xecuting program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) 14:45:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), 0x4) [ 939.565084][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.571718][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 14:45:58 executing program 3: pipe2(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat(r0, &(0x7f0000001280)='./file0\x00', 0x0, 0x0) 14:45:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:45:58 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:45:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:45:59 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 14:45:59 executing program 0: pipe(&(0x7f0000000000)) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 14:45:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 14:45:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:45:59 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:45:59 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 14:45:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:45:59 executing program 3: select(0x11, &(0x7f0000000040), &(0x7f00000000c0)={0x5}, 0x0, 0x0) 14:46:00 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:46:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:01 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 14:46:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:01 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000480)}, 0x0) 14:46:01 executing program 0: socketpair(0x1, 0xc003, 0x1, 0x0) 14:46:01 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:46:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000100)) 14:46:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 14:46:01 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:46:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 14:46:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:02 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 14:46:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:46:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x4}}) 14:46:03 executing program 1: r0 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='^+,[\x85@&#\x00', &(0x7f0000000080)='./file0\x00', r1) 14:46:03 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:46:03 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) open(0x0, 0x0, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 14:46:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 14:46:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) 14:46:04 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x187982) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x3}) 14:46:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid\x00') 14:46:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 14:46:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 14:46:05 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)=']^\x00', &(0x7f0000000080), 0x0) 14:46:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') 14:46:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)=']\'/z}\xad\'#\x00', 0x0, 0xffffffffffffffff) 14:46:05 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0), 0x4) 14:46:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 14:46:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, 0x0) 14:46:06 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:06 executing program 1: fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) 14:46:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000002680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 14:46:07 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) 14:46:07 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:07 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 14:46:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:46:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) 14:46:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0xffffffffffffff16, &(0x7f0000002540)=[{&(0x7f00000012c0)=""/182, 0xb6}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 14:46:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:08 executing program 4: fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) 14:46:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) 14:46:09 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 952.726698][T21480] not chained 20000 origins [ 952.731252][T21480] CPU: 1 PID: 21480 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 952.740025][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.750086][T21480] Call Trace: [ 952.753369][T21480] dump_stack+0x24c/0x2e0 [ 952.757739][T21480] kmsan_internal_chain_origin+0x6f/0x130 [ 952.763499][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.768720][T21480] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.774549][T21480] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 952.780636][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.785857][T21480] ? kmsan_set_origin_checked+0xa2/0x100 [ 952.791505][T21480] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 952.797620][T21480] ? kmsan_unpoison_shadow+0x74/0xa0 [ 952.802920][T21480] ? _copy_from_user+0x1fd/0x300 [ 952.807887][T21480] __msan_chain_origin+0x54/0xa0 [ 952.812855][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 952.818109][T21480] get_compat_msghdr+0x108/0x2b0 [ 952.823071][T21480] __sys_sendmmsg+0x79d/0x1010 [ 952.827858][T21480] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 952.833963][T21480] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.839799][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.845014][T21480] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.850882][T21480] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 952.857074][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.862300][T21480] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.868137][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.873382][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.878601][T21480] ? kmsan_set_origin_checked+0xa2/0x100 [ 952.884255][T21480] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 952.890356][T21480] ? __msan_instrument_asm_store+0x104/0x130 [ 952.896358][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.901576][T21480] ? kmsan_get_metadata+0x116/0x180 [ 952.906808][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 952.912203][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 952.917769][T21480] __do_fast_syscall_32+0x127/0x180 [ 952.922990][T21480] do_fast_syscall_32+0x77/0xd0 [ 952.927878][T21480] do_SYSENTER_32+0x73/0x90 [ 952.932401][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.938749][T21480] RIP: 0023:0xf7f02549 [ 952.942857][T21480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 952.962477][T21480] RSP: 002b:00000000f54fc5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 952.970998][T21480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007fc0 [ 952.978977][T21480] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 952.986965][T21480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.994950][T21480] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 953.002928][T21480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 953.010907][T21480] Uninit was stored to memory at: [ 953.015935][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.021671][T21480] __msan_chain_origin+0x54/0xa0 [ 953.026629][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.031757][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.036739][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.041491][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.046845][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.052384][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.057568][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.062416][T21480] do_SYSENTER_32+0x73/0x90 [ 953.066924][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.073280][T21480] [ 953.075598][T21480] Uninit was stored to memory at: [ 953.080631][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.086352][T21480] __msan_chain_origin+0x54/0xa0 [ 953.091283][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.096391][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.101326][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.106076][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.111445][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.116989][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.122220][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.127054][T21480] do_SYSENTER_32+0x73/0x90 [ 953.131538][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.137850][T21480] [ 953.140151][T21480] Uninit was stored to memory at: [ 953.145144][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.150861][T21480] __msan_chain_origin+0x54/0xa0 [ 953.155778][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.160869][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.165814][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.170563][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.175972][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.181516][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.186727][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.191585][T21480] do_SYSENTER_32+0x73/0x90 [ 953.196082][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.202394][T21480] [ 953.204695][T21480] Uninit was stored to memory at: [ 953.209690][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.215391][T21480] __msan_chain_origin+0x54/0xa0 [ 953.220309][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.225402][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.230319][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.235065][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.240419][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.245946][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.251139][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.255973][T21480] do_SYSENTER_32+0x73/0x90 [ 953.260458][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.266768][T21480] [ 953.269071][T21480] Uninit was stored to memory at: [ 953.274065][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.279769][T21480] __msan_chain_origin+0x54/0xa0 [ 953.284697][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.289805][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.294735][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.299482][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.304847][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.310387][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.315568][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.320416][T21480] do_SYSENTER_32+0x73/0x90 [ 953.324936][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.331246][T21480] [ 953.333554][T21480] Uninit was stored to memory at: [ 953.338566][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.344278][T21480] __msan_chain_origin+0x54/0xa0 [ 953.349214][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.354318][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.359249][T21480] __sys_sendmmsg+0x79d/0x1010 [ 953.363995][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.369360][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.374894][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.380105][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.384942][T21480] do_SYSENTER_32+0x73/0x90 [ 953.389432][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.395788][T21480] [ 953.398086][T21480] Uninit was stored to memory at: [ 953.403078][T21480] kmsan_internal_chain_origin+0xad/0x130 [ 953.408792][T21480] __msan_chain_origin+0x54/0xa0 [ 953.413707][T21480] __get_compat_msghdr+0x6db/0x9d0 [ 953.418805][T21480] get_compat_msghdr+0x108/0x2b0 [ 953.423755][T21480] __sys_sendmmsg+0x79d/0x1010 14:46:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:11 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:11 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x8f]) 14:46:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x7ff}]}) 14:46:11 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x4}}) [ 953.428501][T21480] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 953.433868][T21480] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 953.439407][T21480] __do_fast_syscall_32+0x127/0x180 [ 953.444590][T21480] do_fast_syscall_32+0x77/0xd0 [ 953.449422][T21480] do_SYSENTER_32+0x73/0x90 [ 953.453918][T21480] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.460255][T21480] [ 953.462574][T21480] Local variable ----msg_sys@__sys_sendmmsg created at: [ 953.469490][T21480] __sys_sendmmsg+0xbd/0x1010 [ 953.474163][T21480] __sys_sendmmsg+0xbd/0x1010 14:46:12 executing program 1: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 14:46:12 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000780)) 14:46:12 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 14:46:12 executing program 0: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid\x00') 14:46:12 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:13 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 14:46:13 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc2, 0x0) 14:46:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:14 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 14:46:14 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:14 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x12f100, 0x0) 14:46:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x11, &(0x7f0000000100)="ca31b079794f1e44dc88c6d099976501af"}) 14:46:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) 14:46:14 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 14:46:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 14:46:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89e0, 0x0) 14:46:14 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:14 executing program 0: semget(0x1, 0x0, 0x63b) 14:46:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) open(0x0, 0x4000, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 14:46:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:16 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 14:46:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @sco={0x1f, @none}, @vsock={0x28, 0x0, 0x0, @host}, @generic={0x0, "e4c6fb1d0c432a1f5158ca105da4"}}) 14:46:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)) 14:46:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000000c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 14:46:17 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0xffffffffffffff16, &(0x7f0000002540)=[{&(0x7f00000012c0)=""/182, 0xb6}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) 14:46:17 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') 14:46:17 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000001180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002780)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={0x0}}, 0x0) 14:46:17 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x131, 0x0, 0x0) 14:46:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) 14:46:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:18 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:18 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0xea60}) 14:46:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000001880), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x33, 0x2f]}}}}]}) 14:46:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000580)=""/245, 0x1a, 0xf5, 0x1}, 0x20) 14:46:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) [ 960.600383][T21612] tmpfs: Bad value for 'mpol' [ 960.628257][T21612] tmpfs: Bad value for 'mpol' 14:46:19 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) 14:46:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000003380), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000033c0)) 14:46:19 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 14:46:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x6, 0x0, 0x0, 0xffffffffffffffff) 14:46:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 14:46:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:21 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000780)={0x0, 0x0, r1}) 14:46:21 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 14:46:21 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:21 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 14:46:21 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, &(0x7f0000001100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:46:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x200085) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)=']^\x00', &(0x7f0000000080)='*', 0x1) 14:46:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/22, &(0x7f0000000180)=0x16) 14:46:21 executing program 3: socket(0x2, 0x0, 0x10001) 14:46:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0/file1\x00') r1 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0x0, 0xf84, {0x0}, {}, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 14:46:22 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:22 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) 14:46:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:23 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40305828, 0x0) 14:46:23 executing program 3: socketpair(0x1, 0x0, 0x7b85dfc4, &(0x7f0000000000)) 14:46:23 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:23 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 14:46:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 14:46:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) 14:46:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) 14:46:23 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:23 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x79) 14:46:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000540)=@proc={0x10, 0x0, 0x0, 0x1000000}, 0xc) 14:46:24 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 14:46:25 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 14:46:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x4}, 0x40) 14:46:25 executing program 4: socket$inet6(0xa, 0xb, 0x0) 14:46:25 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[{0x10}], 0x10}, 0x0) 14:46:26 executing program 4: syz_mount_image$tmpfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 14:46:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:26 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0}) 14:46:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) open(0x0, 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 968.055320][T21725] tmpfs: Bad value for 'mpol' [ 968.141487][T21725] tmpfs: Bad value for 'mpol' 14:46:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:27 executing program 3: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000100)=""/230) 14:46:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 14:46:27 executing program 1: fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) 14:46:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x12}) 14:46:27 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:28 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) waitid(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 14:46:28 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000029c0)=""/4108, 0x100c}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0xffffffff}, 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:46:28 executing program 0: select(0x40, &(0x7f0000000000)={0x100000000}, 0x0, 0x0, 0x0) 14:46:28 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80000}) 14:46:28 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:28 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) select(0x5, 0x0, &(0x7f0000000040)={0xd}, 0x0, &(0x7f00000000c0)) 14:46:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:30 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:30 executing program 0: delete_module(&(0x7f0000000080)='+]\x00', 0x0) 14:46:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400108001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)) 14:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x1) 14:46:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) read(r0, 0x0, 0x0) [ 971.874041][T21779] loop3: detected capacity change from 0 to 6 14:46:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) [ 971.960244][T21779] FAT-fs (loop3): unable to read boot sector (logical sector size = 4096) 14:46:30 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 14:46:30 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 14:46:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0) 14:46:30 executing program 3: r0 = socket(0x2, 0x4002, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 14:46:31 executing program 1: select(0x5, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 14:46:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:32 executing program 3: select(0x0, 0x0, &(0x7f0000000100), 0xffffffffffffffff, 0x0) 14:46:32 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 14:46:32 executing program 0: r0 = socket(0x2, 0x4002, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x18, 0x3}, 0xc) 14:46:32 executing program 4: select(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000080)={0x4}, 0x0, 0x0) 14:46:32 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:46:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) 14:46:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) readlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14:46:32 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffcab, 0x0, 0xfffffffffffffef7}, 0x0) 14:46:33 executing program 4: select(0x5, 0x0, &(0x7f0000000040)={0xd}, 0x0, &(0x7f00000000c0)) 14:46:33 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 14:46:33 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa) 14:46:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:34 executing program 1: r0 = getuid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) 14:46:34 executing program 3: select(0xc6, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 14:46:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) 14:46:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 14:46:34 executing program 0: socket(0x2, 0x4002, 0x0) 14:46:34 executing program 4: socketpair(0x2, 0x4001, 0x0, 0x0) 14:46:34 executing program 3: select(0x90010000, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 14:46:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) 14:46:35 executing program 0: recvfrom(0xffffffffffffffff, &(0x7f00000190c0)=""/102398, 0x18ffe, 0x0, 0x0, 0xfffffffffffffecc) 14:46:35 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 14:46:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14:46:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:36 executing program 0: select(0x5, 0x0, &(0x7f0000000040)={0xc6}, 0x0, &(0x7f00000000c0)) 14:46:36 executing program 3: open$dir(&(0x7f0000000180)='./file1\x00', 0x200, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0) 14:46:36 executing program 1: select(0x5, 0x0, &(0x7f0000000040)={0x5}, 0x0, &(0x7f00000000c0)) 14:46:36 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 14:46:36 executing program 4: select(0x5, 0x0, &(0x7f0000000040)={0x500}, 0x0, &(0x7f00000000c0)) 14:46:36 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xcd}, 0x0) 14:46:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 14:46:37 executing program 3: syz_open_dev$hiddev(&(0x7f0000001080), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000001100), 0x0, 0x101042) 14:46:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000008c0)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffcf8}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="04"], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000100)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x3, [{0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="4103956fbcb3"]}, {0x47, &(0x7f0000000fc0)=ANY=[@ANYBLOB="470322ef207d40f14d"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x20, &(0x7f0000000d80)=ANY=[@ANYBLOB="050f20"], 0x2, [{0x2, 0x0}, {0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002"], &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x11, &(0x7f0000000d40)=ANY=[@ANYBLOB="05"], 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x5, &(0x7f0000000ec0)=@string={0x5, 0x3, "ddc234"}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000007c0)=@generic={0x3, 0x0, 0x0, "4dab806b"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 14:46:37 executing program 1: read$hiddev(0xffffffffffffffff, 0x0, 0x0) 14:46:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x0, 0x81, &(0x7f00000002c0)="5edf6e98b3e21bda24fb336a939804f00f81dd3e1d0a33a12b38b0190698712dd68ddc097b80f7afb5a6178c1e921ed69ea96a6dac4a7a6f5d56f023c0db82ec8879e6bbc0fdf9091dbc8ec88b43595be3edd1d647f46854277a0de2b01b85b1bbb211cc4e57a7bbff245cb2c6efd4bbecbc71820a347c9062c3c8dc137e88fa21"}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000004c0)={0x16, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0xc20000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, "fcd7bebfe70d89fe86841bf87ed733ca7e6d8073c7804134e0324a872f052ace"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e460, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x3}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x3fd, 0x3}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed105400000000003ec13e2000000000000000000000b84c00"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xa2dab054bdb1b0, [{{0x9, 0x2, 0x27}}]}}, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000480)={0x14, 0xfca, &(0x7f00000007c0)="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"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)="efce0057"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x4, 0x1, 0x0, "b501cd2ec9e6ad52e8f3598a774e550c4dcc999c028a3e552b4922540b27569f"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "fb00", {0x3, 0x208}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 14:46:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:38 executing program 3: r0 = socket(0x18, 0x4002, 0x0) listen(r0, 0x0) 14:46:38 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b0", 0x27, 0x20c49a, 0x0, 0x0) 14:46:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) 14:46:38 executing program 0: r0 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0x5}}) r1 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000000)="03", 0xfd50) 14:46:38 executing program 4: syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000001480), 0x0, 0x242400) 14:46:39 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) syz_open_dev$evdev(&(0x7f0000002380), 0x7fffffff, 0x0) 14:46:39 executing program 3: syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x40080) 14:46:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b0", 0x27, 0x20c49a, 0x0, 0x0) 14:46:39 executing program 0: syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000001480), 0xfff, 0x242400) 14:46:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x0) 14:46:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0}, 0x10) 14:46:41 executing program 0: pipe(&(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) 14:46:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5}, 0x40) 14:46:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b0", 0x27, 0x20c49a, 0x0, 0x0) 14:46:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x645, &(0x7f0000000940)="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"}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x4}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa}, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="050f05000017f6859ee08d276411165c42945a805b1481428db05d0fbc28e46b29df7c4a769b2412202609cbc0e82003be2d99d4f23b6168c906dd1faded0328dc4513fd9f39228101f08dce8a791d871dc6ced5963cca5804c19b4aaaf4509c344406c4bbbd2cc67d08820179c61dac2b1cc54e02e24ab80fb7345031befe65b419296d811b5ec771b90f31f958d619fe93b7f122207671f3b727"], 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xfffffffffffffcbf, &(0x7f00000004c0)=@conn_svc_rsp={0x0, 0x0, 0x0, "08df5165", {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}}) syz_open_dev$evdev(&(0x7f0000000640), 0xff, 0x40) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x74, &(0x7f0000000600)=ANY=[@ANYRES64]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000500)={0x15, 0x8, &(0x7f00000005c0)="14809b1522d8f7a2"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffef3, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 14:46:41 executing program 1: r0 = syz_usb_connect(0x6, 0x5aa, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x4d, 0x87, 0xd4, 0x10, 0x2357, 0x107, 0xd7f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x598, 0x4, 0x1, 0x20, 0x0, 0x24, [{{0x9, 0x4, 0xc, 0x48, 0x8, 0xff, 0xff, 0xff, 0x54, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "20fd35a29de8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xcd8c}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x7ff}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x7ff, 0x3, 0x5, 0x4912, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x80, 0x18, 0x3}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x1f, 0x0, 0x4, [@generic={0x50, 0xd, "85dd0342ed5fba47d4fdec2a37b896d3915851704ff911a487846e0094c20aee2f5269c5b936cae171a31cf399f56031dda257fbaade1aed94a0e4cd746de0156b25e54cd239018f4869f49092c9"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0xff, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0xe, 0x18, 0x40, 0x3, 0x0, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe0, 0x8000}, @generic={0x2e, 0x2, "fc5c8566e48967fae54a137d0f9da7fa10049c5cfb0dac87bcfe34943c9bd57e35b02cedc59c9e9a1072e4a5"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x0, 0x61}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x3, 0x89, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x8, 0x1, 0x3, [@generic={0x14, 0x30, "7a6fc0edb06d992febca840b891d765c58ff"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6e, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x5, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}, @generic={0x9a, 0x11, "5349e15e92ffcced143ca16b8b97008fadd798e761cec6cfb697d7210238c940a3f84f0769a7636415b6cede19504d07b5f19f67daf4f82f7fd350d520197cbbba9c1c51e3c03241797cc83468872f1e99fe38c70d2729ca12b287460ede418725a79b7b960e96ccc324c231458b566a131355d3644e6c96f4144a4294749197d87f9cbbc1bb8cbaf7446f30bce2a14c60f09c7dd55e9054"}]}}]}}, {{0x9, 0x4, 0x4, 0x8, 0xe, 0xf0, 0x41, 0x5, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x81}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x6, 0x3, 0x20}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0xfff9, 0x4, "14f11035"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x6, 0x4c, 0x3b, 0xf4, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x3}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0xc, "77e12553"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x13, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x3, 0xf7, 0x3d, [@generic={0x51, 0x22, "3d572a499a6f9e5ae20743d7f3eeab1af33dd0deee7d688d14ac10c6e0ec1f1e22ba045af233ce18173ef7ab7bbf856ae733ba7ea6f2d4d190f90b6a89ac679b0895dd36fb914641efcd8d61a00528"}, @generic={0x7d, 0x3, "26e8cca1c12f81f1a18ad3f8abe6f4264e386b64e0ca513eb096e15c1cb114be7f17ca071bc2ba6ae2396b9db372b5050861a82359482a69f17ed0f0c137a4c3b6cfc594dcd085ea2f79c3def5c140cf03648343cb1eb141c5b3fd1df38adecbbab7e1475488a7b4dc47f341f982f354f43e4170722c827ef74b46"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x80, 0xf8, 0x20, [@generic={0x4a, 0x10, "c57dd1e51506acf0aecb6799243337705e50e434c2e1b7faaaa12510228194afb99284f6adf489a5d1353c1bac7b670c3493aa1b23c73261e5e8b5007cd1619e9488376ac568570e"}, @generic={0x5, 0xe, 'aj#'}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x81, 0x0, 0x3f}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1f, 0x7, 0x6, [@generic={0x5f, 0x11, "1f48ce22ab98af52a757711c2d3bac41c8bfc093e337679e456e01b65617d3fae9d7e9516409546611a9ea97167fcc2b6ac2332e7d8d9bed43bf4ea3fe6a8ab9b3c5c23cb965fbe262354eee760c7a980f2d1e2b9fe22ae4ded960f329"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9d, 0xf9, 0xff, [@generic={0x5b, 0x21, "d6fe68292cdd6b8b077b65adb8703fb0fea19a9fc2feee9c3ff3e60eb9c8dd22a7081f4a5f5104efaed0ba90ebfd4058a0477ca73cae2bdc06b94a27e74deffddbd2985d5458ec9854a7eb248121a5df12a2d4c789e17138b7"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x95, 0x8a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3d, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xf6, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x6d, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xc00}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x4, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0xbc, 0x3f}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x2}]}}]}}, {{0x9, 0x4, 0x99, 0xec, 0x2, 0xf6, 0xfd, 0x5d, 0x9, [@hid_hid={0x9, 0x21, 0x0, 0x3f, 0x1, {0x22, 0x30e}}], [{{0x9, 0x5, 0x5, 0x4, 0x200, 0x3, 0x38, 0xc2}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x1f, 0x3}}]}}, {{0x9, 0x4, 0x4, 0x81, 0x2, 0x4d, 0x8f, 0x47, 0x19, [@hid_hid={0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0xecb}}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x4, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x0, 0x81, 0x81, [@generic={0x72, 0x23, "bb74ad360b1f69cc4e0731891432523fe87a804e8956777acef9f6dec6f3275846384508e2cb2566e94c4c96aa5e500b442906901d2075aafc2e5d2294e94e3872394979bee9c709db1abf0886c6d512cc2d8c473105e97f18adca8b9fb8ef411b516fc2d1739adbc83273ca945c9979"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0x1, 0x8, 0x7}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "b976cdc61b000d15b5ac6b97d2ae672a"}]}, 0x3, [{0xc, &(0x7f0000000080)=@string={0xc, 0x3, "1c5b2bb2d9bcfb831ba6"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x66, &(0x7f0000000100)=@string={0x66, 