg+0xbf/0x22c0 [ 3002.356314][T23188] do_recvmmsg+0xbf/0x22c0 [ 3002.560884][T23188] not chained 2290000 origins [ 3002.565614][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3002.574286][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3002.584351][T23188] Call Trace: [ 3002.587652][T23188] dump_stack+0x21c/0x280 [ 3002.592033][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3002.597777][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3002.602982][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3002.608533][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3002.614609][T23188] ? _copy_from_user+0x201/0x310 [ 3002.619554][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3002.624757][T23188] __msan_chain_origin+0x50/0x90 [ 3002.629705][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.634838][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.639789][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.644664][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3002.649871][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3002.655770][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3002.660976][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3002.666267][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3002.671035][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3002.675809][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.680601][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.686654][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.692787][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.697970][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.702799][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.707284][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.713586][T23188] RIP: 0023:0xf7f96549 [ 3002.717624][T23188] Code: Bad RIP value. [ 3002.721679][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3002.730065][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3002.738037][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3002.745986][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3002.753953][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3002.761902][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3002.769871][T23188] Uninit was stored to memory at: [ 3002.774878][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.780578][T23188] __msan_chain_origin+0x50/0x90 [ 3002.785509][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.790595][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.795511][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.800005][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.804664][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.810722][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.816870][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.822045][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.826885][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.831365][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.837749][T23188] [ 3002.840052][T23188] Uninit was stored to memory at: [ 3002.845054][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.850752][T23188] __msan_chain_origin+0x50/0x90 [ 3002.855756][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.860843][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.865759][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.870240][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.874893][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.880934][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.887065][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.892249][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.897076][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.901584][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.908922][T23188] [ 3002.911290][T23188] Uninit was stored to memory at: [ 3002.916353][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.922054][T23188] __msan_chain_origin+0x50/0x90 [ 3002.926990][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3002.932089][T23188] get_compat_msghdr+0x108/0x2b0 [ 3002.937006][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3002.941490][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3002.946145][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3002.952188][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3002.958318][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3002.963502][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3002.968329][T23188] do_SYSENTER_32+0x73/0x90 [ 3002.972810][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3002.979106][T23188] [ 3002.981410][T23188] Uninit was stored to memory at: [ 3002.986430][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3002.992123][T23188] __msan_chain_origin+0x50/0x90 [ 3002.997036][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.002122][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.007052][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.011530][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.016183][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.022225][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.028356][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.033545][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.038373][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.042852][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.049162][T23188] [ 3003.051481][T23188] Uninit was stored to memory at: [ 3003.056484][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.062178][T23188] __msan_chain_origin+0x50/0x90 [ 3003.067093][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.073135][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.078047][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.082526][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.087296][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.093340][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.099471][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.104646][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.109473][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.113952][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.120253][T23188] [ 3003.122581][T23188] Uninit was stored to memory at: [ 3003.127590][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.133320][T23188] __msan_chain_origin+0x50/0x90 [ 3003.138241][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.143332][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.148247][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.152727][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.157382][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.163445][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.169649][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.174827][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.179675][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.184417][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.190716][T23188] [ 3003.193018][T23188] Uninit was stored to memory at: [ 3003.198026][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.203720][T23188] __msan_chain_origin+0x50/0x90 [ 3003.208650][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.213753][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.218666][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.223143][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.227797][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.233856][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.239987][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.245183][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.250016][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.254780][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.261075][T23188] [ 3003.263394][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3003.270043][T23188] do_recvmmsg+0xbf/0x22c0 [ 3003.274442][T23188] do_recvmmsg+0xbf/0x22c0 [ 3003.436254][T23188] not chained 2300000 origins [ 3003.440981][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3003.449652][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3003.459964][T23188] Call Trace: [ 3003.463268][T23188] dump_stack+0x21c/0x280 [ 3003.467614][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3003.473346][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3003.478552][T23188] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3003.485081][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3003.490288][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3003.495869][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3003.501968][T23188] ? _copy_from_user+0x201/0x310 [ 3003.506922][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3003.512127][T23188] __msan_chain_origin+0x50/0x90 [ 3003.517080][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.522212][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.527164][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.532648][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3003.537947][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3003.544547][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3003.549759][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3003.555051][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3003.559818][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3003.564590][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.569300][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.575384][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.581548][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.586846][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.591709][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.596234][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.602598][T23188] RIP: 0023:0xf7f96549 [ 3003.606659][T23188] Code: Bad RIP value. [ 3003.610703][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3003.619091][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3003.627040][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3003.634988][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3003.643048][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3003.651000][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3003.658962][T23188] Uninit was stored to memory at: [ 3003.663999][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.669699][T23188] __msan_chain_origin+0x50/0x90 [ 3003.674614][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.679704][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.684627][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.689124][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.693778][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.699841][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.705977][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.711171][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.716003][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.720482][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.726782][T23188] [ 3003.729085][T23188] Uninit was stored to memory at: [ 3003.734086][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.739778][T23188] __msan_chain_origin+0x50/0x90 [ 3003.744693][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.749780][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.754709][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.759204][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.763877][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.769934][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.776086][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.781261][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.786088][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.790583][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.796877][T23188] [ 3003.799183][T23188] Uninit was stored to memory at: [ 3003.804186][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.809893][T23188] __msan_chain_origin+0x50/0x90 [ 3003.815138][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.820227][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.825142][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.829620][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.834276][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.840317][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.846447][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.851622][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.856450][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.860929][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.867225][T23188] [ 3003.869528][T23188] Uninit was stored to memory at: [ 3003.874542][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.880237][T23188] __msan_chain_origin+0x50/0x90 [ 3003.885151][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.890252][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.895514][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.899999][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.904651][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.910709][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.916840][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.922014][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.926839][T23188] do_SYSENTER_32+0x73/0x90 [ 3003.931320][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3003.937615][T23188] [ 3003.939916][T23188] Uninit was stored to memory at: [ 3003.944917][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3003.950611][T23188] __msan_chain_origin+0x50/0x90 [ 3003.955529][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3003.960615][T23188] get_compat_msghdr+0x108/0x2b0 [ 3003.965532][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3003.970009][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3003.974750][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3003.980973][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3003.987102][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3003.992280][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3003.997116][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.001685][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.007980][T23188] [ 3004.010308][T23188] Uninit was stored to memory at: [ 3004.015339][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.021047][T23188] __msan_chain_origin+0x50/0x90 [ 3004.026062][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.031409][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.036322][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.040801][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.045488][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.051533][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.057666][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.062843][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.067671][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.072151][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.078446][T23188] [ 3004.080763][T23188] Uninit was stored to memory at: [ 3004.085781][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.091483][T23188] __msan_chain_origin+0x50/0x90 [ 3004.096414][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.101588][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.106500][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.110994][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.115655][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.122152][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.128289][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.133468][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.138295][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.142778][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.149074][T23188] [ 3004.151382][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3004.158045][T23188] do_recvmmsg+0xbf/0x22c0 [ 3004.162454][T23188] do_recvmmsg+0xbf/0x22c0 [ 3004.371320][T23188] not chained 2310000 origins [ 3004.376053][T23188] CPU: 0 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3004.384725][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3004.394786][T23188] Call Trace: [ 3004.398087][T23188] dump_stack+0x21c/0x280 [ 3004.402443][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3004.408190][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3004.413392][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3004.418951][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3004.425029][T23188] ? _copy_from_user+0x201/0x310 [ 3004.429976][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3004.435267][T23188] __msan_chain_origin+0x50/0x90 [ 3004.440216][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.445381][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.450333][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.454861][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3004.460502][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3004.466408][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3004.471619][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3004.476899][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3004.481715][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3004.486459][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.491142][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.497192][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.504297][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.509479][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.514308][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.518819][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.525121][T23188] RIP: 0023:0xf7f96549 [ 3004.529163][T23188] Code: Bad RIP value. [ 3004.533213][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3004.541599][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3004.549563][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3004.557511][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3004.565468][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3004.573416][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3004.582239][T23188] Uninit was stored to memory at: [ 3004.587245][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.592940][T23188] __msan_chain_origin+0x50/0x90 [ 3004.597856][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.602942][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.607854][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.612350][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.617005][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.623048][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.629181][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.634356][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.639192][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.643670][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.649979][T23188] [ 3004.652283][T23188] Uninit was stored to memory at: [ 3004.657285][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.662980][T23188] __msan_chain_origin+0x50/0x90 [ 3004.667914][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.673015][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.677932][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.682500][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.687356][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.693400][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.699530][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.704705][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.709532][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.714015][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.720325][T23188] [ 3004.722630][T23188] Uninit was stored to memory at: [ 3004.727653][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.733353][T23188] __msan_chain_origin+0x50/0x90 [ 3004.738267][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.743351][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.748266][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.752743][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.757400][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.763443][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.769573][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.774748][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.779598][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.784080][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.790374][T23188] [ 3004.792692][T23188] Uninit was stored to memory at: [ 3004.797695][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.803389][T23188] __msan_chain_origin+0x50/0x90 [ 3004.808303][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.813390][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.818302][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.822781][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.827436][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.833495][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.839627][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.844802][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.849631][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.854110][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.860406][T23188] [ 3004.862709][T23188] Uninit was stored to memory at: [ 3004.867710][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.873404][T23188] __msan_chain_origin+0x50/0x90 [ 3004.878321][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.883424][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.888351][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.892831][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.897486][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.903527][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.909658][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.915093][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.919923][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.924836][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3004.931148][T23188] [ 3004.933449][T23188] Uninit was stored to memory at: [ 3004.938450][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3004.944144][T23188] __msan_chain_origin+0x50/0x90 [ 3004.949057][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3004.954142][T23188] get_compat_msghdr+0x108/0x2b0 [ 3004.959054][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3004.963533][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3004.968187][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3004.974230][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3004.980363][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3004.985538][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3004.990365][T23188] do_SYSENTER_32+0x73/0x90 [ 3004.994845][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.001163][T23188] [ 3005.003466][T23188] Uninit was stored to memory at: [ 3005.008465][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.014157][T23188] __msan_chain_origin+0x50/0x90 [ 3005.019071][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.024175][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.029087][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.033569][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.038223][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.044266][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.050399][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.055575][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.060411][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.065007][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.071317][T23188] [ 3005.073621][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3005.080270][T23188] do_recvmmsg+0xbf/0x22c0 [ 3005.084662][T23188] do_recvmmsg+0xbf/0x22c0 [ 3005.274683][T23188] not chained 2320000 origins [ 3005.279409][T23188] CPU: 1 PID: 23188 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 3005.288080][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3005.298142][T23188] Call Trace: [ 3005.301447][T23188] dump_stack+0x21c/0x280 [ 3005.305796][T23188] kmsan_internal_chain_origin+0x6f/0x130 [ 