0x3, "e830b236bddce8ad103229c803aa9847e936936d64adc9d91734e38e906f720f889258666fd3e3c5b7e1a0c85c05b8d0b7be6b4e46df103332bcdd04bc51714b64687be04404bc34e031466815bacc3eaf986350804b66531ec3685af6a782623bd38752"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0x10, 0x46, {0x46, 0x11, "fe1282be86706148d8de9d878883c81b16c8ba1cec86434d0fb579ebfbefb80871fe2fc3a859ef2672e72d23069367cd10517cfea4cb976f4631e8aff1fc83694e660b99"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x17, 0x5f, "a174653e403784f4bcdd1a2831ecbe68ed83e0d0c5785859d15aa6f0839fe88f2d575aec6fc893741fdb0faac14fb004620a4e5e6a8ff6639deabb23d6b24ac135937f647f109da90de02c3e719d8c0c77df6432535f4f1a69365b1df311d1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}}) syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd2, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x2, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xed4c, 0x12, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x100}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xdb}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x80, 0x13, 0xe1, 0x2, 0x2}, @mdlm_detail={0x4c, 0x24, 0x13, 0xf9, "e8de08025b4accc5b5dc19fb68327b10ac863caa322f07403b02210c136935c7d80117944f0bbeca44d36c5313e40808959f030a11a82dc5909077c0fdbc4a2d747f741524d20d07"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9e, 0x4, 0xe3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xa3, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x9, 0x1, 0x1, 0xff, 0x7}, 0x6e, &(0x7f0000000c40)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd8, "b06444f7bbd605807fd6c7d8618e734f"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x3, 0x20}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x4, 0xf00, 0x20, [0xc0, 0x3f, 0xc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b6f8225703bc3df99aad83d68e7b0390"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6dd32f7b7dcc2710a50ffad5e20c7665"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x80, 0x7}]}, 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1801}}, {0x2, &(0x7f0000000d00)=@string={0x2}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x83e}}, {0x22, &(0x7f0000000e00)=@string={0x22, 0x3, "208e38539692ff8a7a6a80d9a4a6891eb99cc37eaa65b358c8c4dcf90dc0066f"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x44c}}, {0x20, &(0x7f0000000e80)=@string={0x20, 0x3, "c16436f09b8f605fa91e932b1a6002deb5950a9790b7c8f8c7b793f0e135"}}]}) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x20, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "6b5d1b"}, {0x5, 0x24, 0x0, 0x41df}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0xfffe, 0x7}, {0x6, 0x24, 0x1a, 0x2b2}, [@country_functional={0x6, 0x24, 0x7, 0x1, 0x4}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x81, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x78, 0xff}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x0, 0x5, 0xe, 0x8, 0xff, 0x2e}, 0x39, &(0x7f0000001400)={0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "db250d50a6819afb8b094db13ea16259"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x71, 0x3f, 0xd8, 0x81, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xae, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x33, 0x9, 0xfffe, 0xf9}]}, 0x6, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x81d}}, {0xd6, &(0x7f0000001480)=@string={0xd6, 0x3, "5ecf8b0de79a950068db55ba470d1e998c809576b4f9abe03b2e76d9aa196f085069fc9c2f700ad08a10df20d1cb2ec79fc215a127c842fb23d6de9489c83257d597a9609ba547d829510cc9f57eaeb115b555ab7818e24a3a17a12e42e4f4ab1d3ab14d8d65db89a06c646cbf781ca37a427ceb7b296b1ba79ae156c96351b54f11be066b94b9583d282c2bd902fd9d50544d43cb034f79fa5de28922d58a2811df136e8975cd05c2d3d09d1323dfc98acdeb19635af5bf5817d1c9efda0c83f3ca48acfd0e03e65713fcbd348976c99e3770ed"}}, {0xc5, &(0x7f0000001580)=@string={0xc5, 0x3, "cc59ce6d4ccc2e5a7e1743bbb6c133c70160b66688238a7edeb0204d9f6ac8cc5e3a7266e1bddc6e9e55e9e75c83723f3424432738fda9a0bcebec14cd352b87ba94e9890d9cf08d071d9abf9252c11b4461dc357962470373b0141f71af14f4502601b6b14f2f5c51c3095329d78fcba882d41453665b152fb2df47e27a1a403c4ba651534e7b269eef3ba98e2cdabfa1ffad1a23924c1fa15eaa6fd30110cfc059dc11a15cc156d68f2d34c804c2bf5e7431f3a68ddfc11e49c86e0ae506f88b8f99"}}, {0x67, &(0x7f0000001680)=@string={0x67, 0x3, "51ac40721f8a715507a1447a317ea9e565690c1f14bd5208adb8b7d1d06263ce8291cb2d64c620d0eba9b118b71484fc1141f1cc0cc6898298ef22cb8530f76399c27a3ae06d60a1f044bb2a749982a8c29cd8b7d8edb2fce7ed4ea9bad3f48d4bf732dbde"}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x810}}]}) 14:46:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 14:46:41 executing program 0: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x11}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x17, 0x3b, "a174653e403784f4bcdd1a2831ecbe68ed83e0d0c5785859d15aa6f0839fe88f2d575aec6fc893741fdb0faac14fb004620a4e5e6a8ff6639deabb"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x15}, 0x0}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd2, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x2, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x12, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x100}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xdb}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x80, 0x0, 0xe1, 0x0, 0x2}, @mdlm_detail={0x4c, 0x24, 0x13, 0xf9, "e8de08025b4accc5b5dc19fb68327b10ac863caa322f07403b02210c136935c7d80117944f0bbeca44d36c5313e40808959f030a11a82dc5909077c0fdbc4a2d747f741524d20d07"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9e, 0x0, 0xe3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xa3, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x9, 0x1, 0x1, 0xff, 0x7}, 0x46, &(0x7f0000000c40)={0x5, 0xf, 0x46, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xd8, "b06444f7bbd605807fd6c7d8618e734f"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x4, 0xf00, 0x0, [0xc0, 0x3f, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x80, 0x7}]}, 0x6, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x100a}}, {0x76, &(0x7f0000000d00)=@string={0x76, 0x3, "10b0fc5781f7d9e974ef17309bbf1230c9cc9d3f37fe24187c075f7b4dc22db183009d7594531a36e8cdbeb1a728791b3bb8bee8e45b64466871e2fd63ea0d3a55d38135906b36c72098d73a8894fb3077aff7e3926d27f753213d2bbba01a269343ae109856e238f32f3af72e0dcdbe01cf117a"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x83e}}, {0x2, &(0x7f0000000e00)=@string={0x2}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x44c}}, {0x20, &(0x7f0000000e80)=@string={0x20, 0x3, "c16436f09b8f605fa91e932b1a6002deb5950a9790b7c8f8c7b793f0e135"}}]}) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "6b5d1b"}, {0x5, 0x24, 0x0, 0x41df}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x2b2, 0x3a}, [@country_functional={0x6, 0x24, 0x7, 0x1, 0x4}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x81, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x78, 0xff}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x300, 0x5, 0xe, 0x8, 0xff, 0x2e}, 0x2f, &(0x7f0000001400)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "db250d50a6819afb8b094db13ea16259"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x71, 0x0, 0xd8, 0x81, 0x8}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa, 0x33, 0x9, 0xfffe}]}, 0x6, [{0x0, 0x0}, {0xd6, &(0x7f0000001480)=@string={0xd6, 0x3, "5ecf8b0de79a950068db55ba470d1e998c809576b4f9abe03b2e76d9aa196f085069fc9c2f700ad08a10df20d1cb2ec79fc215a127c842fb23d6de9489c83257d597a9609ba547d829510cc9f57eaeb115b555ab7818e24a3a17a12e42e4f4ab1d3ab14d8d65db89a06c646cbf781ca37a427ceb7b296b1ba79ae156c96351b54f11be066b94b9583d282c2bd902fd9d50544d43cb034f79fa5de28922d58a2811df136e8975cd05c2d3d09d1323dfc98acdeb19635af5bf5817d1c9efda0c83f3ca48acfd0e03e65713fcbd348976c99e3770ed"}}, {0xad, &(0x7f0000001580)=@string={0xad, 0x3, "cc59ce6d4ccc2e5a7e1743bbb6c133c70160b66688238a7edeb0204d9f6ac8cc5e3a7266e1bddc6e9e55e9e75c83723f3424432738fda9a0bcebec14cd352b87ba94e9890d9cf08d071d9abf9252c11b4461dc357962470373b0141f71af14f4502601b6b14f2f5c51c3095329d78fcba882d41453665b152fb2df47e27a1a403c4ba651534e7b269eef3ba98e2cdabfa1ffad1a23924c1fa15eaa6fd30110cfc059dc11a15cc156d68f2d"}}, {0x4e, &(0x7f0000001680)=@string={0x4e, 0x3, "51ac40721f8a715507a1447a317ea9e565690c1f14bd5208adb8b7d1d06263ce8291cb2d64c620d0eba9b118b71484fc1141f1cc0cc6898298ef22cb8530f76399c27a3ae06d60a1f044bb2a"}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1c09}}, {0x0, 0x0}]}) 14:46:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10658, 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) [ 983.188178][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 983.428330][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 983.549356][ T55] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 983.560091][ T55] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 14:46:42 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) 14:46:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x11, 0x0, 0x4}, 0x40) 14:46:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) [ 983.819358][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.828784][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.836914][ T55] usb 2-1: Manufacturer: á  [ 983.841860][ T55] usb 2-1: SerialNumber: à ¾ 14:46:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x1100}, 0x40) [ 984.458465][ T55] cdc_ncm 2-1:1.0: bind() failure [ 984.472785][ T55] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 984.479858][ T55] cdc_ncm 2-1:1.1: bind() failure [ 984.578722][ T55] usb 2-1: USB disconnect, device number 2 14:46:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:43 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@random="8d43cbeebc18", @local, @val, {@ipv4}}, 0x0) 14:46:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:46:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 14:46:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0x2, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) 14:46:43 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:46:43 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:46:43 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "592117c5ed07decf8965aeed6cec2c56d71f0737415d22dea09fe74037d8dc89cb01556652a21168b05209a1f4c4e5f199d9a71378899ab3dd636fd3401a03e18fca2b12dbd16ded5741bc46e47b676f58945bdfaabc1da26bb138ea2b789b42f0d5f7e4389033038dc38dac0270641048623d46dd7c0cd7cc33c8d90d79b28d8514ac00de4fc0ef60b2f30a8587aff76c3828fe6d0fa221c8fd4311f8425fb11dbb0a690c3e91ddc55b759eefa61dd55c8b8ea939d9184b85c2862eaad1ed505eda49ff8013e170db8d68493901060da58db706c16ae5832db232057f4880ade68be74c4d899c4d26fad329f299454546ff69fce3e6073cf99cc99c2d458780374ace557809e80c0a25cf7aba36d0b6bd51a5afa41f34ae9304cedd089e6d5423e3dc35fc4c7bded0e86c4b5c423b5ad11e2e5bc3e84666b5a2e9067ebb7b7744330bc107c04ee9aa906a9fbfe5622aeb8d51b08e219832c7d6af1fa0effd8fbbad3113d2db0fbf244d5183c7c5545cc0d43208c631541503c022d5c101cec2eb3f74691cb1f0ec0cc398a39033d643b66e797ab308ec37e64ea46e3bf5e46e2c56e82355b451ee5cf35aefc52ff53c98e97e25f2ad5587148171ddd00f1281263f45915a853b7b35e28fa5b32e0f315b1e9ec7e99bf0be30a03391bc7af23c632fcc91cb7427e80d7b1066c95f9563cf547353535d07278b8e188bd2a0cbf83ed30892a43c327b2f53e06fafada85627a2dec1986068c9bdefb12dfebb729c6a7f5c5e10d79c10cf1b5bd1b1203b2b85e13c939794e6444f0ea5f2db2daf3598fb6e0f8cbbbf0a9472abbde76a4aa80ee857d8655a95092fe8f4c9a64fa8bb4c03533eb86cf0219876c31c0ccd46d4afc2e47370f4baaf5e0b8d895ba34e1f5e153b84abd89a05680d611699a7f3679c9353ecf3b764ce507c97d9be9414660de281544c20f54378a29589e9a3653d02883593df7257bd9f94dd85686171e6118fcdb6b525b1e34aa12e734d35205be36485230d675d08affebb9d1f65bb9545081e7c17a98a507023aab9186c715e758b2e39a16e95efe6508c09a82910b21ed9be8091e53acd82012d0732ef752783cc7c426bbc87b83eb6818a409cfd073071a25ed479d044572538eb2f05c9172a22851ec8f55bc9c30221da1a32cd22b66c2d8a1c34e10d3e2237988c2173f53402f751f693f7b9a75d0ed9026eeb82f3dd3dcfe24e66a02ffe63ae007605650cf2b2f75eec1b83266753ccba7a2169b78bf8e1bfecd38b98cb56eacc97fe203e8c71ff6cf13f4fa75113e0d2141f379ba8555bac41a00f5eba1b57bf20bf00f35f920f76e453bd1a28c23678e63220eb349b086eee317b0af118a54abdbd32ba439893e70a3bb4a36d77f0751bf70c9a58cea2d5fe546acc47a14cd0f6a87203be82d18503e0709f1492e6aefdda9eb55dae83eef25cf2e2404052389d65a99b9dffb02de66d4e4ef3defd1744719c66c95dd6c8a738bc9ace5c35b850ce5825cf398cfac43800e58ab6f46521412c47f7b45192efde6844d368ea3aaf969d7629c081e7245b6d9b56ae09385719b2c83c949c8d290f260c87cdbe86aac51325d19ed6304a18238fe12c616a72136fe46950c3cffafdeb9f813805ecf6a5a74bf41f8f76a63022993dbd32187bcc971cac9cfdba2bfcd3c2530ffa4b1dbd2d20f380bab5424bd0f75284c2a667db0b03469e4a7c6606ec33de44ce04bfbbe2e2cfa70bfc299e9087977a734999dc1b47f6c8436c820fa3c2058310976883949fee44c1593acca5e664215fe0e55cb6548513cef27a475913349d7b89133add26eaf08ef646affc87c0c5a9b3a98477396953b4d6dfcab7f07d672b3237a05400ecec6b3e25afe7ba556b7b9a74e51460434c50358415a8248f43cf61d77fb7b7753155bf28dec5b9d1dc10144a62b57734a9516722f1de6ec85ee0f9ad7e9d7e457fff5915e14edd8e120e5b83b1f684c8307250018f6f48c7cc5b66348a3d926a8719b82ac4c0edc05c5337ba185b13797f3bc357b46f45d0d549538b71019a13fd9291b1e5a331d02c116937a0b00b5ec362091be37ace5a018538abcce8feb63efc3797ea2d5387aafe482528736edab167f8d0b5365cde82470b48b91aa8b9f53435acd1b7f5d5e65525b6a01f3cf549f103fa492b5f02bbe07f9fe65015e79489b245386281d56b1662bc332611c1f25f7c27c1b9ed9f65106671db3ebbd1fd3bbf12936d24676ddc472a433aacce8ec26a928f7c2f5ba23c7243e7e9d3e315d15416f5b4bdb676f1cc3b76341466f81f471c1bc105f92315ae79f4fe5276e5d738d47140d14cc675256a49e566dc1c47a792d17b1c39c3cb5f29dcd7c6bd542a37880174faffbc327ca861d13446bb1a089792099455ab9603cd588e84d3fa665f1fc54fc6f4da0da16d3d3a3d2fb08bbba0d8f22aff8fb2bc2f4ac581a934f3ad213e725bfbbc6cf74b1bb1514f790df734828aaf8c8c97f5edcd73678d6a270e28f24e7419109ac2d8dfd5c744b6af60317f930a04d03172e2e4c012bdb0fe344eca407de4c462485babe997b43210f0b9326b40c5a46fd51d9f16f6b9cdef891bb849516813afa9438d2334831569bdcfb65673a8780445cabfe328f190e7fc373876e051bb8321cefa3c6ee6b1074c9c7009e85b32ff0507199c1f05f4ef65f719a281cba3d7be32f12d67a52bbbb6028b61bd3978f8acc5bf4ad153485a6c567a8cd187b55e3f453d3c1a120e8aaf4c3026043dcf1d09fc5f1947659b7b42e75c4cda7066bfe16682cfc32d25628951fd331824d4d4bb200abc7fbd2f0aa09cefb5803d0dea356e25cf8eb11b84f43d91873a285623a08289ad1bd9683238bbf4704a0cdfc4510d48e0ece6c82e7fc298381f4a63642633d97ae9c5d7486146d5b164371639681392f01ed520b91917c9999b7f69fc0d1543a9a0d5b16aa7dae685f3ebc4ec95fe910df1a720c5c03e521427d4af1ff7635e35dc2ab84b158f86ab2b59fe9dbbe5e9fcd872e293e1456298789b313b23071f10230370644d85fef1df537294bc392d2a5e1265711627b10742e7db09489a71acff65e1ebcd4a70b0c92b16bf23f0006c185f15b2edfcd2a9e773c327a1272f10202fe462a1a500eddd7a2f9b597f31747f4085e3985da96246fe861439d565d446a8055e36fa91cf80df9afa3f050571999b04d69c72180bef43086c141245ec8de2dc520cf6b28b87f65ad3cc0153bdf4d7f371cacbc489c5f5a2e392aa9ccdb4e74d284d44125f2cf95804d2646e17a99a5093e9393800b0f4e9d268b3d8149952c8ceda5889249457eb614829c694f819e3a89e2a6495117f82b9da6272f99a5ccf2eeeb28cc62e386e72f7d739257a93da187c952391b0fb8b717fa0a5fcb9887016e1ab86e07c3cfd7a96cef1b6c45613601d7ff03fb783c348b25b4f24e32c02ee8dcf71026f5597854dd5bea62f14ce9fba83a0e45941305b8ae2d4295da94711e92572b2faa3f7e5f69c639ef7d13731fe11aee9490f7a34a3721c5179742febdbb1002b2ee9d544472a03cd7a7264bb60c25b4f08f8d747bffe4fd6c4e1f6712d16fee992a4a247b2524f60fe9b6d8b9f3d1cb7c8561464d02c1b9a239053355827179ff92bb5844a14795ffada49d6794b782b8401cd1324dd21edd4d9a4f12fd8efb83dbede1f408e8267c6b5d7bd0c6bdfc34deb7b8ce3d1d7e16d614b1c64939aafa1f144d4c722425fe0628a4ef187ebab10929d95a6d05123ea52db3b5e524787c8c635f3841290c3d1da41892daa45215fe6390b8fd978928c75c0bb3b0304e32a7b6f5846436840cb04f2c22cdfe499d71f748ee8ab0b9bd0e760e42e412fcc3d57deeb4073deac9b403c28574cbdea4e2cde1aed15ac87a1673584b6fc028d3dbba4366dd19d7b63dee546138cb842130af31ddfb8d602325c5d3206d173247a1eb8fb37c06a6836da94e36effc0e65d56cc446ee1636f8fe3fd0e309f2bf931f8f26ee402a09adba874eb9302895d9e8040ee5aafe9c008ff3880d00b1af80a1efb0c182a4eba89d8af406447e3dffc452bf331867a0f4aa208e3b3bff667baa7bf478e378fcbb960d216e7291c60a544d4d67e64eff7462d8bd89303e617a569976ff914e7fbbd3be5c4759652f77bb2989ea75d262a169aa91ce1b7cfd9794b488135556e71ab701d5ee5a0991563ad3549bab93d029c9a33e075b9a612d145916b6521d0862eaa00dd7a51d3dfc8c9c95e8ce67098350b571ed4dd2c3a274ca774e9dfcc70ddb4c75203a63bb91000035792bdf581a766cd7215848f2897aa8f40f39e5e061701fb17b5a6b5cc66aa7a42dd0ceac8117deb7e09e0b2ba89543bc3e0d27f5a40c614fb20df897409ac2d96e000531a0e0a944f9d942db84673c487185d7c64326cbb99422c5a23f1e265bb0b6801139b7f4add57623176849e8ddd4580e679aab72da721d076bfbecf0b8f73a9d2b25b0c962b3dfec9168b5ac91eebf8c4ead2900405230b2e6a18737cbc4d1a02bbd4622c159d654f8fb65ad1d92d29c4ecdfed57b688c17b1cc5f4d82c530c37dcd3f78c82f2804f3b07a782fd6cfd181d6527e924686065b6a46fdb383cb745bad80ae65f2fc1d99ba6fdbd4e711daa4173779585c819fe8c206058364e627158e59d6f0256088a663580584a9bfbfec1859928f952f91d66480c3878ebfe392fee77e62a59e572f3244496bbb6bcb885084da642cac6cb01e7686f28d88c5920c2764bcaf8226dc630ade39b687d7bb7f8f450a7dc56d640c23991a43fee60afc0909ec16ab551d541a9dd9d7b76d037ed3062b8dc17498ecc50e2fbbea8ef755ca8c65e474ccaa8b8b03def921444ad5bd0f82a2dc65b6796cb4823ced4b9ccea0a10d5113e043889147f95e69bd58b9484a2915d80444cd4e14e035fa8390e8fe7d10a757e2836c4843c6663e2d7f13ca50d73ac0ee0f47fdb7e01625cf55f4af1ff7c284e780a1f3bdfd54c23b202f5bdcf5bf681b9554e3e9c64ab9748c0dc1c93763c98f377d869e18d8cbcd41cc803fc55a3ef1eee146bca1303d8fe9a5cb87a9db3f80cefacda789e9abb8568d9ef54607c2cc43bbceda323a12655ee91606b7a20f601f24e8edd5808a4fd36d489c94e7133dc7ec7330475585dff231ec567652c6c7f6eea527a84429ef577b0bba854681f81b77fbcebbba9663ee1b5d9ae6b998fd1d3e20714c2ce3d03303c70a3e63ed0c1d354e5471ef0e62e53b7ef1f96bf5b7fa2da5b5360814a39ec39a6a453016b61f51befcf8bfde7af700ade61f9f38ef6c8ea61be93834521e4c6bd8ef2dbeb3ee605cf14af10369433fdd3d14a7275256c4e49fa69fa2647c7f04ff6238857b9917e9cf72cef4edf876422d36cc045106fb01f18c98d708427ae33d31b38b8b4b86cb0953499c398a7145586efd5f22b2595966937101bf564c246dde3fe18afb15e8812b455df755d72bf4e832255c86a38793c14414b68c86526e534941e832153a6c52cbb79fde3d4448c1f56fb9a12fe207d9f71561f84bd46bfb95f4ad2c77b23ca65837ccde3ef96e60139db12a6fc1677a17762eb472f5b1c78326491b93b5230ec4f275ec5a6873b9b09ab97f1813881af9c6c9e27470897fced959b41dc6c00924fe2faf97cd7680e085341a39ff88d4b01cd1f9ca16c973e113d1cc219cd5d7d3c73bb7e8c8c1bd63ea594f79743bfa6c354e3f003f6feff11cedcbb37976cc83eb3f332d2002407618d9043a5fd32dec8"}, 0x1001) 14:46:43 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000001440)) 14:46:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) 14:46:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x20c49a, 0x0, 0x0) 14:46:44 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2}, 0xff}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x5e78}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 14:46:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:46:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:46:45 executing program 4: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xf, 0x0, 0x0, &(0x7f0000000a00)) 14:46:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x20c49a, 0x0, 0x0) 14:46:45 executing program 0: pipe(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 987.414254][T22025] not chained 30000 origins [ 987.418782][T22025] CPU: 1 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 987.427554][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.437618][T22025] Call Trace: [ 987.440901][T22025] dump_stack+0x24c/0x2e0 [ 987.445282][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 987.451023][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 987.456321][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 987.461453][T22025] ? release_sock+0x26a/0x2d0 [ 987.466171][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 987.471126][T22025] ? kmsan_get_metadata+0x116/0x180 [ 987.476457][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 987.482282][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 987.488382][T22025] ? kmsan_get_metadata+0x116/0x180 [ 987.493615][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 987.499263][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 987.505348][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 987.510651][T22025] ? _copy_from_user+0x1fd/0x300 [ 987.515618][T22025] __msan_chain_origin+0x54/0xa0 [ 987.520586][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.525719][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.530701][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.535219][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 987.540838][T22025] ? kmsan_get_metadata+0x116/0x180 [ 987.546044][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 987.552124][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 987.557773][T22025] ? __msan_poison_alloca+0xec/0x110 [ 987.563063][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 987.567831][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.572519][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.578663][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.584865][T22025] __do_fast_syscall_32+0x127/0x180 [ 987.590107][T22025] do_fast_syscall_32+0x77/0xd0 [ 987.594976][T22025] do_SYSENTER_32+0x73/0x90 [ 987.599490][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.605865][T22025] RIP: 0023:0xf7f66549 [ 987.609935][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 987.629551][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 987.637977][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 987.645953][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 987.653928][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.661902][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 987.669874][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.677857][T22025] Uninit was stored to memory at: [ 987.682869][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 987.688597][T22025] __msan_chain_origin+0x54/0xa0 [ 987.693553][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.698669][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.703627][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.708135][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.712830][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.718906][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.725095][T22025] __do_fast_syscall_32+0x127/0x180 [ 987.730322][T22025] do_fast_syscall_32+0x77/0xd0 [ 987.735180][T22025] do_SYSENTER_32+0x73/0x90 [ 987.739691][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.746027][T22025] [ 987.748340][T22025] Uninit was stored to memory at: [ 987.753364][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 987.759088][T22025] __msan_chain_origin+0x54/0xa0 [ 987.764047][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.769164][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.774125][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.778652][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.783337][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.789410][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.795588][T22025] __do_fast_syscall_32+0x127/0x180 [ 987.800791][T22025] do_fast_syscall_32+0x77/0xd0 [ 987.805661][T22025] do_SYSENTER_32+0x73/0x90 [ 987.810172][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.816507][T22025] [ 987.818820][T22025] Uninit was stored to memory at: [ 987.823846][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 987.829600][T22025] __msan_chain_origin+0x54/0xa0 [ 987.834542][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.839656][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.844610][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.849151][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.853947][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.860022][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.866193][T22025] __do_fast_syscall_32+0x127/0x180 [ 987.871395][T22025] do_fast_syscall_32+0x77/0xd0 [ 987.876270][T22025] do_SYSENTER_32+0x73/0x90 [ 987.880799][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.887142][T22025] [ 987.889456][T22025] Uninit was stored to memory at: [ 987.894464][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 987.900188][T22025] __msan_chain_origin+0x54/0xa0 [ 987.905145][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.910277][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.915236][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.919746][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.924476][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.930577][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.936737][T22025] __do_fast_syscall_32+0x127/0x180 [ 987.941947][T22025] do_fast_syscall_32+0x77/0xd0 [ 987.946807][T22025] do_SYSENTER_32+0x73/0x90 [ 987.951338][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.957684][T22025] [ 987.960005][T22025] Uninit was stored to memory at: [ 987.965033][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 987.970760][T22025] __msan_chain_origin+0x54/0xa0 [ 987.975701][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 987.980834][T22025] get_compat_msghdr+0x108/0x2b0 [ 987.985777][T22025] do_recvmmsg+0xdc1/0x22d0 [ 987.990285][T22025] __sys_recvmmsg+0x519/0x6f0 [ 987.994984][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.001062][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.007227][T22025] __do_fast_syscall_32+0x127/0x180 [ 988.012476][T22025] do_fast_syscall_32+0x77/0xd0 [ 988.017346][T22025] do_SYSENTER_32+0x73/0x90 [ 988.021861][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.028212][T22025] [ 988.030525][T22025] Uninit was stored to memory at: [ 988.035544][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 988.041297][T22025] __msan_chain_origin+0x54/0xa0 [ 988.046239][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 988.051354][T22025] get_compat_msghdr+0x108/0x2b0 [ 988.056309][T22025] do_recvmmsg+0xdc1/0x22d0 [ 988.060828][T22025] __sys_recvmmsg+0x519/0x6f0 [ 988.065524][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.071628][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.077790][T22025] __do_fast_syscall_32+0x127/0x180 [ 988.082996][T22025] do_fast_syscall_32+0x77/0xd0 [ 988.087867][T22025] do_SYSENTER_32+0x73/0x90 [ 988.092392][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.098731][T22025] [ 988.101048][T22025] Uninit was stored to memory at: [ 988.106075][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 988.111820][T22025] __msan_chain_origin+0x54/0xa0 [ 988.116765][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 988.121901][T22025] get_compat_msghdr+0x108/0x2b0 [ 988.126848][T22025] do_recvmmsg+0xdc1/0x22d0 [ 988.131352][T22025] __sys_recvmmsg+0x519/0x6f0 [ 988.136051][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.142128][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.148321][T22025] __do_fast_syscall_32+0x127/0x180 [ 988.153529][T22025] do_fast_syscall_32+0x77/0xd0 [ 988.158384][T22025] do_SYSENTER_32+0x73/0x90 [ 988.162893][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.169229][T22025] [ 988.171545][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 988.178207][T22025] do_recvmmsg+0xbf/0x22d0 [ 988.182628][T22025] do_recvmmsg+0xbf/0x22d0 14:46:47 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) close(r0) 14:46:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x0, 0x4}, 0x40) 14:46:47 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:46:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0x0) 14:46:47 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x20c49a, 0x0, 0x0) 14:46:47 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001bc0)) [ 990.016360][T22025] not chained 40000 origins [ 990.021014][T22025] CPU: 1 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 990.029794][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.039861][T22025] Call Trace: [ 990.043145][T22025] dump_stack+0x24c/0x2e0 [ 990.047502][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 990.053240][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 990.058491][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 990.063622][T22025] ? release_sock+0x26a/0x2d0 [ 990.068329][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 990.073202][T22025] ? kmsan_get_metadata+0x116/0x180 [ 990.078413][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 990.084247][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 990.090328][T22025] ? kmsan_get_metadata+0x116/0x180 [ 990.095555][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 990.101204][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 990.107286][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 990.112583][T22025] ? _copy_from_user+0x1fd/0x300 [ 990.117542][T22025] __msan_chain_origin+0x54/0xa0 [ 990.122488][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.127606][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.132560][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.137138][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 990.142675][T22025] ? kmsan_get_metadata+0x116/0x180 [ 990.147860][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 990.153911][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 990.159526][T22025] ? __msan_poison_alloca+0xec/0x110 [ 990.164805][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 990.169550][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.174214][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.180317][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.186454][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.191643][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.196477][T22025] do_SYSENTER_32+0x73/0x90 [ 990.200962][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.207301][T22025] RIP: 0023:0xf7f66549 [ 990.211348][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 990.230975][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 990.239388][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 990.247343][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 990.255297][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.263251][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 990.271220][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.279190][T22025] Uninit was stored to memory at: [ 990.284199][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.289902][T22025] __msan_chain_origin+0x54/0xa0 [ 990.294834][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.299928][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.304860][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.309344][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.314004][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.320068][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.326230][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.331410][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.336243][T22025] do_SYSENTER_32+0x73/0x90 [ 990.340732][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.347085][T22025] [ 990.349389][T22025] Uninit was stored to memory at: [ 990.354382][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.360088][T22025] __msan_chain_origin+0x54/0xa0 [ 990.365037][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.370173][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.375096][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.379590][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.384258][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.390306][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.396440][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.401654][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.406485][T22025] do_SYSENTER_32+0x73/0x90 [ 990.410968][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.417310][T22025] [ 990.419610][T22025] Uninit was stored to memory at: [ 990.424613][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.430314][T22025] __msan_chain_origin+0x54/0xa0 [ 990.435262][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.440371][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.445310][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.449797][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.454457][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.460523][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.466661][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.471875][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.476709][T22025] do_SYSENTER_32+0x73/0x90 [ 990.481197][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.487525][T22025] [ 990.489826][T22025] Uninit was stored to memory at: [ 990.494819][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.500519][T22025] __msan_chain_origin+0x54/0xa0 [ 990.505469][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.510594][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.515513][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.520026][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.524697][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.530774][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.536910][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.542106][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.546959][T22025] do_SYSENTER_32+0x73/0x90 [ 990.551466][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.557776][T22025] [ 990.560075][T22025] Uninit was stored to memory at: [ 990.565077][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.570777][T22025] __msan_chain_origin+0x54/0xa0 [ 990.575719][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.580829][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.585750][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.590234][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.594890][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.600937][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.607100][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.612296][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.617144][T22025] do_SYSENTER_32+0x73/0x90 [ 990.621630][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.627988][T22025] [ 990.630288][T22025] Uninit was stored to memory at: [ 990.635296][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.641033][T22025] __msan_chain_origin+0x54/0xa0 [ 990.645956][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.651076][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.655995][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.660495][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.665157][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.671217][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.677353][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.682544][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.687377][T22025] do_SYSENTER_32+0x73/0x90 [ 990.691860][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.698169][T22025] [ 990.700469][T22025] Uninit was stored to memory at: [ 990.705457][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 990.711169][T22025] __msan_chain_origin+0x54/0xa0 [ 990.716099][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 990.721201][T22025] get_compat_msghdr+0x108/0x2b0 [ 990.726140][T22025] do_recvmmsg+0xdc1/0x22d0 [ 990.730628][T22025] __sys_recvmmsg+0x519/0x6f0 [ 990.735303][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.741370][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.747517][T22025] __do_fast_syscall_32+0x127/0x180 [ 990.752723][T22025] do_fast_syscall_32+0x77/0xd0 [ 990.757559][T22025] do_SYSENTER_32+0x73/0x90 [ 990.762070][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.768379][T22025] [ 990.770708][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 990.777351][T22025] do_recvmmsg+0xbf/0x22d0 [ 990.781749][T22025] do_recvmmsg+0xbf/0x22d0 [ 991.244365][T22025] not chained 50000 origins [ 991.248873][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 991.257644][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.267682][T22025] Call Trace: [ 991.270945][T22025] dump_stack+0x24c/0x2e0 [ 991.275262][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 991.280964][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 991.286151][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 991.291281][T22025] ? release_sock+0x26a/0x2d0 [ 991.295945][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 991.300795][T22025] ? kmsan_get_metadata+0x116/0x180 [ 991.306022][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 991.311813][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 991.317862][T22025] ? kmsan_get_metadata+0x116/0x180 [ 991.323041][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 991.328669][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 991.334718][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 991.339980][T22025] ? _copy_from_user+0x1fd/0x300 [ 991.344916][T22025] __msan_chain_origin+0x54/0xa0 [ 991.349849][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.354977][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.359924][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.364432][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 991.369992][T22025] ? kmsan_get_metadata+0x116/0x180 [ 991.375175][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 991.381240][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 991.386853][T22025] ? __msan_poison_alloca+0xec/0x110 [ 991.392118][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 991.396879][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.401551][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.407623][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.413773][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.418956][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.423793][T22025] do_SYSENTER_32+0x73/0x90 [ 991.428286][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.434603][T22025] RIP: 0023:0xf7f66549 [ 991.438669][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 991.458276][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 991.466676][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 991.474657][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 991.482613][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 991.490597][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 991.498557][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 991.506514][T22025] Uninit was stored to memory at: [ 991.511508][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.517210][T22025] __msan_chain_origin+0x54/0xa0 [ 991.522129][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.527226][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.532155][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.536664][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.541323][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.547373][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.553524][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.558749][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.563583][T22025] do_SYSENTER_32+0x73/0x90 [ 991.568097][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.574464][T22025] [ 991.576766][T22025] Uninit was stored to memory at: [ 991.581759][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.587470][T22025] __msan_chain_origin+0x54/0xa0 [ 991.592390][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.597499][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.602445][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.606939][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.611597][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.617661][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.623827][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.629005][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.633838][T22025] do_SYSENTER_32+0x73/0x90 [ 991.638320][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.644648][T22025] [ 991.646947][T22025] Uninit was stored to memory at: [ 991.651939][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.657638][T22025] __msan_chain_origin+0x54/0xa0 [ 991.662555][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.667656][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.672580][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.677096][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.681755][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.687806][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.693944][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.699122][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.703965][T22025] do_SYSENTER_32+0x73/0x90 [ 991.708448][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.714770][T22025] [ 991.717070][T22025] Uninit was stored to memory at: [ 991.722062][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.727763][T22025] __msan_chain_origin+0x54/0xa0 [ 991.732683][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.737775][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.742692][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.747197][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.751855][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.757917][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.764091][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.769307][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.774176][T22025] do_SYSENTER_32+0x73/0x90 [ 991.778694][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.785009][T22025] [ 991.787310][T22025] Uninit was stored to memory at: [ 991.792320][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.798027][T22025] __msan_chain_origin+0x54/0xa0 [ 991.802942][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.808047][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.812964][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.817467][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.822133][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.828211][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.834364][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.839544][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.844391][T22025] do_SYSENTER_32+0x73/0x90 [ 991.848912][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.855232][T22025] [ 991.857552][T22025] Uninit was stored to memory at: [ 991.862561][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.868264][T22025] __msan_chain_origin+0x54/0xa0 [ 991.873181][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.878291][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.883246][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.887751][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.892410][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.898565][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.904736][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.909922][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.914773][T22025] do_SYSENTER_32+0x73/0x90 [ 991.919262][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.925612][T22025] [ 991.927925][T22025] Uninit was stored to memory at: [ 991.932917][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 991.938629][T22025] __msan_chain_origin+0x54/0xa0 [ 991.943547][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 991.948638][T22025] get_compat_msghdr+0x108/0x2b0 [ 991.953567][T22025] do_recvmmsg+0xdc1/0x22d0 [ 991.958052][T22025] __sys_recvmmsg+0x519/0x6f0 [ 991.962743][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.968791][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.974961][T22025] __do_fast_syscall_32+0x127/0x180 [ 991.980185][T22025] do_fast_syscall_32+0x77/0xd0 [ 991.985030][T22025] do_SYSENTER_32+0x73/0x90 [ 991.989522][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.995834][T22025] [ 991.998137][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 992.004797][T22025] do_recvmmsg+0xbf/0x22d0 [ 992.009210][T22025] do_recvmmsg+0xbf/0x22d0 [ 992.302973][T22025] not chained 60000 origins [ 992.307604][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 992.316370][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.326421][T22025] Call Trace: [ 992.329684][T22025] dump_stack+0x24c/0x2e0 [ 992.334003][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 992.339721][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 992.344907][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 992.350041][T22025] ? release_sock+0x26a/0x2d0 [ 992.354714][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 992.359553][T22025] ? kmsan_get_metadata+0x116/0x180 [ 992.364782][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 992.370614][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 992.376665][T22025] ? kmsan_get_metadata+0x116/0x180 [ 992.381847][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 992.387467][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 992.393542][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 992.398832][T22025] ? _copy_from_user+0x1fd/0x300 [ 992.403793][T22025] __msan_chain_origin+0x54/0xa0 [ 992.408729][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.413840][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.418773][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.423291][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 992.428823][T22025] ? kmsan_get_metadata+0x116/0x180 [ 992.434027][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 992.440075][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 992.445701][T22025] ? __msan_poison_alloca+0xec/0x110 [ 992.450981][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 992.455731][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.460394][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.466452][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.472605][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.477821][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.482685][T22025] do_SYSENTER_32+0x73/0x90 [ 992.487174][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.493484][T22025] RIP: 0023:0xf7f66549 [ 992.497542][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 992.517196][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 992.525603][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 992.533567][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 992.541521][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 992.549498][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 992.557482][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 992.565459][T22025] Uninit was stored to memory at: [ 992.570456][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.576173][T22025] __msan_chain_origin+0x54/0xa0 [ 992.581096][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.586226][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.591154][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.595720][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.600385][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.606437][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.612609][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.617796][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.622656][T22025] do_SYSENTER_32+0x73/0x90 [ 992.627211][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.633524][T22025] [ 992.635824][T22025] Uninit was stored to memory at: [ 992.640817][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.646547][T22025] __msan_chain_origin+0x54/0xa0 [ 992.651480][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.656588][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.661512][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.665996][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.670653][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.676727][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.682879][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.688067][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.692930][T22025] do_SYSENTER_32+0x73/0x90 [ 992.697454][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.703806][T22025] [ 992.706110][T22025] Uninit was stored to memory at: [ 992.711105][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.716804][T22025] __msan_chain_origin+0x54/0xa0 [ 992.721722][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.726817][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.731790][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.736279][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.740938][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.746990][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.753133][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.758336][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.763171][T22025] do_SYSENTER_32+0x73/0x90 [ 992.767661][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.774032][T22025] [ 992.776331][T22025] Uninit was stored to memory at: [ 992.781331][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.787034][T22025] __msan_chain_origin+0x54/0xa0 [ 992.791961][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.797066][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.802018][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.806535][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.811271][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.817445][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.823595][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.828781][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.833634][T22025] do_SYSENTER_32+0x73/0x90 [ 992.838126][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.844478][T22025] [ 992.846782][T22025] Uninit was stored to memory at: [ 992.851792][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.857508][T22025] __msan_chain_origin+0x54/0xa0 [ 992.862453][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.867552][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.872517][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.877003][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.881712][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.887772][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.893938][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.899123][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.904017][T22025] do_SYSENTER_32+0x73/0x90 [ 992.908522][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.914867][T22025] [ 992.917198][T22025] Uninit was stored to memory at: [ 992.922194][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.927899][T22025] __msan_chain_origin+0x54/0xa0 [ 992.932822][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 992.937943][T22025] get_compat_msghdr+0x108/0x2b0 [ 992.942877][T22025] do_recvmmsg+0xdc1/0x22d0 [ 992.947361][T22025] __sys_recvmmsg+0x519/0x6f0 [ 992.952073][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.958130][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.964304][T22025] __do_fast_syscall_32+0x127/0x180 [ 992.969525][T22025] do_fast_syscall_32+0x77/0xd0 [ 992.974372][T22025] do_SYSENTER_32+0x73/0x90 [ 992.978858][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.985218][T22025] [ 992.987529][T22025] Uninit was stored to memory at: [ 992.992541][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 992.998247][T22025] __msan_chain_origin+0x54/0xa0 [ 993.003175][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.008322][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.013278][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.017776][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.022468][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.028550][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.034728][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.039909][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.044774][T22025] do_SYSENTER_32+0x73/0x90 [ 993.049265][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.055625][T22025] [ 993.057950][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 993.064626][T22025] do_recvmmsg+0xbf/0x22d0 [ 993.069082][T22025] do_recvmmsg+0xbf/0x22d0 [ 993.361614][T22025] not chained 70000 origins [ 993.366122][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 993.374859][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.384894][T22025] Call Trace: [ 993.388177][T22025] dump_stack+0x24c/0x2e0 [ 993.392546][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 993.398249][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 993.403433][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 993.408542][T22025] ? release_sock+0x26a/0x2d0 [ 993.413230][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 993.418126][T22025] ? kmsan_get_metadata+0x116/0x180 [ 993.423348][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 993.429137][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 993.435186][T22025] ? kmsan_get_metadata+0x116/0x180 [ 993.440366][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 993.446018][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 993.452064][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 993.457333][T22025] ? _copy_from_user+0x1fd/0x300 [ 993.462259][T22025] __msan_chain_origin+0x54/0xa0 [ 993.467208][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.472310][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.477255][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.481761][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 993.487314][T22025] ? kmsan_get_metadata+0x116/0x180 [ 993.492516][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 993.498573][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 993.504250][T22025] ? __msan_poison_alloca+0xec/0x110 [ 993.509552][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 993.514418][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.519113][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.525173][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.531311][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.536495][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.541342][T22025] do_SYSENTER_32+0x73/0x90 [ 993.545830][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.552142][T22025] RIP: 0023:0xf7f66549 [ 993.556222][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 993.575810][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 993.584228][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 993.592181][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 993.600132][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 993.608085][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 993.616063][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 993.624048][T22025] Uninit was stored to memory at: [ 993.629047][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.634763][T22025] __msan_chain_origin+0x54/0xa0 [ 993.639679][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.644788][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.649711][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.654199][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.658856][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.664918][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.671054][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.676253][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.681109][T22025] do_SYSENTER_32+0x73/0x90 [ 993.685656][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.691987][T22025] [ 993.694286][T22025] Uninit was stored to memory at: [ 993.699277][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.704978][T22025] __msan_chain_origin+0x54/0xa0 [ 993.709892][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.714981][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.719900][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.724417][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.729079][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.735166][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.741320][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.746503][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.751348][T22025] do_SYSENTER_32+0x73/0x90 [ 993.755837][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.762177][T22025] [ 993.764493][T22025] Uninit was stored to memory at: [ 993.769490][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.775192][T22025] __msan_chain_origin+0x54/0xa0 [ 993.780124][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.785236][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.790161][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.794685][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.799353][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.805429][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.811567][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.816750][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.821591][T22025] do_SYSENTER_32+0x73/0x90 [ 993.826149][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.832464][T22025] [ 993.834766][T22025] Uninit was stored to memory at: [ 993.839761][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.845481][T22025] __msan_chain_origin+0x54/0xa0 [ 993.850426][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.855561][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.860523][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.865010][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.869674][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.875725][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.881865][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.887064][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.891899][T22025] do_SYSENTER_32+0x73/0x90 [ 993.896381][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.902704][T22025] [ 993.905028][T22025] Uninit was stored to memory at: [ 993.910022][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.915738][T22025] __msan_chain_origin+0x54/0xa0 [ 993.920673][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.925769][T22025] get_compat_msghdr+0x108/0x2b0 [ 993.930690][T22025] do_recvmmsg+0xdc1/0x22d0 [ 993.935269][T22025] __sys_recvmmsg+0x519/0x6f0 [ 993.939937][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.946021][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.952212][T22025] __do_fast_syscall_32+0x127/0x180 [ 993.957394][T22025] do_fast_syscall_32+0x77/0xd0 [ 993.962242][T22025] do_SYSENTER_32+0x73/0x90 [ 993.966766][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.973147][T22025] [ 993.975473][T22025] Uninit was stored to memory at: [ 993.980488][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 993.986218][T22025] __msan_chain_origin+0x54/0xa0 [ 993.991159][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 993.996283][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.001239][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.005758][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.010455][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.016528][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.022688][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.027897][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.032754][T22025] do_SYSENTER_32+0x73/0x90 [ 994.037266][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.043604][T22025] [ 994.045932][T22025] Uninit was stored to memory at: [ 994.050940][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.056668][T22025] __msan_chain_origin+0x54/0xa0 [ 994.061608][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.066723][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.071662][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.076173][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.080886][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.086958][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.093127][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.098372][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.103230][T22025] do_SYSENTER_32+0x73/0x90 [ 994.107768][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.114118][T22025] [ 994.116432][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 994.123102][T22025] do_recvmmsg+0xbf/0x22d0 [ 994.127528][T22025] do_recvmmsg+0xbf/0x22d0 [ 994.419853][T22025] not chained 80000 origins [ 994.424355][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 994.433096][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.443198][T22025] Call Trace: [ 994.446460][T22025] dump_stack+0x24c/0x2e0 [ 994.450797][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 994.456504][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 994.461690][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 994.466781][T22025] ? release_sock+0x26a/0x2d0 [ 994.471451][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 994.476322][T22025] ? kmsan_get_metadata+0x116/0x180 [ 994.481511][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 994.487332][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 994.493386][T22025] ? kmsan_get_metadata+0x116/0x180 [ 994.498583][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 994.504213][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 994.510264][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 994.515559][T22025] ? _copy_from_user+0x1fd/0x300 [ 994.520497][T22025] __msan_chain_origin+0x54/0xa0 [ 994.525415][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.530511][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.535486][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.539981][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 994.545542][T22025] ? kmsan_get_metadata+0x116/0x180 [ 994.550726][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 994.556775][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 994.562390][T22025] ? __msan_poison_alloca+0xec/0x110 [ 994.567673][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 994.572447][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.577126][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.583211][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.589360][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.594579][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.599471][T22025] do_SYSENTER_32+0x73/0x90 [ 994.603994][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.610339][T22025] RIP: 0023:0xf7f66549 [ 994.614425][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 994.634037][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 994.642467][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 994.650441][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 994.658431][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.666385][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 994.674335][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.682318][T22025] Uninit was stored to memory at: [ 994.687315][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.693021][T22025] __msan_chain_origin+0x54/0xa0 [ 994.698013][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.703140][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.708095][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.712611][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.717282][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.723335][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.729475][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.734684][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.739518][T22025] do_SYSENTER_32+0x73/0x90 [ 994.744023][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.750391][T22025] [ 994.752713][T22025] Uninit was stored to memory at: [ 994.757710][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.763412][T22025] __msan_chain_origin+0x54/0xa0 [ 994.768350][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.773471][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.778411][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.782923][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.787586][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.793683][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.799931][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.805205][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.810074][T22025] do_SYSENTER_32+0x73/0x90 [ 994.814606][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.820943][T22025] [ 994.823268][T22025] Uninit was stored to memory at: [ 994.828269][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.834003][T22025] __msan_chain_origin+0x54/0xa0 [ 994.838929][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.844042][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.848989][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.853530][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.858187][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.864235][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.870376][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.875586][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.880433][T22025] do_SYSENTER_32+0x73/0x90 [ 994.884918][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.891227][T22025] [ 994.893531][T22025] Uninit was stored to memory at: [ 994.898523][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.904237][T22025] __msan_chain_origin+0x54/0xa0 [ 994.909174][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.914296][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.919245][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.923764][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.928542][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.934679][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.940821][T22025] __do_fast_syscall_32+0x127/0x180 [ 994.946014][T22025] do_fast_syscall_32+0x77/0xd0 [ 994.950853][T22025] do_SYSENTER_32+0x73/0x90 [ 994.955380][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.961694][T22025] [ 994.964010][T22025] Uninit was stored to memory at: [ 994.969007][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 994.974731][T22025] __msan_chain_origin+0x54/0xa0 [ 994.979694][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 994.984803][T22025] get_compat_msghdr+0x108/0x2b0 [ 994.989739][T22025] do_recvmmsg+0xdc1/0x22d0 [ 994.994250][T22025] __sys_recvmmsg+0x519/0x6f0 [ 994.998909][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.004985][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.011118][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.016323][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.021164][T22025] do_SYSENTER_32+0x73/0x90 [ 995.025692][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.032006][T22025] [ 995.034324][T22025] Uninit was stored to memory at: [ 995.039334][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.045036][T22025] __msan_chain_origin+0x54/0xa0 [ 995.049972][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.055095][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.060017][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.064500][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.069183][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.075259][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.081393][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.086604][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.091448][T22025] do_SYSENTER_32+0x73/0x90 [ 995.095950][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.102257][T22025] [ 995.104555][T22025] Uninit was stored to memory at: [ 995.109549][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.115288][T22025] __msan_chain_origin+0x54/0xa0 [ 995.120209][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.125302][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.130222][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.134735][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.139400][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.145490][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.151633][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.156858][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.161710][T22025] do_SYSENTER_32+0x73/0x90 [ 995.166199][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.172507][T22025] [ 995.174809][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 995.181450][T22025] do_recvmmsg+0xbf/0x22d0 [ 995.185850][T22025] do_recvmmsg+0xbf/0x22d0 [ 995.473125][T22025] not chained 90000 origins [ 995.477693][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 995.486461][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.496500][T22025] Call Trace: [ 995.499781][T22025] dump_stack+0x24c/0x2e0 [ 995.504114][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 995.509824][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 995.515039][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 995.520134][T22025] ? release_sock+0x26a/0x2d0 [ 995.524820][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 995.529661][T22025] ? kmsan_get_metadata+0x116/0x180 [ 995.534900][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 995.540701][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 995.546766][T22025] ? kmsan_get_metadata+0x116/0x180 [ 995.551945][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 995.557565][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 995.563621][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 995.568942][T22025] ? _copy_from_user+0x1fd/0x300 [ 995.573895][T22025] __msan_chain_origin+0x54/0xa0 [ 995.579257][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.584398][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.589331][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.593852][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 995.599407][T22025] ? kmsan_get_metadata+0x116/0x180 [ 995.604593][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 995.610639][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 995.616265][T22025] ? __msan_poison_alloca+0xec/0x110 [ 995.621545][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 995.626296][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.630958][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.637012][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.643170][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.648363][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.653227][T22025] do_SYSENTER_32+0x73/0x90 [ 995.657717][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.664037][T22025] RIP: 0023:0xf7f66549 [ 995.668113][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 995.687755][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 995.696203][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 995.704161][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 995.712118][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.720088][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 995.728043][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.736019][T22025] Uninit was stored to memory at: [ 995.741013][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.746715][T22025] __msan_chain_origin+0x54/0xa0 [ 995.751629][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.756724][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.761642][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.766135][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.770846][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.776927][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.783096][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.788286][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.793162][T22025] do_SYSENTER_32+0x73/0x90 [ 995.797653][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.804013][T22025] [ 995.806318][T22025] Uninit was stored to memory at: [ 995.811317][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.817049][T22025] __msan_chain_origin+0x54/0xa0 [ 995.821969][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.827062][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.831983][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.836491][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.841179][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.847230][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.853366][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.858548][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.863382][T22025] do_SYSENTER_32+0x73/0x90 [ 995.867872][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.874218][T22025] [ 995.876537][T22025] Uninit was stored to memory at: [ 995.881533][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.887242][T22025] __msan_chain_origin+0x54/0xa0 [ 995.892177][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.897275][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.902199][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.906685][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.911376][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.917464][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.923647][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.928834][T22025] do_fast_syscall_32+0x77/0xd0 [ 995.933704][T22025] do_SYSENTER_32+0x73/0x90 [ 995.938194][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.944511][T22025] [ 995.946823][T22025] Uninit was stored to memory at: [ 995.951820][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 995.957532][T22025] __msan_chain_origin+0x54/0xa0 [ 995.962514][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 995.967615][T22025] get_compat_msghdr+0x108/0x2b0 [ 995.972565][T22025] do_recvmmsg+0xdc1/0x22d0 [ 995.977080][T22025] __sys_recvmmsg+0x519/0x6f0 [ 995.981740][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.987798][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.993962][T22025] __do_fast_syscall_32+0x127/0x180 [ 995.999155][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.003986][T22025] do_SYSENTER_32+0x73/0x90 [ 996.008518][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.014855][T22025] [ 996.017157][T22025] Uninit was stored to memory at: [ 996.022156][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 996.027874][T22025] __msan_chain_origin+0x54/0xa0 [ 996.032859][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.037992][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.042915][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.047404][T22025] __sys_recvmmsg+0x519/0x6f0 [ 996.052106][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.058195][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.064334][T22025] __do_fast_syscall_32+0x127/0x180 [ 996.069517][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.074385][T22025] do_SYSENTER_32+0x73/0x90 [ 996.078899][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.085214][T22025] [ 996.087521][T22025] Uninit was stored to memory at: [ 996.092530][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 996.098245][T22025] __msan_chain_origin+0x54/0xa0 [ 996.103165][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.108261][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.113232][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.117721][T22025] __sys_recvmmsg+0x519/0x6f0 [ 996.122395][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.128447][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.134616][T22025] __do_fast_syscall_32+0x127/0x180 [ 996.139805][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.144692][T22025] do_SYSENTER_32+0x73/0x90 [ 996.149202][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.155553][T22025] [ 996.157870][T22025] Uninit was stored to memory at: [ 996.162877][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 996.168582][T22025] __msan_chain_origin+0x54/0xa0 [ 996.173528][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.178626][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.183550][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.188038][T22025] __sys_recvmmsg+0x519/0x6f0 [ 996.192720][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.198782][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.204949][T22025] __do_fast_syscall_32+0x127/0x180 [ 996.210145][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.215006][T22025] do_SYSENTER_32+0x73/0x90 [ 996.219497][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.225808][T22025] [ 996.228117][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 996.234795][T22025] do_recvmmsg+0xbf/0x22d0 [ 996.239198][T22025] do_recvmmsg+0xbf/0x22d0 [ 996.634168][T22025] not chained 100000 origins [ 996.638793][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 996.647530][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.657570][T22025] Call Trace: [ 996.660857][T22025] dump_stack+0x24c/0x2e0 [ 996.665171][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 996.670871][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 996.676051][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 996.681153][T22025] ? release_sock+0x26a/0x2d0 [ 996.685862][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 996.690702][T22025] ? kmsan_get_metadata+0x116/0x180 [ 996.695910][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 996.701703][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 996.707783][T22025] ? kmsan_get_metadata+0x116/0x180 [ 996.712982][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 996.718596][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 996.724669][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 996.729937][T22025] ? _copy_from_user+0x1fd/0x300 [ 996.734862][T22025] __msan_chain_origin+0x54/0xa0 [ 996.739783][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.744895][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.749827][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.754317][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 996.759848][T22025] ? kmsan_get_metadata+0x116/0x180 [ 996.765027][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 996.771075][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 996.776720][T22025] ? __msan_poison_alloca+0xec/0x110 [ 996.781987][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 996.786735][T22025] __sys_recvmmsg+0x519/0x6f0 [ 996.791406][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.797511][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.803687][T22025] __do_fast_syscall_32+0x127/0x180 [ 996.808914][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.813781][T22025] do_SYSENTER_32+0x73/0x90 [ 996.818271][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.824584][T22025] RIP: 0023:0xf7f66549 [ 996.828632][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 996.848225][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 996.856634][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 996.864589][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 996.872567][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.880520][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 996.888474][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.896431][T22025] Uninit was stored to memory at: [ 996.901434][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 996.901470][T22025] __msan_chain_origin+0x54/0xa0 [ 996.901497][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.901523][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.901551][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.901580][T22025] __sys_recvmmsg+0x519/0x6f0 [ 996.901607][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.901639][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.901671][T22025] __do_fast_syscall_32+0x127/0x180 [ 996.901702][T22025] do_fast_syscall_32+0x77/0xd0 [ 996.901734][T22025] do_SYSENTER_32+0x73/0x90 [ 996.958076][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.964389][T22025] [ 996.966691][T22025] Uninit was stored to memory at: [ 996.971699][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 996.977421][T22025] __msan_chain_origin+0x54/0xa0 [ 996.982383][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 996.987483][T22025] get_compat_msghdr+0x108/0x2b0 [ 996.992423][T22025] do_recvmmsg+0xdc1/0x22d0 [ 996.996928][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.001614][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.007672][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.013840][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.019046][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.023881][T22025] do_SYSENTER_32+0x73/0x90 [ 997.028370][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.034724][T22025] [ 997.037023][T22025] Uninit was stored to memory at: [ 997.042018][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.047720][T22025] __msan_chain_origin+0x54/0xa0 [ 997.052656][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.057769][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.062700][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.067184][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.071873][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.077926][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.084064][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.089273][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.094105][T22025] do_SYSENTER_32+0x73/0x90 [ 997.098624][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.105174][T22025] [ 997.107484][T22025] Uninit was stored to memory at: [ 997.112516][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.118227][T22025] __msan_chain_origin+0x54/0xa0 [ 997.123173][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.128282][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.133203][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.137694][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.142386][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.148480][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.154628][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.159807][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.164644][T22025] do_SYSENTER_32+0x73/0x90 [ 997.169137][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.175447][T22025] [ 997.177748][T22025] Uninit was stored to memory at: [ 997.182741][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.188457][T22025] __msan_chain_origin+0x54/0xa0 [ 997.193377][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.198484][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.203404][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.207929][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.212586][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.218631][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.224776][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.229957][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.234817][T22025] do_SYSENTER_32+0x73/0x90 [ 997.239308][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.245651][T22025] [ 997.247957][T22025] Uninit was stored to memory at: [ 997.253003][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.258732][T22025] __msan_chain_origin+0x54/0xa0 [ 997.263648][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.268738][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.273658][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.278146][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.282809][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.288874][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.295022][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.300209][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.305097][T22025] do_SYSENTER_32+0x73/0x90 [ 997.309597][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.315910][T22025] [ 997.318217][T22025] Uninit was stored to memory at: [ 997.323231][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.328960][T22025] __msan_chain_origin+0x54/0xa0 [ 997.333913][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.339014][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.343988][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.348522][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.353193][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.359279][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.365478][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.370715][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.375549][T22025] do_SYSENTER_32+0x73/0x90 [ 997.380068][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.386380][T22025] [ 997.388680][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 997.395339][T22025] do_recvmmsg+0xbf/0x22d0 [ 997.399742][T22025] do_recvmmsg+0xbf/0x22d0 [ 997.678333][T22025] not chained 110000 origins [ 997.683001][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 997.691754][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.701810][T22025] Call Trace: [ 997.705074][T22025] dump_stack+0x24c/0x2e0 [ 997.709396][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 997.715104][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 997.720313][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 997.725429][T22025] ? release_sock+0x26a/0x2d0 [ 997.730095][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 997.734933][T22025] ? kmsan_get_metadata+0x116/0x180 [ 997.740130][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 997.745955][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 997.752007][T22025] ? kmsan_get_metadata+0x116/0x180 [ 997.757206][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 997.762820][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 997.768871][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 997.774141][T22025] ? _copy_from_user+0x1fd/0x300 [ 997.779073][T22025] __msan_chain_origin+0x54/0xa0 [ 997.784027][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.789173][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.794099][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.798631][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 997.804201][T22025] ? kmsan_get_metadata+0x116/0x180 [ 997.809422][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 997.815578][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 997.821229][T22025] ? __msan_poison_alloca+0xec/0x110 [ 997.826528][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 997.831308][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.836022][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.842111][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.848270][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.853491][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.858335][T22025] do_SYSENTER_32+0x73/0x90 [ 997.862852][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.869188][T22025] RIP: 0023:0xf7f66549 [ 997.873285][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 997.892892][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 997.901335][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 997.909292][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 997.917270][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 997.925247][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 997.933240][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 997.941317][T22025] Uninit was stored to memory at: [ 997.946314][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 997.952014][T22025] __msan_chain_origin+0x54/0xa0 [ 997.956932][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 997.962045][T22025] get_compat_msghdr+0x108/0x2b0 [ 997.966983][T22025] do_recvmmsg+0xdc1/0x22d0 [ 997.971497][T22025] __sys_recvmmsg+0x519/0x6f0 [ 997.976157][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.982221][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.988361][T22025] __do_fast_syscall_32+0x127/0x180 [ 997.993564][T22025] do_fast_syscall_32+0x77/0xd0 [ 997.998422][T22025] do_SYSENTER_32+0x73/0x90 [ 998.002961][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.009299][T22025] [ 998.011600][T22025] Uninit was stored to memory at: [ 998.016589][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.022294][T22025] __msan_chain_origin+0x54/0xa0 [ 998.027246][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.032367][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.037331][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.041955][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.046633][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.052689][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.058826][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.064008][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.068844][T22025] do_SYSENTER_32+0x73/0x90 [ 998.073370][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.079696][T22025] [ 998.082034][T22025] Uninit was stored to memory at: [ 998.087028][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.092773][T22025] __msan_chain_origin+0x54/0xa0 [ 998.097701][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.102835][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.107759][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.112275][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.116980][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.123038][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.129212][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.134431][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.139297][T22025] do_SYSENTER_32+0x73/0x90 [ 998.143786][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.150142][T22025] [ 998.152454][T22025] Uninit was stored to memory at: [ 998.157473][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.163223][T22025] __msan_chain_origin+0x54/0xa0 [ 998.168175][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.173288][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.178210][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.182726][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.187391][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.193472][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.199650][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.204832][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.209670][T22025] do_SYSENTER_32+0x73/0x90 [ 998.214179][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.220493][T22025] [ 998.222814][T22025] Uninit was stored to memory at: [ 998.227814][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.233550][T22025] __msan_chain_origin+0x54/0xa0 [ 998.238499][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.243615][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.248561][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.253072][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.257747][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.263832][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.269968][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.275161][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.280000][T22025] do_SYSENTER_32+0x73/0x90 [ 998.284485][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.290793][T22025] [ 998.293145][T22025] Uninit was stored to memory at: [ 998.298141][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.303838][T22025] __msan_chain_origin+0x54/0xa0 [ 998.308759][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.313874][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.318823][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.323320][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.327977][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.334060][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.340257][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.345470][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.350312][T22025] do_SYSENTER_32+0x73/0x90 [ 998.354828][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.361172][T22025] [ 998.363489][T22025] Uninit was stored to memory at: [ 998.368508][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.374234][T22025] __msan_chain_origin+0x54/0xa0 [ 998.379189][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.384298][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.389223][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.393734][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.398393][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.404454][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.410615][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.415813][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.420660][T22025] do_SYSENTER_32+0x73/0x90 [ 998.425144][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.431482][T22025] [ 998.433799][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 998.440449][T22025] do_recvmmsg+0xbf/0x22d0 [ 998.444875][T22025] do_recvmmsg+0xbf/0x22d0 [ 998.720448][T22025] not chained 120000 origins [ 998.725030][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 998.733780][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.743827][T22025] Call Trace: [ 998.747101][T22025] dump_stack+0x24c/0x2e0 [ 998.751425][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 998.757146][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 998.762338][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 998.767438][T22025] ? release_sock+0x26a/0x2d0 [ 998.772136][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 998.776989][T22025] ? kmsan_get_metadata+0x116/0x180 [ 998.782187][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 998.787983][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 998.794032][T22025] ? kmsan_get_metadata+0x116/0x180 [ 998.799217][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 998.804897][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 998.810993][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 998.816277][T22025] ? _copy_from_user+0x1fd/0x300 [ 998.821200][T22025] __msan_chain_origin+0x54/0xa0 [ 998.826146][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 998.831256][T22025] get_compat_msghdr+0x108/0x2b0 [ 998.836181][T22025] do_recvmmsg+0xdc1/0x22d0 [ 998.840678][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 998.846244][T22025] ? kmsan_get_metadata+0x116/0x180 [ 998.851433][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 998.857494][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 998.863157][T22025] ? __msan_poison_alloca+0xec/0x110 [ 998.868482][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 998.873234][T22025] __sys_recvmmsg+0x519/0x6f0 [ 998.877904][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.883987][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.890142][T22025] __do_fast_syscall_32+0x127/0x180 [ 998.895345][T22025] do_fast_syscall_32+0x77/0xd0 [ 998.900230][T22025] do_SYSENTER_32+0x73/0x90 [ 998.904745][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.911059][T22025] RIP: 0023:0xf7f66549 [ 998.915135][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 998.934771][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 998.943193][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 998.951176][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 998.959152][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 998.967126][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 998.975111][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 998.983075][T22025] Uninit was stored to memory at: [ 998.988088][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 998.993842][T22025] __msan_chain_origin+0x54/0xa0 [ 998.998806][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.003925][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.008845][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.013331][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.017992][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.024078][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.030263][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.035447][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.040285][T22025] do_SYSENTER_32+0x73/0x90 [ 999.044778][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.051137][T22025] [ 999.053442][T22025] Uninit was stored to memory at: [ 999.058437][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.064161][T22025] __msan_chain_origin+0x54/0xa0 [ 999.069093][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.074240][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.079178][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.083692][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.088351][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.094404][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.100542][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.105766][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.110596][T22025] do_SYSENTER_32+0x73/0x90 [ 999.115093][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.121425][T22025] [ 999.123730][T22025] Uninit was stored to memory at: [ 999.128757][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.134485][T22025] __msan_chain_origin+0x54/0xa0 [ 999.139418][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.144538][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.149482][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.153972][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.158636][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.164726][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.170880][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.176073][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.180936][T22025] do_SYSENTER_32+0x73/0x90 [ 999.185423][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.191731][T22025] [ 999.194030][T22025] Uninit was stored to memory at: [ 999.199024][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.204758][T22025] __msan_chain_origin+0x54/0xa0 [ 999.209683][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.214805][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.219744][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.224255][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.228913][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.234972][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.241146][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.246420][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.251308][T22025] do_SYSENTER_32+0x73/0x90 [ 999.255823][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.262135][T22025] [ 999.264436][T22025] Uninit was stored to memory at: [ 999.269433][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.275160][T22025] __msan_chain_origin+0x54/0xa0 [ 999.280080][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.285176][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.290095][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.294605][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.299266][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.305317][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.311468][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.316663][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.321503][T22025] do_SYSENTER_32+0x73/0x90 [ 999.326030][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.332360][T22025] [ 999.334661][T22025] Uninit was stored to memory at: [ 999.339655][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.345356][T22025] __msan_chain_origin+0x54/0xa0 [ 999.350292][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.355434][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.360380][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.364885][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.369543][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.375603][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.381754][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.386948][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.391783][T22025] do_SYSENTER_32+0x73/0x90 [ 999.396268][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.402590][T22025] [ 999.404908][T22025] Uninit was stored to memory at: [ 999.409918][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 999.415618][T22025] __msan_chain_origin+0x54/0xa0 [ 999.420549][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.425647][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.430567][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.435080][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.439767][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.445851][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.451992][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.457248][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.462142][T22025] do_SYSENTER_32+0x73/0x90 [ 999.466671][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.473000][T22025] [ 999.475312][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 999.481972][T22025] do_recvmmsg+0xbf/0x22d0 [ 999.486417][T22025] do_recvmmsg+0xbf/0x22d0 [ 999.796916][T22025] not chained 130000 origins [ 999.801514][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 999.810257][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.820292][T22025] Call Trace: [ 999.823571][T22025] dump_stack+0x24c/0x2e0 [ 999.827897][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 999.833641][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 999.838843][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 999.843970][T22025] ? release_sock+0x26a/0x2d0 [ 999.848664][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 999.853502][T22025] ? kmsan_get_metadata+0x116/0x180 [ 999.858695][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 999.864513][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 999.870605][T22025] ? kmsan_get_metadata+0x116/0x180 [ 