3005.311566][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3005.316784][T23188] ? kmsan_set_origin_checked+0x95/0xf0 [ 3005.322338][T23188] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 3005.328419][T23188] ? _copy_from_user+0x201/0x310 [ 3005.333402][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3005.338609][T23188] __msan_chain_origin+0x50/0x90 [ 3005.343558][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.349129][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.354084][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.358613][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3005.363833][T23188] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 3005.369736][T23188] ? kmsan_get_metadata+0x116/0x180 [ 3005.374952][T23188] ? __msan_poison_alloca+0xf0/0x120 [ 3005.380243][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3005.385009][T23188] ? __sys_recvmmsg+0xbb/0x610 [ 3005.390477][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.395180][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.401265][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.407459][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.412759][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.417622][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.422135][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.428464][T23188] RIP: 0023:0xf7f96549 [ 3005.432523][T23188] Code: Bad RIP value. [ 3005.436588][T23188] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3005.445013][T23188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 3005.452985][T23188] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3005.460959][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3005.468928][T23188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3005.476986][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3005.484951][T23188] Uninit was stored to memory at: [ 3005.489962][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.495657][T23188] __msan_chain_origin+0x50/0x90 [ 3005.500573][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.505669][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.510597][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.515073][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.519727][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.525787][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.531976][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.537191][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.542017][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.546522][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.552828][T23188] [ 3005.555164][T23188] Uninit was stored to memory at: [ 3005.560168][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.565875][T23188] __msan_chain_origin+0x50/0x90 [ 3005.570805][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.575891][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.580837][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.585324][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.589998][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.596071][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.602246][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.607437][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.612349][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.616843][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.623149][T23188] [ 3005.625458][T23188] Uninit was stored to memory at: [ 3005.630486][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.636195][T23188] __msan_chain_origin+0x50/0x90 [ 3005.641138][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.646228][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.651144][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.655635][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.660311][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.666365][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.672510][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.677696][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.682533][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.687012][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.693306][T23188] [ 3005.695615][T23188] Uninit was stored to memory at: [ 3005.700649][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.706359][T23188] __msan_chain_origin+0x50/0x90 [ 3005.711286][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.716383][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.721310][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.725789][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.730439][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.736494][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.742635][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.747810][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.752635][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.757127][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.763433][T23188] [ 3005.765753][T23188] Uninit was stored to memory at: [ 3005.770767][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.776474][T23188] __msan_chain_origin+0x50/0x90 [ 3005.781413][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.786523][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.791442][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.795939][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.800606][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.806650][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.812780][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.817981][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.822827][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.827306][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.833601][T23188] [ 3005.835907][T23188] Uninit was stored to memory at: [ 3005.840923][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.846620][T23188] __msan_chain_origin+0x50/0x90 [ 3005.851547][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.856644][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.861569][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.866047][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.870701][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.876759][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.883007][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.888199][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.893039][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.897531][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.903838][T23188] [ 3005.906140][T23188] Uninit was stored to memory at: [ 3005.911142][T23188] kmsan_internal_chain_origin+0xad/0x130 [ 3005.917021][T23188] __msan_chain_origin+0x50/0x90 [ 3005.921949][T23188] __get_compat_msghdr+0x6db/0x9d0 [ 3005.927049][T23188] get_compat_msghdr+0x108/0x2b0 [ 3005.931966][T23188] do_recvmmsg+0xdbb/0x22c0 [ 3005.936453][T23188] __sys_recvmmsg+0x5dd/0x610 [ 3005.941121][T23188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3005.947164][T23188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3005.953294][T23188] __do_fast_syscall_32+0x2af/0x480 [ 3005.958469][T23188] do_fast_syscall_32+0x6b/0xd0 [ 3005.963307][T23188] do_SYSENTER_32+0x73/0x90 [ 3005.967799][T23188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3005.974096][T23188] [ 3005.976409][T23188] Local variable ----msg_sys@do_recvmmsg created at: [ 3005.983070][T23188] do_recvmmsg+0xbf/0x22c0 [ 3005.987468][T23188] do_recvmmsg+0xbf/0x22c0 03:51:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='sh\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080), 0x14) 03:51:18 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000440)={{}, {0x77359400}}, 0x0) 03:51:18 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x29, 0xf, 0x0) 03:51:18 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5451, 0x0) 03:51:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 03:51:18 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsa\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000f80)) 03:51:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x5450, 0x0) 03:51:18 executing program 3: creat(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) timer_create(0x7, 0x0, &(0x7f0000000040)) 03:51:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 03:51:18 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:19 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 03:51:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:51:19 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') close(r0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0x31, &(0x7f0000000380)={&(0x7f0000000100)={0xfffffd9a, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x26c}}, 0x20008890) 03:51:19 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 03:51:19 executing program 1: timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup2(r0, r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 03:51:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$SOCK_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 03:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010002, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)={0x0}}, 0x48085) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 03:51:19 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r1, r0) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 03:51:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RREAD(r2, &(0x7f00000000c0)={0xb}, 0xb) 03:51:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000180)) 03:51:20 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RGETATTR(r2, 0x0, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) [ 3008.481275][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 3008.531337][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 03:51:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSIG(r0, 0x5450, 0x0) 03:51:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5608, 0x0) 03:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:20 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x0) 03:51:21 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:21 executing program 0: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000200)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 03:51:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:21 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:51:21 executing program 2: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={&(0x7f0000000040), 0x50, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x124}}, 0x0) 03:51:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 03:51:21 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) 03:51:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000003c0)=0x80) write$nbd(r1, 0x0, 0x0) 03:51:22 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) 03:51:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000088044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @multicast1, r4}, 0xc) 03:51:22 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:51:22 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0) 03:51:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r1) dup2(r2, r0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 03:51:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:22 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 03:51:22 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffffff, 0x402c0) 03:51:22 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) 03:51:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)) 03:51:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:51:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 03:51:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={0x0}}, 0x24004805) writev(0xffffffffffffffff, 0x0, 0x0) 03:51:23 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, 0x0, &(0x7f0000000080)) 03:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 03:51:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 03:51:23 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r1, r2) accept4(r2, 0x0, 0x0, 0x0) 03:51:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/167, 0xa7) 03:51:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x40}}, 0xab1a00d26f548731) 03:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320af) setsockopt$inet_opts(r1, 0x0, 0x2000000000024, 0x0, 0x0) 03:51:24 executing program 2: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 03:51:24 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x22, 0x0, &(0x7f0000000080)) 03:51:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:24 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) 03:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc41}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x10, 0x2, 0x0) tkill(r1, 0x1000000000016) 03:51:25 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:51:25 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$TIOCMGET(r0, 0x5451, 0x0) 03:51:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000700)=[{0x0, 0x0, 0x0}], 0x1, 0x40000) 03:51:25 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:51:25 executing program 0: r0 = eventfd(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ip6gretap0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)) 03:51:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) 03:51:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x0) 03:51:25 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:51:25 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:51:25 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x4400100000001, 0xfa) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$P9_RMKNOD(r1, 0x0, 0x0) 03:51:25 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RWSTAT(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r3, r2) tkill(r0, 0x1000000000016) 03:51:26 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="ba", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x1a3, 0x2000, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:51:26 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 03:51:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 03:51:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 03:51:26 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp, @in={0x2, 0x0, @remote}, @l2tp={0x2, 0x0, @dev}, 0x27}) 03:51:26 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "3c6bd7c1c61eae2c1cbde8cb1c6ca305ba6417"}) 03:51:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendto$unix(r1, 0x0, 0x0, 0x20003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40440c5) 03:51:27 executing program 3: r0 = socket(0x10, 0x800000000080002, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={0x0}}, 0x0) 03:51:27 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) getrandom(&(0x7f0000001180)=""/4100, 0x1004, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) 03:51:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000) connect$netlink(r1, &(0x7f0000001300)=@proc, 0xc) shutdown(r0, 0x0) 03:51:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCMIWAIT(r1, 0x5425, 0x0) 03:51:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}}, 0x24000010) 03:51:28 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) r1 = socket$inet(0x2, 0x4020000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x44}}, 0x0) 03:51:28 executing program 5: r0 = epoll_create(0x7fe) close(r0) socketpair$unix(0x1, 0x800000005, 0x0, &(0x7f0000000000)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0xfc}}, 0x0) 03:51:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xd, 0x0, 0x0) 03:51:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) 03:51:28 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x100000890c, &(0x7f0000000140)="0e00d45d6e426c35b1ba717f22c039bc40ffdf856622c4232548841c75c72e2fc3bd79cee509ceb9631a7c4910acb07f23e3d4b764") 03:51:28 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FITHAW(r0, 0x5450) 03:51:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:51:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) socket(0x2, 0xa, 0x0) tkill(r2, 0x1000000000016) 03:51:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) write$binfmt_aout(r0, 0x0, 0x0) 03:51:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x10000) dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:51:29 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000900)) 03:51:29 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='fd/3\x00') ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000001dc0)={0x0, 0x0, 0x0}) 03:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0x350, &(0x7f0000000180)={0x0}}, 0x0) 03:51:29 executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RSETATTR(r0, 0x0, 0x0) 03:51:30 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 03:51:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) signalfd(r0, &(0x7f0000000000), 0x8) 03:51:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) 03:51:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0) 03:51:31 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) shutdown(r0, 0x0) 03:51:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:51:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x2, &(0x7f0000002000)={'batadv_slave_0\x00'}) 03:51:31 executing program 0: r0 = epoll_create(0x2) epoll_wait(r0, &(0x7f00000005c0)=[{}], 0x1, 0x3ff) 03:51:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0xff00}, 0x2000000c, &(0x7f00000001c0)={0x0}}, 0x0) 03:51:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:31 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:51:31 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff5d, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 03:51:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x1b, &(0x7f0000000040)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @private2}}, 0x5c) 03:51:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) memfd_create(&(0x7f0000000100)='%#user-nodevkey\ting+[\x00\x91)\xc8\x19NU\xd1|X\xb0O\xb7\xc3\xc8\x9e>~\x9a\xfe\xee\xd9\x17\xdc\xa5\xa3\xa7{A\xb1\x8a\x9c\x03\r\xaf\x96{H\xb2\xff\xfa\x1b\xfe@|\x13\x9f\x13\xd52om\x1ej\xad\xa4\xa0\x176\xa6\x17-\x17\v\xa3\x7f\x9e S\r\x8a1\xce\v\xd8\x12m\xc2\xab\xa8;{Y\x02\xf2\xbf\xba\x06\xffO\x97\xa1\r_$\xbf\xd9\x8a\x17\x1c\x9f\x8a\xe8\xa5_$@3\x0e1y\a\xd6`\xb3_\x14\xc3p\xd6T\x0e\x91\x1a\x16\xc9s\xf8\xb8C\xb3ugg\xb7N\xce\xffq\xd7\xe2vN#\t\x00\x00\x00\xfbL\xad\xbb\x95\xda\xbb\x02\xf4\xd0\xd2\xe2\xd4\xe4\b\xdc\xd6\x17\x0f\xce\xe1Oh\x83\x03\x00\x00\x00\x9e\xcba\x8c\x92W\x1a\b`\xd8\xf0\xd4\xb5\t\x11\xf9^\x96Fd2\x8cC%\x0e\x8a\xa2\x9c>\xf2', 0x0) fdatasync(r0) 03:51:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={0x0}}, 0x4044800) 03:51:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 03:51:32 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) 03:51:32 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:51:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) write$cgroup_subtree(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) tkill(r2, 0x1000000000016) 03:51:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x2, &(0x7f0000000280)) 03:51:33 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, 0xffffffffffffffff, 0x0, 0x0) 03:51:33 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) 03:51:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') write$P9_RREAD(r0, 0x0, 0x0) 03:51:33 executing program 3: r0 = inotify_init() close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)) 03:51:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TIOCMSET(r0, 0x541b, &(0x7f0000000000)) 03:51:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) 03:51:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0, 0x4c}}, 0x20000000) 03:51:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc004) 03:51:33 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003000000c8"], 0x28) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 03:51:34 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc20}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 03:51:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$VT_SETMODE(r1, 0x540c, 0x0) 03:51:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00'}, 0x78) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 03:51:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 3026.704440][ T0] NOHZ: local_softirq_pending 08 03:51:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffffffffff8f, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) 03:51:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 03:51:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r1, r0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:51:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9cc48d7b065b901dcbc47dbb8a93efcab32291e00f120020070cc8994d98d94e"}) 03:51:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = dup(r0) ioctl$RNDCLEARPOOL(r1, 0x5451, 0x0) 03:51:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) 03:51:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:51:39 executing program 2: r0 = epoll_create(0x7ff) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 03:51:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4040) [ 3027.426268][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:51:39 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:51:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$eventfd(r0, 0x0, 0x0) [ 3028.213779][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:51:40 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000001c0)) 03:51:44 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:51:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) 03:51:44 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 03:51:44 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup(r3) r5 = dup3(r2, r4, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40) 03:51:44 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffdc8) write$P9_RSTATu(r0, &(0x7f0000000180)={0x6f, 0x7d, 0x0, {{0x0, 0x54, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3, '{\xd0.', 0x0, '', 0xf, 'cpusetppp1nodev', 0xf, 'ppp0cgroup.em0)'}, 0x6, 'cpuset'}}, 0x6f) 03:51:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x541b, &(0x7f0000000040)) 03:51:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$eventfd(r1, 0x0, 0xfffffffffffffe7f) 03:51:44 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) 03:51:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) r2 = dup3(r1, r0, 0x0) write$binfmt_elf64(r0, 0x0, 0x6c1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0, 0x30}}, 0x20000000) 03:51:44 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x0, 0x3) 03:51:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:51:44 executing program 4: r0 = socket(0xa, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 03:51:44 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 03:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 03:51:44 executing program 3: r0 = socket$nl_generic(0x2, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x15, &(0x7f0000000000), 0xab6d09117b20d99d) 03:51:45 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000340)) 03:51:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x2801}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:51:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40000, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 03:51:45 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$P9_RFSYNC(r0, 0x0, 0x0) 03:51:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={0x0}}, 0x0) 03:51:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x29, 0x21, 0x0, 0x49) 03:51:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x29, 0x6, 0x0, 0x0) 03:51:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) ioctl$VT_SETMODE(r1, 0x4b60, 0x0) 03:51:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:51:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RLOPEN(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 03:51:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0), 0x1c) write$P9_RUNLINKAT(r0, 0x0, 0x0) 03:51:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x13, &(0x7f0000000200)={@empty, @broadcast, @broadcast}, 0xc) 03:51:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x22, 0x0, 0x0) 03:51:46 executing program 5: r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:51:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$P9_RXATTRWALK(r1, 0x0, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 03:51:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r0) socket(0x11, 