999.875831][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 999.881451][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 999.887510][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 999.892819][T22025] ? _copy_from_user+0x1fd/0x300 [ 999.897749][T22025] __msan_chain_origin+0x54/0xa0 [ 999.902704][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 999.907851][T22025] get_compat_msghdr+0x108/0x2b0 [ 999.912830][T22025] do_recvmmsg+0xdc1/0x22d0 [ 999.917360][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 999.922937][T22025] ? kmsan_get_metadata+0x116/0x180 [ 999.928148][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 999.934230][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 999.939845][T22025] ? __msan_poison_alloca+0xec/0x110 [ 999.945143][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 999.949897][T22025] __sys_recvmmsg+0x519/0x6f0 [ 999.954575][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.960642][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.966787][T22025] __do_fast_syscall_32+0x127/0x180 [ 999.972005][T22025] do_fast_syscall_32+0x77/0xd0 [ 999.976842][T22025] do_SYSENTER_32+0x73/0x90 [ 999.981349][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.987706][T22025] RIP: 0023:0xf7f66549 [ 999.991815][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1000.011413][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1000.019842][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1000.027806][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.035785][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1000.043736][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1000.051688][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1000.059661][T22025] Uninit was stored to memory at: [ 1000.064682][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.070408][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.075352][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.080449][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.085367][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.089856][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.094543][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.100609][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.106746][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.111943][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.116775][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.121264][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.127609][T22025] [ 1000.129939][T22025] Uninit was stored to memory at: [ 1000.134930][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.140638][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.145570][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.150705][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.155646][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.160131][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.164796][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.170867][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.177078][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.182263][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.187101][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.191605][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.197923][T22025] [ 1000.200252][T22025] Uninit was stored to memory at: [ 1000.205300][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.211008][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.215931][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.221024][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.225943][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.230431][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.235118][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.241172][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.247312][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.252519][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.257356][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.261884][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.268201][T22025] [ 1000.270517][T22025] Uninit was stored to memory at: [ 1000.275514][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.281234][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.286161][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.291266][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.296198][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.300686][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.305364][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.311433][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.317601][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.322808][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.327676][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.332225][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.338541][T22025] [ 1000.340861][T22025] Uninit was stored to memory at: [ 1000.345886][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.351599][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.356515][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.361608][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.366554][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.371036][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.375714][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.381791][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.387933][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.393180][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.398032][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.402542][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.408854][T22025] [ 1000.411157][T22025] Uninit was stored to memory at: [ 1000.416155][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.421863][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.426812][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.431968][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.436893][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.441392][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.446097][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.452190][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.458361][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.463576][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.468418][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.472934][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.479356][T22025] [ 1000.481692][T22025] Uninit was stored to memory at: [ 1000.486693][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1000.492413][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.497339][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.502466][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.507433][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.512021][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.516682][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.522737][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.528905][T22025] __do_fast_syscall_32+0x127/0x180 [ 1000.534126][T22025] do_fast_syscall_32+0x77/0xd0 [ 1000.539017][T22025] do_SYSENTER_32+0x73/0x90 [ 1000.543530][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.549868][T22025] [ 1000.552172][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1000.558820][T22025] do_recvmmsg+0xbf/0x22d0 [ 1000.563244][T22025] do_recvmmsg+0xbf/0x22d0 [ 1000.837822][T22025] not chained 140000 origins [ 1000.842481][T22025] CPU: 1 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1000.851247][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.861280][T22025] Call Trace: [ 1000.864540][T22025] dump_stack+0x24c/0x2e0 [ 1000.868872][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 1000.874720][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 1000.879927][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1000.885020][T22025] ? release_sock+0x26a/0x2d0 [ 1000.889682][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 1000.894525][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1000.899707][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1000.905498][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1000.911580][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1000.916760][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 1000.922388][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1000.928467][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1000.933750][T22025] ? _copy_from_user+0x1fd/0x300 [ 1000.938698][T22025] __msan_chain_origin+0x54/0xa0 [ 1000.943619][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1000.948732][T22025] get_compat_msghdr+0x108/0x2b0 [ 1000.953674][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1000.958160][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1000.963692][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1000.968873][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1000.974930][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 1000.980555][T22025] ? __msan_poison_alloca+0xec/0x110 [ 1000.985822][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 1000.990603][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1000.995314][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.001380][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.007547][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.012780][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.017614][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.022130][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.028449][T22025] RIP: 0023:0xf7f66549 [ 1001.032510][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1001.052146][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1001.060564][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1001.068519][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.076472][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1001.084437][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1001.092423][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1001.100453][T22025] Uninit was stored to memory at: [ 1001.105483][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.111197][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.116123][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.121218][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.126147][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.130648][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.135307][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.141355][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.147504][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.152695][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.157546][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.162046][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.168358][T22025] [ 1001.170671][T22025] Uninit was stored to memory at: [ 1001.175698][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.181398][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.186326][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.191427][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.196361][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.200854][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.205514][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.211582][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.217722][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.222912][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.227757][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.232238][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.238546][T22025] [ 1001.240844][T22025] Uninit was stored to memory at: [ 1001.245852][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.251551][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.256469][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.261560][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.266475][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.270973][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.275634][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.281723][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.287862][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.293045][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.297889][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.302418][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.308727][T22025] [ 1001.311025][T22025] Uninit was stored to memory at: [ 1001.316014][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.321725][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.326642][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.331732][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.336694][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.341181][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.345837][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.351886][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.358022][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.363203][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.368123][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.372614][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.378925][T22025] [ 1001.381227][T22025] Uninit was stored to memory at: [ 1001.386224][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.391938][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.396854][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.401948][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.406911][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.411398][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.416056][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.422116][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.428306][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.433488][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.438320][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.442805][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.449122][T22025] [ 1001.451422][T22025] Uninit was stored to memory at: [ 1001.456413][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.462115][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.467068][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.472167][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.477084][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.481568][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.486244][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.492303][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.498457][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.503640][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.508477][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.512975][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.519284][T22025] [ 1001.521585][T22025] Uninit was stored to memory at: [ 1001.526604][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1001.532310][T22025] __msan_chain_origin+0x54/0xa0 [ 1001.537231][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1001.542339][T22025] get_compat_msghdr+0x108/0x2b0 [ 1001.547284][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1001.551801][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1001.556473][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.562547][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.568698][T22025] __do_fast_syscall_32+0x127/0x180 [ 1001.573885][T22025] do_fast_syscall_32+0x77/0xd0 [ 1001.578751][T22025] do_SYSENTER_32+0x73/0x90 [ 1001.583266][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.589576][T22025] [ 1001.591887][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1001.598531][T22025] do_recvmmsg+0xbf/0x22d0 [ 1001.602949][T22025] do_recvmmsg+0xbf/0x22d0 [ 1001.638211][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.644690][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.923762][T22025] not chained 150000 origins [ 1001.928368][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1001.937109][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.947155][T22025] Call Trace: [ 1001.950446][T22025] dump_stack+0x24c/0x2e0 [ 1001.954763][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 1001.960469][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 1001.965707][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1001.970807][T22025] ? release_sock+0x26a/0x2d0 [ 1001.975474][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 1001.980337][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1001.985521][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1001.991322][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1001.997373][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1002.002553][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 1002.008194][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1002.014267][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1002.019565][T22025] ? _copy_from_user+0x1fd/0x300 [ 1002.024555][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.029487][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.034591][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.039516][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.044001][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1002.049530][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1002.054716][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1002.060791][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 1002.066403][T22025] ? __msan_poison_alloca+0xec/0x110 [ 1002.071666][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 1002.076423][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.081095][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.087159][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.093333][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.098518][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.103352][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.107837][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.114166][T22025] RIP: 0023:0xf7f66549 [ 1002.118234][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1002.137826][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1002.146227][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1002.154180][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.162134][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1002.170092][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1002.178043][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.185998][T22025] Uninit was stored to memory at: [ 1002.190994][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.196696][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.201616][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.206730][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.211659][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.216152][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.220827][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.226878][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.233025][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.238259][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.243101][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.247584][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.253891][T22025] [ 1002.256189][T22025] Uninit was stored to memory at: [ 1002.261199][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.266912][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.271840][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.276977][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.281894][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.286378][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.291049][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.297098][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.303251][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.308444][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.313277][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.317773][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.324085][T22025] [ 1002.326388][T22025] Uninit was stored to memory at: [ 1002.331381][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.337148][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.342096][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.347198][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.352141][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.356638][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.361308][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.367358][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.373505][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.378685][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.383517][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.388011][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.394320][T22025] [ 1002.396621][T22025] Uninit was stored to memory at: [ 1002.401645][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.407344][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.412301][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.417393][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.422317][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.426829][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.431492][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.437574][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.443712][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.448889][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.453721][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.458207][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.464519][T22025] [ 1002.466817][T22025] Uninit was stored to memory at: [ 1002.471819][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.477519][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.482440][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.487541][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.492468][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.496953][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.501614][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.507675][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.513814][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.518995][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.523835][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.528351][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.534667][T22025] [ 1002.536969][T22025] Uninit was stored to memory at: [ 1002.541960][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.547661][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.552594][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.557707][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.562630][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.567168][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.571883][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.577934][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.584070][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.589251][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.594085][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.598614][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.604936][T22025] [ 1002.607244][T22025] Uninit was stored to memory at: [ 1002.612242][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1002.617943][T22025] __msan_chain_origin+0x54/0xa0 [ 1002.622889][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1002.627988][T22025] get_compat_msghdr+0x108/0x2b0 [ 1002.632934][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1002.637422][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1002.642097][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.648205][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.654363][T22025] __do_fast_syscall_32+0x127/0x180 [ 1002.659558][T22025] do_fast_syscall_32+0x77/0xd0 [ 1002.664394][T22025] do_SYSENTER_32+0x73/0x90 [ 1002.668893][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.675244][T22025] [ 1002.677546][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1002.684199][T22025] do_recvmmsg+0xbf/0x22d0 [ 1002.688595][T22025] do_recvmmsg+0xbf/0x22d0 [ 1002.974663][T22025] not chained 160000 origins [ 1002.979261][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1002.988002][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.998067][T22025] Call Trace: [ 1003.001328][T22025] dump_stack+0x24c/0x2e0 [ 1003.005647][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 1003.011362][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 1003.016546][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1003.021641][T22025] ? release_sock+0x26a/0x2d0 [ 1003.026315][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 1003.031157][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1003.036351][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1003.042171][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1003.048279][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1003.053488][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 1003.059104][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1003.065148][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1003.070448][T22025] ? _copy_from_user+0x1fd/0x300 [ 1003.075404][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.080373][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.085481][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.090419][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.095006][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1003.100539][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1003.105734][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1003.111782][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 1003.117396][T22025] ? __msan_poison_alloca+0xec/0x110 [ 1003.122662][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 1003.127406][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.132070][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.138135][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.144315][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.149522][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.154360][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.158848][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.165158][T22025] RIP: 0023:0xf7f66549 [ 1003.169225][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1003.188826][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1003.197221][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1003.205207][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.213182][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.221136][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1003.229092][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.237061][T22025] Uninit was stored to memory at: [ 1003.242070][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.247805][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.252732][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.257825][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.262756][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.267271][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.271929][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.277992][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.284128][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.289372][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.294235][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.298719][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.305029][T22025] [ 1003.307347][T22025] Uninit was stored to memory at: [ 1003.312352][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.318055][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.322972][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.328061][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.333025][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.337520][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.342203][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.348261][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.354403][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.359586][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.364450][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.368933][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.375245][T22025] [ 1003.377548][T22025] Uninit was stored to memory at: [ 1003.382542][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.388244][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.393163][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.398286][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.403217][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.407729][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.412418][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.418514][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.424651][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.429844][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.434684][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.439197][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.445526][T22025] [ 1003.447867][T22025] Uninit was stored to memory at: [ 1003.452876][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.458595][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.463516][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.468610][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.473528][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.478015][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.482673][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.488746][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.494900][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.500081][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.504937][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.509423][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.515744][T22025] [ 1003.518044][T22025] Uninit was stored to memory at: [ 1003.523038][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.528769][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.533688][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.538782][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.543702][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.548190][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.552872][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.558961][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.565099][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.570293][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.575128][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.579631][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.585942][T22025] [ 1003.588241][T22025] Uninit was stored to memory at: [ 1003.593235][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.598935][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.603854][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.608946][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.613863][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.618347][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.623003][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.629050][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.635217][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.640399][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.645232][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.649716][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.656028][T22025] [ 1003.658331][T22025] Uninit was stored to memory at: [ 1003.663336][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1003.669061][T22025] __msan_chain_origin+0x54/0xa0 [ 1003.673980][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1003.679076][T22025] get_compat_msghdr+0x108/0x2b0 [ 1003.683994][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1003.688474][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1003.693165][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.699220][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.705361][T22025] __do_fast_syscall_32+0x127/0x180 [ 1003.710553][T22025] do_fast_syscall_32+0x77/0xd0 [ 1003.715403][T22025] do_SYSENTER_32+0x73/0x90 [ 1003.719888][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.726200][T22025] [ 1003.728500][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1003.735146][T22025] do_recvmmsg+0xbf/0x22d0 [ 1003.739558][T22025] do_recvmmsg+0xbf/0x22d0 [ 1004.044219][T22025] not chained 170000 origins [ 1004.048826][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1004.057567][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.067604][T22025] Call Trace: [ 1004.070866][T22025] dump_stack+0x24c/0x2e0 [ 1004.075182][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 1004.080885][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 1004.086069][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1004.091186][T22025] ? release_sock+0x26a/0x2d0 [ 1004.095851][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 1004.100737][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1004.105926][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1004.111742][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1004.117794][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1004.122977][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 