0xa, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) tkill(r1, 0x1000000000016) 03:51:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) 03:51:47 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:51:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = dup(r2) socket$inet_udp(0x2, 0x2, 0x0) getrandom(&(0x7f0000000180)=""/4109, 0x100d, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) tee(0xffffffffffffffff, r4, 0x0, 0x2) 03:51:48 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280), 0x4) 03:51:48 executing program 5: vmsplice(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) 03:51:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSETLED(r1, 0x4b32, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)) 03:51:48 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5451, 0x0) 03:51:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x0) 03:51:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0) 03:51:48 executing program 5: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 03:51:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x5452, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 03:51:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3ff, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00'}) 03:51:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:51:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)) 03:51:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:51:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2804) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000000c0)="1e", 0x1) 03:51:49 executing program 2: r0 = socket(0x2, 0x3, 0x7) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0xe, 0x0, &(0x7f0000000000)) 03:51:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4050) 03:51:49 executing program 1: tee(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0, 0x0) 03:51:50 executing program 3: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:51:50 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) 03:51:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000240)) 03:51:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x80000001, 0x241) write$P9_RWALK(r0, 0x0, 0x0) 03:51:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDADDIO(r1, 0x4b34, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 03:51:50 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5450) 03:51:50 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:51:50 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x5451) 03:51:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x44000) 03:51:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) 03:51:51 executing program 3: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabNn`\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xa5ff) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 03:51:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000002240)='/dev/vcsa#\x00', 0x1000, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180), 0x217) 03:51:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:52 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 03:51:52 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r1, r2) accept4$inet6(r2, 0x0, 0xfffffffffffffffe, 0x0) 03:51:52 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:51:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x0, 0x41) write$P9_RLINK(r0, 0x0, 0x0) 03:51:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 03:51:56 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r4 = dup2(r3, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 03:51:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$unix(r0, &(0x7f0000000240)=@abs={0x1}, 0x6e) 03:51:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:56 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:51:56 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) getrandom(&(0x7f0000000080)=""/4121, 0x1019, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 03:51:56 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000001600)) 03:51:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "e5c96d52eed02e1a4519d97969a5e40591ca81"}) 03:51:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) fcntl$notify(r2, 0x402, 0x0) 03:51:56 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:51:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x46, 0x0, 0x0) 03:51:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet_SIOCDARP(r1, 0x541b, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {}, 'veth1_to_team\x00'}) 03:51:57 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) write$char_raw(r2, 0x0, 0x0) 03:51:57 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='/dev/zero\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x401, 0x0) r2 = dup2(r1, r0) write$P9_RREADLINK(r2, 0x0, 0x0) 03:51:57 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r1, r2) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100), 0x4) 03:51:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:51:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 03:51:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 03:51:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 03:51:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) dup3(r0, r1, 0x0) fchmod(r1, 0x0) 03:51:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r1, 0x1000000000016) 03:51:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14}, 0x14) sendto$inet(r1, &(0x7f00000002c0)="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", 0x695, 0x0, 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) write$P9_RFSYNC(r1, &(0x7f0000000c80)={0x7}, 0x7) 03:51:57 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) 03:51:58 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x2, 0x960000) 03:51:58 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 03:51:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setsig(r0, 0xa, 0x0) 03:51:58 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 03:51:58 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:51:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 03:51:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 03:51:59 executing program 5: splice(0xffffffffffffff9c, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x3) 03:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:51:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 03:51:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$P9_RCLUNK(r1, 0x0, 0x0) 03:51:59 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:51:59 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 03:51:59 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) write$P9_RCLUNK(r1, &(0x7f0000000140)={0x7}, 0x7) recvfrom(r0, 0x0, 0x0, 0x12101, 0x0, 0xdd) write$binfmt_script(r1, 0x0, 0x0) 03:51:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 03:52:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = dup(r0) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) 03:52:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) write$P9_RSTATFS(r0, 0x0, 0x0) 03:52:00 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001200), 0x8, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 03:52:00 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001180)='/dev/autofs\x00', 0x0, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 03:52:00 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdf3, &(0x7f0000000580)=0x101) 03:52:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000000200)={'gretap0\x00', @ifru_flags}) 03:52:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 03:52:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) dup3(r1, r0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:52:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "05214239b0e57b01"}) 03:52:00 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 03:52:01 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'team_slave_0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) 03:52:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xa400, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x5}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clock_gettime(0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 03:52:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000040)=0x20) 03:52:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 03:52:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:52:01 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x19, 0x0, 0x0) 03:52:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x20000001) 03:52:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) [ 3050.382337][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 3050.461948][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:52:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) 03:52:02 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000340), 0xff7c, &(0x7f0000000240)={&(0x7f0000000200)={0x233, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) 03:52:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:52:02 executing program 5: r0 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TCSETXW(r0, 0x5435, 0x0) 03:52:02 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x803fe, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:52:03 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x1}) 03:52:03 executing program 4: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x45) r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000100)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, r2, 0x682, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff80}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x59, @empty, 0xfffffffe}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5e, @private0, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private1, 0x5}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000003c0)={0x20, 0x9, [0x80, 0x8001, 0x3ff, 0x2], 0x8}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000400)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0xc040, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000480)=""/87) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000006f40)=""/224, &(0x7f0000007040)=0xe0) 03:52:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b44, &(0x7f0000000240)) 03:52:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:52:03 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x0) 03:52:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKIOOPT(r1, 0x1279, 0x0) 03:52:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x50) 03:52:04 executing program 4: r0 = inotify_init1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:52:04 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) 03:52:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:52:04 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000002240)={'veth0_to_bond\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 03:52:04 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RLCREATE(r0, 0x0, 0x0) 03:52:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) dup3(r0, r1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000040)={0x3, 'ipvlan0\x00'}) 03:52:04 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 03:52:04 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='/dev/zero\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x401, 0x0) r2 = dup2(r1, r0) write$P9_RFLUSH(r2, 0x0, 0x0) 03:52:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffdc5) r2 = memfd_create(&(0x7f0000000080)='usernodev^procposix_acl_access](nodev\x00', 0x0) r3 = dup2(r1, r2) ioctl$BLKROGET(r3, 0x125e, 0x0) 03:52:05 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x5409, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5409, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x5409, 0x0) 03:52:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x20004000) connect$netlink(r1, &(0x7f0000001300)=@proc, 0xc) shutdown(r0, 0x0) 03:52:05 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) syz_open_procfs(0x0, 0x0) getpriority(0x4, 0x0) 03:52:05 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 03:52:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 03:52:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x20040000) 03:52:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2a, 0x0, &(0x7f0000003780)) 03:52:07 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000100)) 03:52:07 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) 03:52:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TCSETA(r3, 0x5406, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:52:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000200)) 03:52:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x6, 0x0, 0xfed7) socket$inet6_tcp(0xa, 0x1, 0x0) 03:52:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x202) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup(r0) ioctl$BLKPG(r1, 0x1269, 0x0) 03:52:11 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 03:52:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 03:52:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0, 0xa8}}, 0x2000c000) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:52:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 03:52:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) 03:52:11 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:52:12 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x1474c0, 0x0) 03:52:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_int(r1, 0x29, 0x6, 0x0, 0x56) 03:52:12 executing program 3: r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee3000/0x2000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 03:52:12 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x10, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 03:52:13 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x7, 0x21, 0x0, "000000000000000000000000000000000000000000c97a830f435ff4e90000000100"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0x1, 0x4000}, @phonet={0x23, 0x20}, @generic={0x0, "9cf40c942b54473333dfd80fab91"}}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044891, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 03:52:17 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000540)) 03:52:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 03:52:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x28101, 0x0) write$dsp(r0, &(0x7f0000000040)="848195917681618f9b368e50dda6cb7ffccafde6a78b1a229572a2b357a98ea156a856b9fee1ab5d90b0ebd26172864abafd31f5a017df56443151bf4c925b6c819fcc3671925dfb49667332807572a6cd98abcd7500"/95, 0xfffffe58) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 03:52:17 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="0212010002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x39, 0x0}}], 0x3, 0x0, 0x0) 03:52:17 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x5ec, 0x4) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 03:52:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="9f26a6a699979cf5f44d8c279c0ed2b5", 0x10) 03:52:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) 03:52:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010080000040000000020000000900010073797a300000000048000000030a1d0200000000000000000200fffe0900010073797a30000000001c0004800800024000000000080001400000000008000200000000a60900030073797a32"], 0xd0}}, 0x0) 03:52:18 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/54, 0x2a9}, {&(0x7f0000000040)=""/182, 0xb6}], 0x2) 03:52:18 executing program 1: 03:52:18 executing program 0: [ 3066.675601][T24408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:18 executing program 4: [ 3066.895512][T24416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:18 executing program 2: 03:52:18 executing program 1: 03:52:19 executing program 3: 03:52:19 executing program 0: 03:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) 03:52:19 executing program 4: 03:52:19 executing program 2: 03:52:19 executing program 1: 03:52:19 executing program 3: 03:52:19 executing program 0: [ 3067.803687][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:19 executing program 4: 03:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) 03:52:20 executing program 1: 03:52:20 executing program 2: 03:52:20 executing program 0: 03:52:20 executing program 3: 03:52:20 executing program 4: [ 3068.439537][T24449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) 03:52:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f00000042c0)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47102b178a6ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000aa80)="e0874da458fcbb3a5b97e3bb48a7d7a5869be8406d0cd6b56649aa1d30b04552e301f90c975e11bfa6dcf9b646bf3c9f4ba06a4a7ae3c6aebcbdc8f951a3fef41365c515769b27041ad1e226205e155e230f48b1fa1c4f7ff58233cea5c58f71ed46ed4d7accdfabb9c544922a1b18caa542db552b1c7fe16c10d0ce9b3358fef5ff6c0e6f9475458a32e1a6c8d5be5e78b15f1a1937d8bc2fdf1528d9625bd18e5b83c9f6ee0f71552a2b34e136b074e78befee467caad619a83b2ac63270183200ded0caa14aa4864e37faa22f85a8ce6a3b819f80b3076d1db1dc6a266c9a654595461daac5f127f5504814439213b5dceac412a66bc96ecc6f5b9aa261c73cf73f5595fb980b7c843541f531283f52bf6ba25a7390727a7d6c270719e2627ec9bbd351c70e7d6e076d06a6bf55f6e9a181ae6d3af4e4c1e3c972b9e10ac62437dce4fcb8e6c01d256982a106934ec3d6801efef2c9db4e7968abe8116270a182b0fb443fa0d4feadbd65067f63ec96a367277a3d5b358fd63f7c43182d5e14159ac6a88fd0ee80aea2f7bc62e901390e39d4efc668065725959ef49f304dd9f470576d9247c63e1d0c247eaa32c22864b9ca762825bfe07cfc0a9481c3cf4b1131e1e103532a43903865359f207b0385a2045e59a45f8452e8eb0e3058e4c529114d94d506836fd60c9f555be64e337bf5e179a3e3849e342e95c21e2604fb176a037db1f69dafab82d7474669ec315297d44e9d1167cca681e513c63f97a769a67154970f4ce7d145f3a3822b12f4635e5a16a800018a078245c68fce937a963bdb3f924270545d6c78df072a41c137870164c26af94b0ea36bb1d02173d6107bd81aba2d24733234b053c0b6e90b89c21d071bf4071da9caee164bd246ee90b0fe858bfc0111898d863b80b879fe7e6015aa6f3d8dab49a7f39abb57fc67fe24b07016ca82d73a4bb5fd09fe535c21a66b73bc113d4972ebb1ea0d1b1f0816b2349656d4df85250e2625ac4c681226665dfd60e5bf3b135fd3988e9e157b70941299d49f2e9265f9b0c0cc8fd09524432a846c92366385fee501b12c74a9b644eccf881438afca680fcb73930d90eb06b08027880f46ead64909b75f9cec10226176994298b504a12314986e0d02e2ea46f1089f7c6a98aeb01a101d905889aa7c05dc9a28f7da4f978859a3846f655a4e81ab5cb03dc3b9071b40cf6739008d1cfdfccde77e814f989dd910743241b3d54caa2ca8a2e0593cca352334b3c75d14e51699630f8baf71ad6b42bce86f3e1d397a70bde5dbfb46684646ddb0db635ccd902f5ab315cb48f92e0a1ad3e81c23a239f219fc40e533c660799fd60c1ceaaa149010ea06d7f1314dfab1c36f3d2c71f18b63b5c5a1523f530a607daced0fecce4f656ddd0a1b368190d724b54483d801daf7532804ed50f11968c4057cb0bdcb33d0536fa97d90347355d96381bb14f548f5b4acd4fc918f42de1ec1cce7b4d352cba07f4f0be9293362228f1480bb1af9c6eb9df0af546d7c3336142f7e1bf88b0f527638030b005e500c4d6a231fe861395c256f12b5ae5e9f9cda69d7ff77480b5cc09b004e852c01b9d0d4dcba0f639a8d0066635edc71b7ddd9b2076d5bf7147ae7d4fdbff5481798112273bde518236a92d076007cfebd52234a7db07beac41b5154da4e9388071438ddc71e378a7b6956817c181ba1e02a4ec036ddd05e654c30f138f37d4a8529992a24059e1badb9b5f5ee3d0394e841736ec3b86df39dec424bddd2f8cc09dfdec1977e2a5bfbaf14d1a5d78d7ef7d54965b49aa384b2319edd02f74e4576896a71ef6dce087c433e20948aab547c6b8b971711e8d4cd1bc3d2faa8ddf75505851fca4899928ddeff53e899873faed2b6a1ad555b498b2ce54eb07ce33d12587a3eb3ebad2eee94515c3ab53875080751393aab34211003c4353b8548bcee8aa28ae9ff87878ff63209a4b8ad221811dc324b75fca8199f2e247bfccdea749ac81fa40f0cd762ad2897ee0edc86a0a1428d2850570e0ffeba2959cfa3016e22ac71cc280c2b2888d4596f1a1dfac108a255dbc4ec1f08fcb8ef1e562990d322dd240ce10a780045a66cbb6d17b2fd4c86ad0f3a9e022b396826a3597fc07c578091a73d282bd879e889b42319d57ce5423a8f27ae840e107a5dcad3e2a751dff16d08ee8cbd80f216d2a46370ed1b82a6551b04fddef3831a3051e2845d17eca9b809099d4c8a92bc15124db33e7502f2940c9898fe006ae91b896a2a5e6463173a79af2f529cb330d29ea2964c0218d42bfc7f1e7d815d3dceec6e288e4e6b880c4e2ff42ad6bcd8c1c6cac827dab056893ebc5152270f463ef2ceeb1044a7265dee656ec293b78fde79e979012188ca463a9c9b1b2ad8e52ca3ee6d2d92ed0b66ad10b1916a356dcdde072e429d488b847043711887e823d5a7f5471eb492dd7e0fea2786ac09631c4efbc7e16dadd4e49168d81ef3e81aa32bb0b52e4a0e6efa6bf552c26cbd0adf2720583d12a0a2fd422327ed462acdc3d747ac21eab5c20958c6b12aed6591f775e675c2d19fa0274ad84cf209b0e34fc621adf516b4adcb5aba1fab97a879096d55766c9f8b5b6c7076fc3a39cdde99e70b19bc1d53c3891336f393ae153b8ff216e82133aec8ccd51c33e1833b9133c9ece70cd66d89c498ca879bc0c07ed25998c2a5f9da03a01e3604c145998fd269a3c21e2c60cf20d2d74fde3126622ed8790e9ae3fb48d4b249aefaee7805405a5c278c599cc77e31e7cb89af7c341fe1db637534e3274612e232c2952f6aa95327c31ccd3fd37583f7ca010ebaf1c88e54175f2f91c528f40c924126db2edf181be53b7b35cc78f49d3f3acb1b8008b2083656d08d9c964ac20362c027e663afca21c760bf116e264e4e50751b833ddef4426e298d0a9dce45e6ba27a654af4d9f7649e4afc3ad0855514d38b01d9ebdddd3aa429d62bc06f9bc4ae500cf1c62ed15f3c41f1c02a999a2d5b4215692bd00e096a2608e52b0c2bb02a328720663d4be3901241bd0ba61d9b3d49a0e35963ad9028f7cc2a5c896a97b1fdbf0cfb4ddf5d991a2920ca9bb838e5402afa2201de137201ef4dbb96ad650491a41eb9802d872fefa35c283e29b4bae1f4ba3e2f0a929a42ec7c3fd50654ce7ed4a218d0a69b2e0bdef7576060c097f6df030741c4e9ecc23c91131d44af21054f8e49679655c0755eeb38e62ce26f8b5baa7c8921c07c4467c07158fb86a13b14723f61f35c944dcf449a7fc546d972df4c56bdd0dbe0fec4382b29866d63899f12b322512f600060b1988f5cc92c38ac3a3ab1580e4f6b9945515e17444355254494f720c1eb9b197cdb159bb2907efdff63dbb2a2894661d5f26d186e9ff81e52dda6a21cb4c6469e71962eca867351fe8edd8978fd9a14c66a90654e364b7e9d4574330f0b73c471d5fe842412398e45d252b4a9465ec0f0383a6f6bc5b339b96ad3ad9ff8be4a70811acfd846585a9340281230b21c6c60adfb6c31e863f52158fc9fd7f972ef2608e85ec260c65bfa3b94faf638ce45d0dac7ac851a20f405ad4363a7afe9c449ce981b37b187283d15ea41448574f29a1fd3d5cbd9efef61404ef1e76a38bc4aeeee01968e648d028ff5a946aac6b22062bdabee99d02d747ec2ef9dafee361c77a7c9975902a617f804a854287c62e00251a37f26ef169dcbe9151fc1ac23288f2551c3f60b55a065185c9dcac5548e290b5bb7b50ee528ec15e828be8a6d543ad7421fc0483bfc3211cd84b585602382cff1d134fbce56d8763217c3f9d4e54bbfb538d938256a6b22aee728d19f94d171b332741f2b5474b3b1e0eb482efb89c257baadeb1c559978ed17b5f193758caccafa1add88c0c09c0ba24303c97816cb96a97b99575e94f69cc8cfb59d3bbf737000b02fc357381af2940061ff007c92f081d5351b16177b66e5a99f377fd06bfd1fd955a5e1cd3361712428d12ad8399880bddeaa1d905ad18c2a46b4ec2ff542d005531695e32690c75279ce1980c38e33e578e334b643bcdc5fec7f5929bc46ea9ca890ef7f9e5a68c98767abd62f4402fa82999316edb98154296c94718abc02ff1a7d95125874f0db9a09ff0dee42353a945b3bd6bce1d92772b2887db144b5a95f6aef2e93413d85164708a2ef892e19e135f908308471735d3f264362f4089dfe7cba519bf49a72325e7aba6d3453a1721e9f2027664b375d1e1158a230e7b2bc3dfa0c4b9591de0c90050bbb67516d6cdc179e5a05094c67ca24187c19ccf4fa269cc2c7f5983c9437733a33a7924a4e75a5b9fcb448e2d152274adbfec6450efe85f9b51b6f93e40fb89aa044437823f8f609df74138d90997f16347b80f4a2fff31a3022cb0f197ccdc48eb7a396615d522aee2cd995a84aa8d12d58a864d98e807829eb5cc614363de144f40871c4d5a6c9c0d2dfedcc21877fabfb2df2e9e3d9d218c523ca00745b8283113a777c1d0d8acbaf1fc78dba6cbca9dcec055818d9fec65a91b75d8f3a204758adb84f6752f3c6e779b9f806496a565ea01d207ef1e21d40462da675ce5b9526fa03e3aee1d2ae29bf6fd6b077860624f952869b0aa5185014c594b158e8aab1f13feea8701bc9c04b274e3012c50d8cac5d3bb3a49dd061c8f3114d15d3cdb4e3051a5481cf71af2e79dc2918e4fd662bb175a2fa596bddaf8101ccebf992969ca1616497fed6dcd15137599c65659a6f10f0f4c9921581c7274718a04aacddf71a4bf184f9a6f8f2809c453c41449f77d369c8956d2d722d3b84a8b74bd1bf2ded8fff960bef0f84fbfd9416a9ee54cd6e27a692ea3b420708bee6f9b1082ca8fcacf77434a3a4ff7a8efc9440d553269d8e0200342b82f18985974b303aedb264e88cdf1dab92ba8e36a6b8e67721e546593ee6e14e3fa0f11193dc78be695922a6c395dfabaea46f8a4af749079816047178c13a47aef54969c5be65d83b5f9dbdc271c796e17787881d2f1a3d506b409addc7036cf755516e46d2f25e3b968d9334cbe51251e52632479078d7d652e181d4a62db40c2150c856e3861941179dc004d311cfa714fcaf13258e3a8a4958ef5b60d39478baedf14c6547dcc707cbfd189313971ece2ee17b212c5479c2e130e8b45cff4f3586b81f7f6fe8d6e9c6491f72822166650e9dbbe3933a98042cec15e95b274ea378fbb63eb6fe21ccf1571db0625e4ecf97923dfd2e3c89215bfc9001b4676ea408f74cc122f888f987fae03cee50f52899c43e786898e3529be37904f8f90858deb47497fdda7fa3ba2c0008b7c41e1d6d22a9037863dc6c33168095aea4cf68b4d3e5dd7a6a420f92217f038ce967667303d6826832b440b7a687b1381228a8d516b24d7662db18aab7fdc19dfad6a14d57b7a13950fe58c70c8516d925587f9b9bf09325afc1da368063a75447736bf8014fdcf9ab02a3ae38daa9eb71d46ca9ae080bc0402bba38015f772aa3df9ff91e041172d47924438fa1a663856011ef7c075efee1477eed45c2a8260c1dc911bfc0f47cd604885f793378de6fc0e776cb79b58639d73965918404c03808afead2981b94515d42cde620afc5e4156616a032789a0c23a37d4d8199b8ad59ff405e238e15b2705c6340905d5a608e20ad428b8a4a27b6c0d28b8984f4088e045662cb1e7652a7edcb50ceea33f9cb26cc541c6a1ba51cd9093a9ac539539449f7b17826a2dd80ef9da421a32f1feae0fc1a4f16cd45f529393475956cdaccb6df8bdf98c4a8582161e9aeef1fcd9bd7c2d124205fa2aa210f8a9264b277d9c809e68349aacdc5d65bbf41adfef33cccd5cdcfa5a5350a905160aa9230dcf96be4b6dd124910ab7c5515d862d421f9210e4ff1066fbe6b06b7784b86c8b56a9644270c7026c5342900b1ebe05c323d7e9168a3571dbded9258644c55388574cd9699e107e000833018c0f2679938e2e6912737efe85b59294fe6793446e4b2445781d16edd13df14d45601ee9907d2e0a75fdd8376fc9c36a572b3127eb0d58cbe69362eb4d22be3ace864e4ac32bc06f00c91821ca81f9934e901213882c962b8fa414a96a4c668d5a94c4f2ca7f7ad313472ab2f2bc708da7dd11004143884b53a82b7afa098811ca2497e9e7533ab6b5413cd73444c024d71f266a33ddb08fa7be4ac943c0edd478010411981e08eabefb40da3ecdd5807dac2de875659bfc0ac5027e86975b246d921e2a46985ce72a70443852429563442d7665dbad34688b5e13a576e0722033c8f14bc2135062244ca322ff8af7ab974694027cfae258fd1359cf220518bcb231e37d70cf21e7b9ea5b1581bcabb3178381d0b78d8ebf4a548bab4517f9cb8e18cecb9b70691b05ee0c0402482cc5a970e37eab6c0e4a078544a697b84fbbfe8eb91824fa84c48381ecc589c1b917520fd251cb4e296d9981835d379faed7f6598d7155df8e012fb72eb56ca4843b65732f4fc869737fb54c2985d9f782a596adb3b808244e5c740b4dcdf66717b1c96373d771c798a0e36728a101b2217630c5c26607e54a75d16d5f041a1051807d2455994bdcbd830240656db24cc7afc298df1ee724745da0fc31d6ddd82aef6bc6e9ecd7110655a423fc8ebdd459b4fe321e733e982a627bcd640dcf19f06bca5a1419c85f93eecb58e650fe5cefb3a0b125833648c73f34f86eac20cc0a2fc75b55f14c078e6d548b0eec203882fc119db0c4f0499d72bf5bbb8691f582704f4685592244d5ac8ccdf0795744d837e46876a7a1825524d53cf61f8471ddd5ffc4e1427070d4ee639400eccdbcc34527788966e0f9b83ce0177f0912c933ac3f899dfbbd7924061e45a5fff25df1c99c835dbfccf774e87c8e83984f9d62d9d1c8d49ec560f034f0d6f79af0b5a2e63717ae37023137996afc88f323fb466f0743d84b929e11da1ae517c951819dab1442172018c5b0d1cb2cf2572a23da6f8dd49820626f6fc806cc772ce066e9f51303b0d13f11c8bb96e1fb30d37ef930d3259d5151ef28d120c597a8cebded696cce6bad37d14951e90b33251ed3dc6d5fcd9a9be9d245d2043676f4437bf177c2e5869b89a9eeb8de99c3602fb59cc62a88028b7124b228d1d20031660416b6394191486d73a7f9f92fefef034ff06f7d786af3a184da53382e0c19249d2e9007e341521192578dd8bea981a97970dac9a94940f36eb902916cc3c5200c94c1c50d55396c27942af52b49a7481e239b3a8002082cdb427b6dc0341b509e5860688ae1f9994a2573b6dc9c805caacdf5f50a6979852c9fd11aed59bf92d1d23cc894b52e2a20a04091499a836ed5bd031f4491e08a8c45651df4b1cc4facc8711c408ca045b0cce3d3539a6e93f817b35886da2199d8b2ac22bf83fde3f4f52af5968ba5379b64fa3e7fcab1b81f3e6b8ec268b68af5554b924f79e671e5839f053fec81bf5e2fe6ce360d54cd6e6a5d3eabd25ead8ffe93dcda288135886a9bf949fb40249b862df635dfd04a576fe0104e5b5aa700617352e080ed4cf3029021a3fba03c69c40e4ba6db2de62fcdf5ec5cd48e59a000ac18e7abc9ba2b7681777a6d398a90e0785e4cf254bba37de4074a67787e41d321f8e5a5a1eb21560703b027a48a820017b864e0b98c2e74582449cd52696d388907b6c96a3c1ff0f46e7f7049723e6980e899f66c89c67e12c6669072a74e27be8636488de15f9f59877c045ed7ff75c2f4a18d016ab1869a39f1df510135e5bcbacaed8b2335de4fcb06bddd53d0711da8aab3a6f82963fc6ecee11e4348767edf55491b3356cb53aea5e3817b3ac6207785a7a3094c5410749d604ef02e2635b24662eebbb6637e60ee7c1170764a9575d70bfb002fb83dc0979b4d2f4d6da7f38dddad8e38c1dcae7bfb932bf0524b7e85059ec12960625ebc3ee573813bc945c19b1fa8d7a78fdb73f85e374758de45dc47da7f56f2a0097906df5e3db9b24a5e7d5959d15ab7269992d4ec253acd50e7d5a8f0dc91d47f6ea3c82964d53946c57e0557babe7c3c669bdee4c1fb1148b13773e3adf9b99eb7c063b82b40faecab5f17791e8743201b9ffc9a3b791cead0dd91ac04fbd9d989843139197be28329bcdda0c212ee241bea789c26a89b99574a4a35f12ad45a347f430af2a18c0b026a4578cb652c9124fc0b3ee38807c87ad9b7f1f059ea983f856e0dc1a0e4152951f650d2bd7150003ea5febc12f9884cb4f6e6d369bb043a1015ea23236c54f8d5eeeff559aed44b3cd2e99448ab27be3f96cdcda34f9f16318688803ce49bf86b778344c865a14a3dfd44a2670aff5216688d1334e63aadd1a6ed35db35b96d5d7d62e9f1ecea05ba2a7ae56aafe7292fc8b0c8b16a0581f33ad54e988dadd1d5219cf36cb3777b0fdf32ee7320e022f2643424afaad811f4f47ee46d13f8f37af19e592e70330bf14bf498a39f46de001abbf6028f8e87941d3d6d5d71028f71c9b3020cff8a012e0fb33931334763e3480c141b3738f26d54e6d4afb05163c1876925e69854ca7ef18173738a26026ef30bf6dd2b922197a35a66a20f3e1107ba17914ae0679d9e5d6d82839486a22abba8d66cf7622f523fdae379cdc376d7d72bc52235c1c21864e65c40cc17079fcd1853f1c87cb569801a5f13270170da73ec982052f48298adc04fa1b36a429b75c3d8543d0301992e2c6ad71a506240d11ff19194d4b7bf421c38cb500cc4695dac1b27b1838552ea78e78c5e3cc5d7bd0171a55fe601141f2a27991713b26f964afc55cb6fb56082616db7b8e27b419b3cdcb38b1dd16f2b3cd7c2b3f03fcdfa4891fa38ea39ea5088ad4aedfdc43759eb15ae2828215c8043783bad59d73862a544d78b6d2ec95873887378f9c6683a03ca90579dd4d05215e1e5f76189d7a53463de8450142e361dc26e5f368519e711933afd47311e31dfd3838ddf1ba2b4bf136b246aecced777e86506be4280ca7ebbc591124da8ee65837f13240ec00dc956997d694105225788e84bce814d18987e7f82ec79c0a863a367dba2db28cb634683b9917af0a56e6033b6ddbb39eb488049a53d41a797eb3f646067045827a489ac96cfe5cdaa6540a51f49e2b3595205c9fbfdc0573c7ec093b31c7c5ca48aa5c1447617889d9f660c350f7e2af3db1362f716adb3a524c978b70bf8e4cfaf70c2ee39ef775d61180c7c214dbd30e33a7de43ea4646535f35c32172c8de8229c80b3a91c5b31cedc05e87f2ef8d45612f84e067c0efc46e7a8539aeb2b9d5eb375696992c84f3682f5deebdc7b75ff63d4128f415f22cfc161b53d379fd5de1422c885dc4f5c9f3c45851d51e555b7cb12f52599fb8111a81cad69a18b8cdf9af2fe8380a18fc31534d177e6962a32afefee48e7328696ca130e4d3d75590f76aa11a4831d1b0f06b2a5eca996405cae27ea5630d75e28f2f5b9580877e2c2b477acd59081817b640d28d63fdc84ecc7be6e58e74ab306a60cbd27e9afcbad44cd46b16740729b91e89524f6ef493cabf7b5c70ec548ec401a7777abf4edcc305065f9afdbe00ffce3c91a4cc903c0410597a6f83294952c6919408aab694c0beb006a918edd4dc25199f8eeea8e5ac7fc66b5be3b855968f4199befc543d1acde670467ff6f69fd9f8bcedc866779123e933ad8be0527f935e51db9d6c407f99cbe4b7a91e7cf1aae5f7975918aea8c3c4be9e15d93d5daea9e5d55b48b9a8e578024eff16f0984211573d2db8e5770f28fd254d2b770a90d965a4e8bcb8d11343f02761e5049042a4a93672587ec4974f143c3b4fdef929392c18f5e5653c7d292d724074f468df8b4fcd8d2f69d88468af97d7fe705fb783137974ca6da864428af5e0aa13beff1db3e750148492cc7b9c0720fa415026d8a714dc2538fbf648930b7b434a920f7f833b1973c6e15d58ea7a047c71f745c4ace72736e8d6dd7d47c73a297d43b4cb2fbf4e4fe6e1607e9c1c1cd0d9ee1756d15559274331b0b727e3e5bdbec669e0497c5e2a15733a3f414b80c2338e2b5ab83b3ab35d83c017783b2351f1e33755633daeabafe84deda63b0dfc7da2c4dc68b075eb3276b40e66845132c70dbc36acd562a0a9e92dc5efc32eb3756b2d7bb009e703a41ccda5b219ba4093a6687f872d6c38a2e6123c3816299ed11aab96781333c039b0f12face932053393418b1e3a6e4152166bdf82bd2a519f7623b62558865b2918f86ca0b9b0d42fc39ccef18cdc17e55ca748c10e2e5a06c4ffd3f18b4cf10bff33e6c3ddd8d1fabc8a85934078d1f01b7aabab90816dc269fda4f00aa9359f1e6c1aa1e2822c22c2c9d338aabf760354cdb30bcc726a93de1f8749cabc091423c5db8500134689f86769964059ecf202ad1d3814386481c07dd15af8cb3aed1a7999da3f0981c1f1cabcff74db76c76ddd3a770b546cb4c874db6e1df4436c5ea85486bf18d2d892cc645b47695b87b23d1f6a5a4ca6d9564f45e599399fbb67cfae1c5fba25535f63da6978706ea4d80601433e0a0cb03704ca5b2499acb84ca1f6f3e134a6908c00933dd12be278fd85bfbdb2c27f52e24d3750697327fa378e6e1e71d41af9e1877ae353116bc22831f581edd527eec09cf273da3984f90890977032e322ea4969991a63d3bbc5a34e5822ff1da7db23e5a69e8925de1e6d44981dfc1575c6a1e53d628d2a130e23770bb289e0f27bea45ed4cad651d1e77a748b8ec66862982fbc37ea9df409be09f61d2a60a64a6b0c11e7e626582e8e85b3018a3678306813ff10c746c821c4a636403eeab7b8917c6779426abb44d94eb2501a124c1b07993a49aac5ddb24ccdd3460a38ff2b0eff9adc9b47ebc9d387964f34007fb7d333698c243c34f02f5a700e99d21fda37eaa1c15942bdde264ff7e3c669ffbfff79c780809c03994f63a5821f1edb25965586953a3bc6e592d0bec340ef5897d0f18ea0cb31a2d01180d6e313d355976176d4784da56c5889fcde41f3c2e78ce4730242fd012ec6b0b34d8bd99c1c44d95dfe1ac5e340d6cb6c2eb4154f4514b1caf03d10cda77f48a4cd755484da4fbea581a95f8e8532bf69017b5635e10c618a9476a18c55a79c5b07846d7467d4b1966fd4ebb9aeb4fdfc7533fbb87f5112136646ef74455ae5393f6d0aa0129ecf4263ffbb5aa0b9078651556960ade3e52eaff12439cbf190b57e6f1741bc8afcff0ed6f56a561fefa98523473fa19eb28499fee139160bf4a45a1793bb489bbeb0491818d7ea0598c8f813ff32ef3ff7e2ba980e10ae34bbf9f667980d354c464d2fa85fc4d2c983d4ab1074ad4b64515c9b3b0cd0f3420864c663670b5cedfcc450e834652d584c0c619cdfb5288a8e9f1c6b005390bad8e9111221948eeafc3119b58b98ccb291d0238c9f24062405e390db2d830bd0af276709e03d4573398540f6d5424d4bf82e85b492953379683654b6da754aa7b5dfc12059a9b4cd1630b1d11a39dbe530a6d30bb3a0a30b6b4a271611277608e8e37fa525d63532906d7d4fd94d562c2f2fbb1f2e61fd7dbd23198bd2", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) 03:52:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') r1 = socket$key(0xf, 0x3, 0x2) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) sendfile(r1, r0, &(0x7f0000000000), 0x3f) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) 03:52:20 executing program 3: 03:52:20 executing program 0: 03:52:20 executing program 4: [ 3069.197922][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:21 executing program 4: 03:52:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 03:52:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000df0)=""/519, 0x20000ff7) 03:52:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) 03:52:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xf8, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x5, 0x4, "b8a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x200, 0x3ff, 0x1f, "149e0f20e11e378b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0x1f, 0x7, "1a23e3"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xee, 0x3, 0xa6, 0x5, "6adb95", "cf"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0xfb}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x2, 0x2, "c141", "5821a5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x2, 0x1, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2ee5, 0x401, 0x1, "7aad14900320848e"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7f, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x81, 0x6, "3b6508cc1dc374"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xc7, 0x81, "e4f061b3c8fb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x2, 0x7f, 0xfd, '~', "139f3d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x3f, 0x80, {0x7, 0x25, 0x1, 0x82, 0x5, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x0, 0x7f, 0x8, 0x3f}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3801}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "2711129bfb106d738deffe6116259689a817bc4e60064b2d1fc522d8f68a1bc62e5c2431a1408727d5db91e54feae57af452375623b52f6cbfc104ec16ac3e0df6d2b3e0f178bc7dcdacec7191b0114a72b2982e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4b, &(0x7f0000000440)=@string={0x4b, 0x3, "cef3f39a2de55774bb7c3436a07467ca5387f648fc2bedaeb68bb879da79b6de4ed2cf4d92fd84c45748fbda0b7512b429a0ac7ee9957322e9d61d9b279dc21b9b52974a10ea2d5803"}}]}) [ 3069.970136][T24489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0x40047211, &(0x7f0000000080)) 03:52:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ee0eec40b8071a403d3d31d04e110902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:52:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000aa80)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) 03:52:22 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@random="75341eae1876", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x40, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "424311", 0x0, 0x0, 0x0, @mcast1, @private2, [@fragment={0x6c}], "b874a58058a71cba"}}}}}}}, 0x0) 03:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) [ 3070.431276][T16479] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3070.591152][T24512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3070.657080][ T28] audit: type=1800 audit(1599364342.475:84): pid=24521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16291 res=0 [ 3070.678168][ T28] audit: type=1804 audit(1599364342.475:85): pid=24521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir618579644/syzkaller.LxOcHf/2377/file1/file0" dev="sda1" ino=16291 res=1 [ 3070.711621][T16479] usb 1-1: Using ep0 maxpacket: 16 [ 3070.832212][T16479] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 3070.842844][T16479] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3070.883505][ T28] audit: type=1800 audit(1599364342.555:86): pid=24521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16291 res=0 [ 3070.904654][ T28] audit: type=1804 audit(1599364342.575:87): pid=24526 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir618579644/syzkaller.LxOcHf/2377/file1/file0" dev="sda1" ino=16291 res=1 03:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) [ 3070.911290][ T8694] usb 2-1: new high-speed USB device number 9 using dummy_hcd 03:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001440)=""/4098, 0x1002}], 0x1) 03:52:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "3e98fa08efcbecec88ad007d6260f754c9f695"}) [ 3071.061947][T16479] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3071.071695][T16479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.079777][T16479] usb 1-1: Product: ф [ 3071.084176][T16479] usb 1-1: Manufacturer: ᄧ鬒჻獭懾┖視ឨ亼٠ⵋ씟諶옛尮ㄤ䂡➇童勴嘷딣氯솿갖ാ틶磱綼곍燬낑䨑뉲⺘ [ 3071.099050][T16479] usb 1-1: SerialNumber:  [ 3071.174745][T24534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) [ 3071.343885][ T8694] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 3071.521464][T16479] usb 1-1: 0:2 : does not exist [ 3071.639479][T16479] usb 1-1: USB disconnect, device number 14 03:52:23 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x15) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x3) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0xf9, 0xff, 0x0, 0x200000000089, 0xe000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x4, @perf_config_ext={0x8201, 0x81}, 0x40420, 0x1, 0x7fff, 0x6, 0x1, 0xfffffffe}, r0, 0xfffffffffffffff6, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/174, 0xae}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/182, 0xb6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/248, 0xf8}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000000280)=""/10, 0xa}], 0x4, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x9a8}], 0x2, 0x60, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x81e6c000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x64200103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe06) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x4000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11}, {0xfffffffffffffffc, 0x9b, 0x0, 0x0, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, 0x80000000000001, 0x0, 0x4}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x100000, 0x0, 0x0, 0x1, 0x2000}}, 0xe8) 03:52:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/98, 0x62}}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x10c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "6ad5b751af3d3d8ef6a29afaf6"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e21cca6619"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x10, 0x4, "b643362dc8bc5a5a826c2b50"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4b3eb7eeeb23e08776254ffd24"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f01fe473d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "148f2fe3fc11f5e3b8cdc2fd0e"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "476cadc54a6e42eecbcef0a0"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40001) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000580)='<', 0xffe0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)}}], 0x6, 0x400d0c5) write$binfmt_misc(r5, 0x0, 0x0) 03:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) 03:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) [ 3072.098438][T24574] IPVS: ftp: loaded support on port[0] = 21 [ 3072.321629][ T8694] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=3d.3d [ 3072.331010][ T8694] usb 2-1: New USB device strings: Mfr=49, Product=208, SerialNumber=78 [ 3072.339493][ T8694] usb 2-1: Product: syz [ 3072.344012][ T8694] usb 2-1: Manufacturer: syz [ 3072.348754][ T8694] usb 2-1: SerialNumber: syz [ 3072.505932][ T8694] usb 2-1: config 0 descriptor?? [ 3073.252187][ T8694] ===================================================== [ 3073.259240][ T8694] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x28d7/0x3bd0 [ 3073.266976][ T8694] CPU: 0 PID: 8694 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 3073.275301][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3073.285810][ T8694] Workqueue: usb_hub_wq hub_event [ 3073.290838][ T8694] Call Trace: [ 3073.294144][ T8694] dump_stack+0x21c/0x280 [ 3073.298494][ T8694] kmsan_report+0xf7/0x1e0 [ 3073.302927][ T8694] __msan_warning+0x58/0xa0 [ 3073.307441][ T8694] batadv_hard_if_event+0x28d7/0x3bd0 [ 3073.312840][ T8694] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 3073.319151][ T8694] raw_notifier_call_chain+0x123/0x290 [ 3073.324702][ T8694] register_netdevice+0x3120/0x37d0 [ 3073.329930][ T8694] register_netdev+0xbe/0x100 [ 3073.334668][ T8694] rtl8150_probe+0x12d9/0x15b0 [ 3073.339457][ T8694] ? read_eprom_word+0xe80/0xe80 [ 3073.344455][ T8694] usb_probe_interface+0xece/0x1550 [ 3073.349674][ T8694] ? usb_register_driver+0x900/0x900 [ 3073.355033][ T8694] really_probe+0xf20/0x20b0 [ 3073.359635][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.364848][ T8694] driver_probe_device+0x293/0x390 [ 3073.369971][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.375360][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.380217][ T8694] ? coredump_store+0xf0/0xf0 [ 3073.384910][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.389693][ T8694] device_initial_probe+0x4a/0x60 [ 3073.394725][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.399588][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3073.405401][ T8694] device_add+0x3b0e/0x40d0 [ 3073.409937][ T8694] usb_set_configuration+0x380f/0x3f10 [ 3073.415408][ T8694] ? usb_set_configuration+0xb41/0x3f10 [ 3073.420985][ T8694] usb_generic_driver_probe+0x138/0x300 [ 3073.426550][ T8694] ? usb_choose_configuration+0xe70/0xe70 [ 3073.432275][ T8694] usb_probe_device+0x311/0x490 [ 3073.437139][ T8694] ? usb_register_device_driver+0x540/0x540 [ 3073.443040][ T8694] really_probe+0xf20/0x20b0 [ 3073.447640][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.452849][ T8694] driver_probe_device+0x293/0x390 [ 3073.457978][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.463368][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.468224][ T8694] ? coredump_store+0xf0/0xf0 [ 3073.472915][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.477695][ T8694] device_initial_probe+0x4a/0x60 [ 3073.482728][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.487594][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3073.493405][ T8694] device_add+0x3b0e/0x40d0 [ 3073.497938][ T8694] usb_new_device+0x1bd4/0x2a30 [ 3073.502809][ T8694] hub_event+0x5e7b/0x8a70 [ 3073.507268][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.512475][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3073.518285][ T8694] ? led_work+0x7c0/0x7c0 [ 3073.522683][ T8694] process_one_work+0x1688/0x2140 [ 3073.527742][ T8694] worker_thread+0x10bc/0x2730 [ 3073.532516][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.537746][ T8694] kthread+0x551/0x590 [ 3073.541826][ T8694] ? process_one_work+0x2140/0x2140 [ 3073.547033][ T8694] ? kthread_blkcg+0x110/0x110 [ 3073.551808][ T8694] ret_from_fork+0x1f/0x30 [ 3073.556224][ T8694] [ 3073.558544][ T8694] Uninit was stored to memory at: [ 3073.563575][ T8694] kmsan_internal_chain_origin+0xad/0x130 [ 3073.569296][ T8694] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 3073.575277][ T8694] kmsan_memcpy_metadata+0xb/0x10 [ 3073.580302][ T8694] __msan_memcpy+0x43/0x50 [ 3073.584732][ T8694] rtl8150_probe+0x1236/0x15b0 [ 3073.589497][ T8694] usb_probe_interface+0xece/0x1550 [ 3073.594693][ T8694] really_probe+0xf20/0x20b0 [ 3073.599288][ T8694] driver_probe_device+0x293/0x390 [ 3073.604403][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.609778][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.614633][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.619398][ T8694] device_initial_probe+0x4a/0x60 [ 3073.624423][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.629283][ T8694] device_add+0x3b0e/0x40d0 [ 3073.633792][ T8694] usb_set_configuration+0x380f/0x3f10 [ 3073.639253][ T8694] usb_generic_driver_probe+0x138/0x300 [ 3073.644801][ T8694] usb_probe_device+0x311/0x490 [ 3073.649654][ T8694] really_probe+0xf20/0x20b0 [ 3073.654251][ T8694] driver_probe_device+0x293/0x390 [ 3073.659367][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.664745][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.669607][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.674462][ T8694] device_initial_probe+0x4a/0x60 [ 3073.679488][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.684339][ T8694] device_add+0x3b0e/0x40d0 [ 3073.688846][ T8694] usb_new_device+0x1bd4/0x2a30 [ 3073.693699][ T8694] hub_event+0x5e7b/0x8a70 [ 3073.698125][ T8694] process_one_work+0x1688/0x2140 [ 3073.703153][ T8694] worker_thread+0x10bc/0x2730 [ 3073.708008][ T8694] kthread+0x551/0x590 [ 3073.712082][ T8694] ret_from_fork+0x1f/0x30 [ 3073.716488][ T8694] [ 3073.718816][ T8694] Local variable ----node_id.i@rtl8150_probe created at: [ 3073.725851][ T8694] rtl8150_probe+0xea7/0x15b0 [ 3073.730532][ T8694] rtl8150_probe+0xea7/0x15b0 [ 3073.735199][ T8694] ===================================================== [ 3073.742122][ T8694] Disabling lock debugging due to kernel taint [ 3073.748279][ T8694] Kernel panic - not syncing: panic_on_warn set ... [ 3073.754876][ T8694] CPU: 0 PID: 8694 Comm: kworker/0:3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 3073.764586][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3073.774656][ T8694] Workqueue: usb_hub_wq hub_event [ 3073.779683][ T8694] Call Trace: [ 3073.782988][ T8694] dump_stack+0x21c/0x280 [ 3073.787404][ T8694] panic+0x4d7/0xef7 [ 3073.791327][ T8694] ? add_taint+0x17c/0x210 [ 3073.795757][ T8694] kmsan_report+0x1df/0x1e0 [ 3073.800271][ T8694] __msan_warning+0x58/0xa0 [ 3073.804784][ T8694] batadv_hard_if_event+0x28d7/0x3bd0 [ 3073.810183][ T8694] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 3073.816430][ T8694] raw_notifier_call_chain+0x123/0x290 [ 3073.821911][ T8694] register_netdevice+0x3120/0x37d0 [ 3073.827136][ T8694] register_netdev+0xbe/0x100 [ 3073.831827][ T8694] rtl8150_probe+0x12d9/0x15b0 [ 3073.836608][ T8694] ? read_eprom_word+0xe80/0xe80 [ 3073.841560][ T8694] usb_probe_interface+0xece/0x1550 [ 3073.846775][ T8694] ? usb_register_driver+0x900/0x900 [ 3073.852079][ T8694] really_probe+0xf20/0x20b0 [ 3073.856682][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.861903][ T8694] driver_probe_device+0x293/0x390 [ 3073.867028][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.872417][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.877275][ T8694] ? coredump_store+0xf0/0xf0 [ 3073.881966][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.886750][ T8694] device_initial_probe+0x4a/0x60 [ 3073.891781][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.896643][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3073.902455][ T8694] device_add+0x3b0e/0x40d0 [ 3073.906987][ T8694] usb_set_configuration+0x380f/0x3f10 [ 3073.912462][ T8694] ? usb_set_configuration+0xb41/0x3f10 [ 3073.918041][ T8694] usb_generic_driver_probe+0x138/0x300 [ 3073.923599][ T8694] ? usb_choose_configuration+0xe70/0xe70 [ 3073.929327][ T8694] usb_probe_device+0x311/0x490 [ 3073.934191][ T8694] ? usb_register_device_driver+0x540/0x540 [ 3073.940093][ T8694] really_probe+0xf20/0x20b0 [ 3073.944699][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3073.949910][ T8694] driver_probe_device+0x293/0x390 [ 3073.955036][ T8694] __device_attach_driver+0x63f/0x830 [ 3073.960424][ T8694] bus_for_each_drv+0x2ca/0x3f0 [ 3073.965294][ T8694] ? coredump_store+0xf0/0xf0 [ 3073.969984][ T8694] __device_attach+0x4e2/0x7f0 [ 3073.974767][ T8694] device_initial_probe+0x4a/0x60 [ 3073.979824][ T8694] bus_probe_device+0x177/0x3d0 [ 3073.984697][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3073.990513][ T8694] device_add+0x3b0e/0x40d0 [ 3073.995045][ T8694] usb_new_device+0x1bd4/0x2a30 [ 3073.999916][ T8694] hub_event+0x5e7b/0x8a70 [ 3074.004377][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3074.009584][ T8694] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3074.015397][ T8694] ? led_work+0x7c0/0x7c0 [ 3074.019736][ T8694] process_one_work+0x1688/0x2140 [ 3074.024786][ T8694] worker_thread+0x10bc/0x2730 [ 3074.029558][ T8694] ? kmsan_get_metadata+0x116/0x180 [ 3074.034780][ T8694] kthread+0x551/0x590 [ 3074.038859][ T8694] ? process_one_work+0x2140/0x2140 [ 3074.044068][ T8694] ? kthread_blkcg+0x110/0x110 [ 3074.048842][ T8694] ret_from_fork+0x1f/0x30 [ 3074.054856][ T8694] Kernel Offset: disabled [ 3074.059177][ T8694] Rebooting in 86400 seconds..