1004.128612][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1004.134660][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1004.139928][T22025] ? _copy_from_user+0x1fd/0x300 [ 1004.144850][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.149802][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.154897][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.159817][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.164312][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1004.169888][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1004.175087][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1004.181238][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 1004.186867][T22025] ? __msan_poison_alloca+0xec/0x110 [ 1004.192133][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 1004.196893][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.201576][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.207657][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.213806][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.219017][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.223848][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.228349][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.234659][T22025] RIP: 0023:0xf7f66549 [ 1004.238719][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1004.258305][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1004.266705][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1004.274707][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.282659][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1004.290608][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1004.298559][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1004.306530][T22025] Uninit was stored to memory at: [ 1004.311523][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.317222][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.322141][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.327231][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.332164][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.336658][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.341318][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.347369][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.353506][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.358699][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.363529][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.368017][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.374364][T22025] [ 1004.376687][T22025] Uninit was stored to memory at: [ 1004.381691][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.387422][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.392374][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.397500][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.402417][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.406900][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.411573][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.417625][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.423770][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.428958][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.433788][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.438272][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.444584][T22025] [ 1004.446882][T22025] Uninit was stored to memory at: [ 1004.451873][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.457588][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.462524][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.467638][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.472556][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.477045][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.481731][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.487781][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.493918][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.499129][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.503966][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.508450][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.514759][T22025] [ 1004.517063][T22025] Uninit was stored to memory at: [ 1004.522082][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.527784][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.532703][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.537813][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.542735][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.547234][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.551911][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.557960][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.564096][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.569308][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.574153][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.578672][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.585033][T22025] [ 1004.587334][T22025] Uninit was stored to memory at: [ 1004.592328][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.598029][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.602943][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.608031][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.612951][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.617460][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.622132][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.628185][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.634323][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.639508][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.644369][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.648865][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.655190][T22025] [ 1004.657529][T22025] Uninit was stored to memory at: [ 1004.662522][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.668225][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.673160][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.678275][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.683199][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.687691][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.692351][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.698405][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.704541][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.709721][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.714556][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.719039][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.725349][T22025] [ 1004.727651][T22025] Uninit was stored to memory at: [ 1004.732643][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1004.738341][T22025] __msan_chain_origin+0x54/0xa0 [ 1004.743275][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1004.748385][T22025] get_compat_msghdr+0x108/0x2b0 [ 1004.753314][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1004.757800][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1004.762459][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.768525][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.774695][T22025] __do_fast_syscall_32+0x127/0x180 [ 1004.779880][T22025] do_fast_syscall_32+0x77/0xd0 [ 1004.784722][T22025] do_SYSENTER_32+0x73/0x90 [ 1004.789205][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.795515][T22025] [ 1004.797817][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1004.804462][T22025] do_recvmmsg+0xbf/0x22d0 [ 1004.808857][T22025] do_recvmmsg+0xbf/0x22d0 [ 1005.109642][T22025] not chained 180000 origins [ 1005.114294][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1005.123031][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.133066][T22025] Call Trace: [ 1005.136328][T22025] dump_stack+0x24c/0x2e0 [ 1005.140647][T22025] kmsan_internal_chain_origin+0x6f/0x130 [ 1005.146399][T22025] ? __local_bh_enable_ip+0x7d/0xb0 [ 1005.151622][T22025] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1005.156715][T22025] ? release_sock+0x26a/0x2d0 [ 1005.161385][T22025] ? sctp_recvmsg+0x109a/0x14c0 [ 1005.166221][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1005.171485][T22025] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1005.177278][T22025] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1005.183328][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1005.188544][T22025] ? kmsan_set_origin_checked+0xa2/0x100 [ 1005.194240][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1005.200318][T22025] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1005.205585][T22025] ? _copy_from_user+0x1fd/0x300 [ 1005.210505][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.215422][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.220520][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.225442][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.229927][T22025] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1005.235472][T22025] ? kmsan_get_metadata+0x116/0x180 [ 1005.240654][T22025] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1005.246716][T22025] ? kmsan_internal_set_origin+0x82/0xc0 [ 1005.252331][T22025] ? __msan_poison_alloca+0xec/0x110 [ 1005.257601][T22025] ? __sys_recvmmsg+0xb5/0x6f0 [ 1005.262347][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.267009][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.273092][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.279253][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.284450][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.289301][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.293821][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.300156][T22025] RIP: 0023:0xf7f66549 [ 1005.304212][T22025] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1005.323816][T22025] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1005.332213][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1005.340177][T22025] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.348126][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.356145][T22025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1005.364095][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.372146][T22025] Uninit was stored to memory at: [ 1005.377156][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.382866][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.387798][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.392896][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.397891][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.402424][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.407084][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.413197][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.419335][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.424532][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.429364][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.433858][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.440167][T22025] [ 1005.442468][T22025] Uninit was stored to memory at: [ 1005.447458][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.453187][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.458104][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.463200][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.468131][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.472621][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.477281][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.483333][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.489466][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.494651][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.499543][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.504048][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.510358][T22025] [ 1005.512674][T22025] Uninit was stored to memory at: [ 1005.517668][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.523370][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.528289][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.533398][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.538317][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.542804][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.547462][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.553526][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.559664][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.564875][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.569728][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.574230][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.580551][T22025] [ 1005.582867][T22025] Uninit was stored to memory at: [ 1005.587874][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.593574][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.598499][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.603646][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.608582][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.613067][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.617728][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.623776][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.629913][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.635097][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.639935][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.644422][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.650742][T22025] [ 1005.653042][T22025] Uninit was stored to memory at: [ 1005.658043][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.663742][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.668658][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.673763][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.678679][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.683180][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.687838][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.693897][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.700038][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.705249][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.710086][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.714572][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.720896][T22025] [ 1005.723211][T22025] Uninit was stored to memory at: [ 1005.728208][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.733911][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.738833][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.744938][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.749856][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.754342][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.759000][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.765049][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.771184][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.776366][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.781202][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.785705][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.792048][T22025] [ 1005.794347][T22025] Uninit was stored to memory at: [ 1005.799341][T22025] kmsan_internal_chain_origin+0xad/0x130 [ 1005.805047][T22025] __msan_chain_origin+0x54/0xa0 [ 1005.809977][T22025] __get_compat_msghdr+0x6db/0x9d0 [ 1005.815071][T22025] get_compat_msghdr+0x108/0x2b0 [ 1005.819992][T22025] do_recvmmsg+0xdc1/0x22d0 [ 1005.824480][T22025] __sys_recvmmsg+0x519/0x6f0 [ 1005.829147][T22025] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.835202][T22025] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.841338][T22025] __do_fast_syscall_32+0x127/0x180 [ 1005.846530][T22025] do_fast_syscall_32+0x77/0xd0 [ 1005.851382][T22025] do_SYSENTER_32+0x73/0x90 [ 1005.855882][T22025] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.862204][T22025] [ 1005.864507][T22025] Local variable ----msg_sys@do_recvmmsg created at: [ 1005.871152][T22025] do_recvmmsg+0xbf/0x22d0 [ 1005.875581][T22025] do_recvmmsg+0xbf/0x22d0 14:47:04 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x700) 14:47:04 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_route(0x10, 0x3, 0x0) 14:47:04 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2}, 0xff}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x5e78}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 14:47:04 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @loopback}}, 0x24) 14:47:04 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 14:47:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:04 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) 14:47:05 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) 14:47:05 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 14:47:05 executing program 4: socketpair(0x10, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 14:47:05 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:47:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x6, 0xd}, 0x40) 14:47:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:06 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) [ 1008.961773][T22077] not chained 190000 origins [ 1008.966406][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1008.975205][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.985300][T22077] Call Trace: [ 1008.988586][T22077] dump_stack+0x24c/0x2e0 [ 1008.992943][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1008.998678][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1009.003893][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1009.009014][T22077] ? release_sock+0x26a/0x2d0 [ 1009.013708][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1009.018574][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1009.023803][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1009.029625][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1009.035720][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1009.040931][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1009.046573][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1009.052668][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1009.057966][T22077] ? _copy_from_user+0x1fd/0x300 [ 1009.062915][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.067861][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.072989][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.077972][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.082510][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1009.088082][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1009.093319][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1009.099190][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1009.104832][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1009.110131][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1009.114917][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.119628][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.125714][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.131882][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.137098][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.142022][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.146556][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.152913][T22077] RIP: 0023:0xf7f66549 [ 1009.156985][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1009.176599][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1009.185059][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1009.193052][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.201058][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1009.209036][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1009.217010][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.225076][T22077] Uninit was stored to memory at: [ 1009.230089][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.235859][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.240804][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.245923][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.250867][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.255398][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.260087][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.266169][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.272340][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.277573][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.282438][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.286960][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.293307][T22077] [ 1009.295631][T22077] Uninit was stored to memory at: [ 1009.300647][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.306377][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.311328][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.316456][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.321407][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.325926][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.330622][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.336718][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.342888][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.348119][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.352999][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.357487][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.363798][T22077] [ 1009.366095][T22077] Uninit was stored to memory at: [ 1009.371092][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.376804][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.381727][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.386823][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.391766][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.396282][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.400939][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.406991][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.413201][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.418383][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.423233][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.427719][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.434031][T22077] [ 1009.436338][T22077] Uninit was stored to memory at: [ 1009.441336][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.447063][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.451981][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.457185][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.462149][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.466633][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.471288][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.477342][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.483510][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.488711][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.493576][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.498065][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.504376][T22077] [ 1009.506693][T22077] Uninit was stored to memory at: [ 1009.511687][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.517388][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.522334][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.527426][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.532343][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.536830][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.541512][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.547587][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.553723][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.558915][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.563761][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.568251][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.574588][T22077] [ 1009.576891][T22077] Uninit was stored to memory at: [ 1009.581895][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.587596][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.592536][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.597647][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.602564][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.607060][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.611719][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.617766][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.623901][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.629105][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.633958][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.638444][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.644753][T22077] [ 1009.647052][T22077] Uninit was stored to memory at: [ 1009.652046][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1009.657757][T22077] __msan_chain_origin+0x54/0xa0 [ 1009.662672][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1009.667765][T22077] get_compat_msghdr+0x108/0x2b0 [ 1009.672682][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1009.677166][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1009.681823][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.687870][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.694023][T22077] __do_fast_syscall_32+0x127/0x180 [ 1009.699233][T22077] do_fast_syscall_32+0x77/0xd0 [ 1009.704069][T22077] do_SYSENTER_32+0x73/0x90 [ 1009.708563][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.714875][T22077] [ 1009.717191][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1009.723836][T22077] do_recvmmsg+0xbf/0x22d0 [ 1009.728262][T22077] do_recvmmsg+0xbf/0x22d0 [ 1010.278361][T22077] not chained 200000 origins [ 1010.282976][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1010.291836][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.301876][T22077] Call Trace: [ 1010.305138][T22077] dump_stack+0x24c/0x2e0 [ 1010.309460][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1010.315382][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1010.320575][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1010.325667][T22077] ? release_sock+0x26a/0x2d0 [ 1010.330332][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1010.335190][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1010.340369][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1010.346159][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1010.352205][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1010.357429][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1010.363041][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1010.369086][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1010.374353][T22077] ? _copy_from_user+0x1fd/0x300 [ 1010.379272][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.384190][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.389286][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.394205][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.398690][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1010.404219][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1010.409424][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1010.415257][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1010.420876][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1010.426144][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1010.430889][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.435549][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.441637][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.447795][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.452979][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.457812][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.462299][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.468612][T22077] RIP: 0023:0xf7f66549 [ 1010.472658][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1010.492248][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1010.500649][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1010.508605][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.516575][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1010.524541][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1010.532502][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1010.540476][T22077] Uninit was stored to memory at: [ 1010.545595][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.551298][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.556237][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.561330][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.566281][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.570765][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.575425][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.581482][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.587618][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.592799][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.597630][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.602119][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.608434][T22077] [ 1010.610733][T22077] Uninit was stored to memory at: [ 1010.615743][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.621491][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.626409][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.631500][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.636425][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.640916][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.645608][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.651669][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.657806][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.663030][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.667876][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.672413][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.678724][T22077] [ 1010.681041][T22077] Uninit was stored to memory at: [ 1010.686030][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.691757][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.696687][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.701775][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.706710][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.711210][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.715875][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.721981][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.728135][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.733319][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.738153][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.742665][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.748988][T22077] [ 1010.751300][T22077] Uninit was stored to memory at: [ 1010.756289][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.761987][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.766918][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.772008][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.776925][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.781408][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.786062][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.792128][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.798282][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.803480][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.808322][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.812813][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.819148][T22077] [ 1010.821497][T22077] Uninit was stored to memory at: [ 1010.826505][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.832224][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.837162][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.842268][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.847201][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.851688][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.856359][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.862408][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.868558][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.873740][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.878573][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.883056][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.889378][T22077] [ 1010.891714][T22077] Uninit was stored to memory at: [ 1010.896717][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.902423][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.907343][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.912436][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.917365][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.921852][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.926536][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.932610][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.938762][T22077] __do_fast_syscall_32+0x127/0x180 [ 1010.943954][T22077] do_fast_syscall_32+0x77/0xd0 [ 1010.948786][T22077] do_SYSENTER_32+0x73/0x90 [ 1010.953270][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.959608][T22077] [ 1010.961922][T22077] Uninit was stored to memory at: [ 1010.966914][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1010.972626][T22077] __msan_chain_origin+0x54/0xa0 [ 1010.977543][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1010.982650][T22077] get_compat_msghdr+0x108/0x2b0 [ 1010.987570][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1010.992070][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1010.996743][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.002797][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.008965][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.014180][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.019015][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.023518][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.029858][T22077] [ 1011.032193][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1011.038839][T22077] do_recvmmsg+0xbf/0x22d0 [ 1011.043234][T22077] do_recvmmsg+0xbf/0x22d0 [ 1011.349645][T22077] not chained 210000 origins [ 1011.354255][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1011.362997][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.373032][T22077] Call Trace: [ 1011.376312][T22077] dump_stack+0x24c/0x2e0 [ 1011.380635][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1011.386362][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1011.391581][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1011.396675][T22077] ? release_sock+0x26a/0x2d0 [ 1011.401347][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1011.406179][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1011.411374][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1011.417183][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1011.423234][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1011.428426][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1011.434046][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1011.440125][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1011.445406][T22077] ? _copy_from_user+0x1fd/0x300 [ 1011.450327][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.455298][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.460452][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.465377][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.469940][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1011.475473][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1011.480668][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1011.486489][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1011.492117][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1011.497384][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1011.502134][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.506803][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.512879][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.519016][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.524205][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.529037][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.533542][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.539870][T22077] RIP: 0023:0xf7f66549 [ 1011.543918][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1011.563518][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1011.571930][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1011.579900][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.587898][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.595848][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1011.603795][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1011.611749][T22077] Uninit was stored to memory at: [ 1011.616775][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.622505][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.627421][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.632520][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.637470][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.641998][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.646657][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.652732][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.658869][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.664083][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.668914][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.673398][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.679727][T22077] [ 1011.682039][T22077] Uninit was stored to memory at: [ 1011.687045][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.692761][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.697729][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.702834][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.707754][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.712239][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.716910][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.722961][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.729094][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.734309][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.739143][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.743661][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.749982][T22077] [ 1011.752296][T22077] Uninit was stored to memory at: [ 1011.757291][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.763018][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.767935][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.773030][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.777950][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.782443][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.787109][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.793159][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.799298][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.804481][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.809312][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.813797][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.820122][T22077] [ 1011.822428][T22077] Uninit was stored to memory at: [ 1011.827434][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.833181][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.838098][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.843211][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.848158][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.852643][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.857302][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.863356][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.869507][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.874687][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.879535][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.884028][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.890339][T22077] [ 1011.892639][T22077] Uninit was stored to memory at: [ 1011.897632][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.903331][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.908282][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.913414][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.918331][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.922829][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.927487][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.933547][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.939679][T22077] __do_fast_syscall_32+0x127/0x180 [ 1011.944863][T22077] do_fast_syscall_32+0x77/0xd0 [ 1011.949726][T22077] do_SYSENTER_32+0x73/0x90 [ 1011.954234][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.960545][T22077] [ 1011.962846][T22077] Uninit was stored to memory at: [ 1011.967866][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1011.973618][T22077] __msan_chain_origin+0x54/0xa0 [ 1011.978568][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1011.983664][T22077] get_compat_msghdr+0x108/0x2b0 [ 1011.988598][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1011.993084][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1011.997772][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.003884][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.010053][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.015253][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.020093][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.024579][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.030884][T22077] [ 1012.033186][T22077] Uninit was stored to memory at: [ 1012.038208][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.043912][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.048832][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.053964][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.058886][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.063397][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.068063][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.074142][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.080285][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.085469][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.090302][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.094790][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.101100][T22077] [ 1012.103401][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1012.110044][T22077] do_recvmmsg+0xbf/0x22d0 [ 1012.114452][T22077] do_recvmmsg+0xbf/0x22d0 [ 1012.402829][T22077] not chained 220000 origins [ 1012.407450][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1012.416193][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.426245][T22077] Call Trace: [ 1012.429521][T22077] dump_stack+0x24c/0x2e0 [ 1012.433841][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1012.439547][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1012.444731][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1012.449838][T22077] ? release_sock+0x26a/0x2d0 [ 1012.454546][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1012.459381][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1012.464566][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1012.470355][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1012.476404][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1012.481604][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1012.487220][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1012.493271][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1012.498563][T22077] ? _copy_from_user+0x1fd/0x300 [ 1012.503498][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.508430][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.513541][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.518461][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.522950][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1012.528480][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1012.533663][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1012.539451][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1012.545062][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1012.550329][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1012.555075][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.559744][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.565825][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.571967][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.577153][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.582001][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.586518][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.592828][T22077] RIP: 0023:0xf7f66549 [ 1012.596875][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1012.616506][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1012.624924][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1012.632892][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1012.640847][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1012.648813][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1012.656769][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1012.664805][T22077] Uninit was stored to memory at: [ 1012.669821][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.675554][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.680487][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.685582][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.690494][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.694980][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.699636][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.705686][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.711835][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.717049][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.721883][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.726364][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.732672][T22077] [ 1012.734971][T22077] Uninit was stored to memory at: [ 1012.739977][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.745677][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.750589][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.755680][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.760620][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.765112][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.769800][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.775850][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.781985][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.787170][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.792020][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.796504][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.802814][T22077] [ 1012.805115][T22077] Uninit was stored to memory at: [ 1012.810107][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.815807][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.820723][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.825845][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.830764][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.835269][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.839948][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.846013][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.852164][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.857380][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.862215][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.866716][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.873058][T22077] [ 1012.875361][T22077] Uninit was stored to memory at: [ 1012.880354][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.886054][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.890986][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.896096][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.901028][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.905561][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.910259][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.916318][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.922453][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.927632][T22077] do_fast_syscall_32+0x77/0xd0 [ 1012.932491][T22077] do_SYSENTER_32+0x73/0x90 [ 1012.936977][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.943292][T22077] [ 1012.945594][T22077] Uninit was stored to memory at: [ 1012.950616][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1012.956347][T22077] __msan_chain_origin+0x54/0xa0 [ 1012.961267][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1012.966363][T22077] get_compat_msghdr+0x108/0x2b0 [ 1012.971284][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1012.975774][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1012.980451][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.986503][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.992653][T22077] __do_fast_syscall_32+0x127/0x180 [ 1012.997849][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.002681][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.007174][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.013501][T22077] [ 1013.015803][T22077] Uninit was stored to memory at: [ 1013.020796][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.026508][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.031436][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.036545][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.041480][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.045964][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.050631][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.056690][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.062844][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.068025][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.072863][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.077374][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.083700][T22077] [ 1013.086011][T22077] Uninit was stored to memory at: [ 1013.091014][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.096719][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.101663][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.106771][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.111707][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.116228][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.120886][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.126937][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.133074][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.138282][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.143140][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.147640][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.153950][T22077] [ 1013.156264][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1013.162924][T22077] do_recvmmsg+0xbf/0x22d0 [ 1013.167339][T22077] do_recvmmsg+0xbf/0x22d0 [ 1013.449947][T22077] not chained 230000 origins [ 1013.454568][T22077] CPU: 1 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1013.463336][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.473392][T22077] Call Trace: [ 1013.476706][T22077] dump_stack+0x24c/0x2e0 [ 1013.481062][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1013.486805][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1013.492025][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1013.497125][T22077] ? release_sock+0x26a/0x2d0 [ 1013.501820][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1013.506672][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1013.511868][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1013.517658][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1013.523706][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1013.528885][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1013.534497][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1013.540559][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1013.545824][T22077] ? _copy_from_user+0x1fd/0x300 [ 1013.550765][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.555686][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.560783][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.565712][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.570197][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1013.575727][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1013.580907][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1013.586702][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1013.592344][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1013.597615][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1013.602380][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.607043][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.613106][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.619263][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.624447][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.629306][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.633793][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.640104][T22077] RIP: 0023:0xf7f66549 [ 1013.644150][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1013.663752][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1013.672146][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1013.680128][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1013.688083][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.696091][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1013.704050][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1013.712017][T22077] Uninit was stored to memory at: [ 1013.717013][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.722715][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.727636][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.732729][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.737675][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.742213][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.746890][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.752941][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.759076][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.764255][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.769086][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.773588][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.779901][T22077] [ 1013.782201][T22077] Uninit was stored to memory at: [ 1013.787197][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.792924][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.797847][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.802960][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.807882][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.812372][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.817047][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.823096][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.829256][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.834476][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.839309][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.843795][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.850100][T22077] [ 1013.852405][T22077] Uninit was stored to memory at: [ 1013.857398][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.863117][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.868075][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.873166][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.878086][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.882592][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.887252][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.893300][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.899440][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.904668][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.909499][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.913981][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.920291][T22077] [ 1013.922592][T22077] Uninit was stored to memory at: [ 1013.927594][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1013.933296][T22077] __msan_chain_origin+0x54/0xa0 [ 1013.938216][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1013.943313][T22077] get_compat_msghdr+0x108/0x2b0 [ 1013.948230][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1013.952725][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1013.957403][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.963453][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.969592][T22077] __do_fast_syscall_32+0x127/0x180 [ 1013.974803][T22077] do_fast_syscall_32+0x77/0xd0 [ 1013.979682][T22077] do_SYSENTER_32+0x73/0x90 [ 1013.984182][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.990490][T22077] [ 1013.992805][T22077] Uninit was stored to memory at: [ 1013.997817][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.003519][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.008437][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.013531][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.018450][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.022937][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.027593][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.033641][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.039776][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.044956][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.049787][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.054270][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.060602][T22077] [ 1014.062931][T22077] Uninit was stored to memory at: [ 1014.067922][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.073624][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.078583][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.083676][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.088609][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.093116][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.097785][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.103852][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.109991][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.115194][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.120030][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.124513][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.130837][T22077] [ 1014.133143][T22077] Uninit was stored to memory at: [ 1014.138136][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.143836][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.148750][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.153843][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.158762][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.163292][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.167954][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.174004][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.180154][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.185345][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.190177][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.194664][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.200973][T22077] [ 1014.203304][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1014.209948][T22077] do_recvmmsg+0xbf/0x22d0 [ 1014.214348][T22077] do_recvmmsg+0xbf/0x22d0 [ 1014.553257][T22077] not chained 240000 origins [ 1014.557864][T22077] CPU: 1 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1014.566604][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.576636][T22077] Call Trace: [ 1014.579907][T22077] dump_stack+0x24c/0x2e0 [ 1014.584227][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1014.589928][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1014.595121][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1014.600228][T22077] ? release_sock+0x26a/0x2d0 [ 1014.604902][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1014.609752][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1014.614936][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1014.620725][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1014.626773][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1014.631950][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1014.637559][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1014.643606][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1014.648886][T22077] ? _copy_from_user+0x1fd/0x300 [ 1014.653808][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.658724][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.663820][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.668737][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.673222][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1014.678762][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1014.683954][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1014.689754][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1014.695380][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1014.700645][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1014.705393][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.710063][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.716166][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.722308][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.727495][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.732332][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.736817][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.743130][T22077] RIP: 0023:0xf7f66549 [ 1014.747176][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1014.766780][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1014.775176][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1014.783133][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.791083][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1014.799044][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1014.806994][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1014.814950][T22077] Uninit was stored to memory at: [ 1014.819950][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.825654][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.830685][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.835801][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.840729][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.845216][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.849888][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.855950][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.862089][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.867326][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.872187][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.876674][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.883006][T22077] [ 1014.885319][T22077] Uninit was stored to memory at: [ 1014.890330][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.896031][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.900950][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.906041][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.910956][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.915446][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.920135][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.926204][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.932358][T22077] __do_fast_syscall_32+0x127/0x180 [ 1014.937554][T22077] do_fast_syscall_32+0x77/0xd0 [ 1014.942391][T22077] do_SYSENTER_32+0x73/0x90 [ 1014.946874][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.953201][T22077] [ 1014.955500][T22077] Uninit was stored to memory at: [ 1014.960494][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1014.966197][T22077] __msan_chain_origin+0x54/0xa0 [ 1014.971120][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1014.976218][T22077] get_compat_msghdr+0x108/0x2b0 [ 1014.981137][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1014.985622][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1014.990305][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.996356][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.002519][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.007700][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.012541][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.017030][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.023382][T22077] [ 1015.025712][T22077] Uninit was stored to memory at: [ 1015.030705][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.036438][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.041357][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.046462][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.051382][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.055868][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.060540][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.066601][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.072742][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.077935][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.082769][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.087261][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.093582][T22077] [ 1015.095898][T22077] Uninit was stored to memory at: [ 1015.100894][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.106596][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.111524][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.116629][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.121574][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.126061][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.130733][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.136784][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.142922][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.148114][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.152963][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.157447][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.163758][T22077] [ 1015.166066][T22077] Uninit was stored to memory at: [ 1015.171057][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.176772][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.181702][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.186796][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.191739][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.196225][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.200882][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.206933][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.213069][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.218254][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.223100][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.227634][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.233960][T22077] [ 1015.236274][T22077] Uninit was stored to memory at: [ 1015.241267][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.246968][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.251887][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.256974][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.261924][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.266409][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.271064][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.277114][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.283362][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.288558][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.293394][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.297881][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.304191][T22077] [ 1015.306492][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1015.313167][T22077] do_recvmmsg+0xbf/0x22d0 [ 1015.317575][T22077] do_recvmmsg+0xbf/0x22d0 [ 1015.635750][T22077] not chained 250000 origins [ 1015.640339][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1015.649080][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.659128][T22077] Call Trace: [ 1015.662428][T22077] dump_stack+0x24c/0x2e0 [ 1015.666754][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1015.672488][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1015.677707][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1015.682833][T22077] ? release_sock+0x26a/0x2d0 [ 1015.687525][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1015.692370][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1015.697554][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1015.703387][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1015.709461][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1015.714652][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1015.720272][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1015.726370][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1015.731671][T22077] ? _copy_from_user+0x1fd/0x300 [ 1015.736627][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.741593][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.746699][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.751653][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.756143][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1015.761674][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1015.766866][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1015.772682][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1015.778303][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1015.783606][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1015.788401][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.793145][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.799230][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.805372][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.810656][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.815498][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.820024][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.826368][T22077] RIP: 0023:0xf7f66549 [ 1015.830426][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1015.850017][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1015.858452][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1015.866429][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1015.874442][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1015.882425][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1015.890382][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1015.898383][T22077] Uninit was stored to memory at: [ 1015.903397][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.909101][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.914052][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.919163][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.924085][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.928673][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1015.933355][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.939427][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.945608][T22077] __do_fast_syscall_32+0x127/0x180 [ 1015.950793][T22077] do_fast_syscall_32+0x77/0xd0 [ 1015.955661][T22077] do_SYSENTER_32+0x73/0x90 [ 1015.960147][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.966497][T22077] [ 1015.968798][T22077] Uninit was stored to memory at: [ 1015.973842][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1015.979543][T22077] __msan_chain_origin+0x54/0xa0 [ 1015.984465][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1015.989565][T22077] get_compat_msghdr+0x108/0x2b0 [ 1015.994535][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1015.999023][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.003711][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.009789][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.015957][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.021195][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.026037][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.030523][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.036841][T22077] [ 1016.039189][T22077] Uninit was stored to memory at: [ 1016.044188][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.050018][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.054961][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.060056][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.064977][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.069460][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.074136][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.080191][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.086339][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.091537][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.096370][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.100856][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.107174][T22077] [ 1016.109495][T22077] Uninit was stored to memory at: [ 1016.114504][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.120211][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.125194][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.130303][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.135259][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.139760][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.144426][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.150507][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.156661][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.161877][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.166717][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.171231][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.177545][T22077] [ 1016.179860][T22077] Uninit was stored to memory at: [ 1016.184853][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.190581][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.195527][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.200630][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.205576][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.210089][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.214747][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.220801][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.226971][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.232180][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.237020][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.241532][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.247847][T22077] [ 1016.250195][T22077] Uninit was stored to memory at: [ 1016.255202][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.260938][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.265868][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.270963][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.275896][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.280381][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.285051][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.291101][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.297248][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.302457][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.307310][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.311821][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.318137][T22077] [ 1016.320470][T22077] Uninit was stored to memory at: [ 1016.325466][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.331173][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.336117][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.341234][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.346190][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.350682][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.355383][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.361438][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.367636][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.372851][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.377714][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.382225][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.388555][T22077] [ 1016.390891][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1016.397577][T22077] do_recvmmsg+0xbf/0x22d0 [ 1016.402034][T22077] do_recvmmsg+0xbf/0x22d0 [ 1016.683610][T22077] not chained 260000 origins [ 1016.688203][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1016.696987][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.707055][T22077] Call Trace: [ 1016.710317][T22077] dump_stack+0x24c/0x2e0 [ 1016.714638][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1016.720342][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1016.725539][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1016.730629][T22077] ? release_sock+0x26a/0x2d0 [ 1016.735299][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1016.740153][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1016.745337][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1016.751143][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1016.757216][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1016.762450][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1016.768107][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1016.774200][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1016.779483][T22077] ? _copy_from_user+0x1fd/0x300 [ 1016.784450][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.789373][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.794472][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.799407][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.803926][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1016.809512][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1016.814699][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1016.820494][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1016.826114][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1016.831382][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1016.836157][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.840824][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.846895][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.853037][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.858229][T22077] do_fast_syscall_32+0x77/0xd0 [ 1016.863098][T22077] do_SYSENTER_32+0x73/0x90 [ 1016.867590][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.873906][T22077] RIP: 0023:0xf7f66549 [ 1016.877961][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1016.897586][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1016.906017][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1016.914008][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.921963][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1016.929916][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1016.937882][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1016.945905][T22077] Uninit was stored to memory at: [ 1016.950923][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1016.956665][T22077] __msan_chain_origin+0x54/0xa0 [ 1016.961627][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1016.966762][T22077] get_compat_msghdr+0x108/0x2b0 [ 1016.971691][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1016.976195][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1016.980875][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.986935][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.993126][T22077] __do_fast_syscall_32+0x127/0x180 [ 1016.998321][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.003184][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.007751][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.014080][T22077] [ 1017.016380][T22077] Uninit was stored to memory at: [ 1017.021378][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.027136][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.032056][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.037167][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.042113][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.046610][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.051298][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.057368][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.063533][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.068744][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.073593][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.078085][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.084431][T22077] [ 1017.086752][T22077] Uninit was stored to memory at: [ 1017.091763][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.097473][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.102433][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.107555][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.112514][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.117022][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.121716][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.127786][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.133953][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.139143][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.144001][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.148488][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.154798][T22077] [ 1017.157102][T22077] Uninit was stored to memory at: [ 1017.162117][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.167825][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.172770][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.177871][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.182817][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.187305][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.191981][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.198043][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.204231][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.209418][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.214280][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.218775][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.225117][T22077] [ 1017.227440][T22077] Uninit was stored to memory at: [ 1017.232437][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.238145][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.243097][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.248223][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.253149][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.257643][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.262328][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.268381][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.274522][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.279710][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.284552][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.289037][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.295365][T22077] [ 1017.297669][T22077] Uninit was stored to memory at: [ 1017.302678][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.308378][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.313324][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.318423][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.323375][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.327902][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.332598][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.338656][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.344822][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.350010][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.354872][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.359363][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.365701][T22077] [ 1017.368003][T22077] Uninit was stored to memory at: [ 1017.373003][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1017.378735][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.383674][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.388765][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.393680][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.398167][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.402853][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.408923][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.415082][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.420284][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.425120][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.429614][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.435969][T22077] [ 1017.438278][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1017.444943][T22077] do_recvmmsg+0xbf/0x22d0 [ 1017.449357][T22077] do_recvmmsg+0xbf/0x22d0 [ 1017.732724][T22077] not chained 270000 origins [ 1017.737351][T22077] CPU: 1 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1017.746092][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.756124][T22077] Call Trace: [ 1017.759388][T22077] dump_stack+0x24c/0x2e0 [ 1017.763709][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1017.769415][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1017.774642][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1017.779739][T22077] ? release_sock+0x26a/0x2d0 [ 1017.784410][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1017.789250][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1017.794449][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1017.800243][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1017.806308][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1017.811513][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1017.817130][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1017.823193][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1017.828489][T22077] ? _copy_from_user+0x1fd/0x300 [ 1017.833449][T22077] __msan_chain_origin+0x54/0xa0 [ 1017.838407][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1017.843514][T22077] get_compat_msghdr+0x108/0x2b0 [ 1017.848440][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1017.852933][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1017.858479][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1017.863662][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1017.869450][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1017.875064][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1017.880330][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1017.885083][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1017.889799][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.895856][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.902114][T22077] __do_fast_syscall_32+0x127/0x180 [ 1017.907306][T22077] do_fast_syscall_32+0x77/0xd0 [ 1017.912170][T22077] do_SYSENTER_32+0x73/0x90 [ 1017.916658][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.922977][T22077] RIP: 0023:0xf7f66549 [ 1017.927055][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1017.946657][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1017.955055][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1017.963009][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.971013][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1017.978970][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1017.986929][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1017.994964][T22077] Uninit was stored to memory at: [ 1017.999960][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.005717][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.010636][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.015730][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.020646][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.025196][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.029858][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.035908][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.042044][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.047229][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.052062][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.056550][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.062890][T22077] [ 1018.065191][T22077] Uninit was stored to memory at: [ 1018.070185][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.075894][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.080811][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.085903][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.090848][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.095336][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.099996][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.106054][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.112193][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.117407][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.122253][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.126756][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.133067][T22077] [ 1018.135394][T22077] Uninit was stored to memory at: [ 1018.140405][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.146112][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.151036][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.156144][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.161065][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.165550][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.170208][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.176259][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.182398][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.187596][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.192438][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.196954][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.203277][T22077] [ 1018.205576][T22077] Uninit was stored to memory at: [ 1018.210569][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.216285][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.221215][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.226321][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.231241][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.235742][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.240416][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.246467][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.252617][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.257819][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.262668][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.267155][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.273480][T22077] [ 1018.275795][T22077] Uninit was stored to memory at: [ 1018.280800][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.286501][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.291460][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.296569][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.301512][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.306031][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.310690][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.316741][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.322893][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.328072][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.332914][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.337401][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.343710][T22077] [ 1018.346014][T22077] Uninit was stored to memory at: [ 1018.351015][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.356724][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.361641][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.366732][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.371651][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.376136][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.380805][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.386869][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.393018][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.398198][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.403034][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.407516][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.413844][T22077] [ 1018.416153][T22077] Uninit was stored to memory at: [ 1018.421149][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1018.426850][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.431769][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.436860][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.441779][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.446285][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.450942][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.456990][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.463129][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.468317][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.473151][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.477640][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.483982][T22077] [ 1018.486281][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1018.492937][T22077] do_recvmmsg+0xbf/0x22d0 [ 1018.497342][T22077] do_recvmmsg+0xbf/0x22d0 [ 1018.786882][T22077] not chained 280000 origins [ 1018.791536][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1018.800279][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.810321][T22077] Call Trace: [ 1018.813601][T22077] dump_stack+0x24c/0x2e0 [ 1018.817981][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1018.823683][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1018.828874][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1018.833994][T22077] ? release_sock+0x26a/0x2d0 [ 1018.838695][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1018.843550][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1018.848739][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1018.854559][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1018.860614][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1018.865825][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1018.871455][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1018.877536][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1018.882802][T22077] ? _copy_from_user+0x1fd/0x300 [ 1018.887727][T22077] __msan_chain_origin+0x54/0xa0 [ 1018.892690][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1018.897811][T22077] get_compat_msghdr+0x108/0x2b0 [ 1018.902731][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1018.907222][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1018.912819][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1018.918010][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1018.923833][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1018.929479][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1018.934794][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1018.939595][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1018.944276][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1018.950329][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1018.956468][T22077] __do_fast_syscall_32+0x127/0x180 [ 1018.961670][T22077] do_fast_syscall_32+0x77/0xd0 [ 1018.966511][T22077] do_SYSENTER_32+0x73/0x90 [ 1018.971065][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1018.977417][T22077] RIP: 0023:0xf7f66549 [ 1018.981481][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1019.001066][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1019.009468][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1019.017493][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.025447][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1019.033399][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1019.041351][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1019.049314][T22077] Uninit was stored to memory at: [ 1019.054339][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.060057][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.064973][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.070071][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.075023][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.079512][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.084213][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.090265][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.096404][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.101626][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.106462][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.110980][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.117311][T22077] [ 1019.119613][T22077] Uninit was stored to memory at: [ 1019.124620][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.130323][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.135256][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.140351][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.145271][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.149762][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.154447][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.160495][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.166653][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.171893][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.176770][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.181290][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.187605][T22077] [ 1019.189938][T22077] Uninit was stored to memory at: [ 1019.194950][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.200678][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.205598][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.210694][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.215622][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.220147][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.224809][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.230854][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.237144][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.242329][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.247207][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.251721][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.258079][T22077] [ 1019.260381][T22077] Uninit was stored to memory at: [ 1019.265391][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.271093][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.276013][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.281119][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.286039][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.290545][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.295229][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.301284][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.307454][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.312664][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.317518][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.322033][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.328355][T22077] [ 1019.330686][T22077] Uninit was stored to memory at: [ 1019.335685][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.341386][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.346305][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.351397][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.356319][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.360803][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.365462][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.371512][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.377696][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.382896][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.387736][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.392251][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.398566][T22077] [ 1019.400919][T22077] Uninit was stored to memory at: [ 1019.406043][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.411768][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.416710][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.421807][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.426765][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.431278][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.435938][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.441987][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.448151][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.453388][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.458248][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.462734][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.469045][T22077] [ 1019.471358][T22077] Uninit was stored to memory at: [ 1019.476351][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1019.482121][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.487054][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.492207][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.497142][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.501660][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1019.506326][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1019.512383][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1019.518552][T22077] __do_fast_syscall_32+0x127/0x180 [ 1019.523796][T22077] do_fast_syscall_32+0x77/0xd0 [ 1019.528663][T22077] do_SYSENTER_32+0x73/0x90 [ 1019.533191][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1019.539522][T22077] [ 1019.541841][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1019.548490][T22077] do_recvmmsg+0xbf/0x22d0 [ 1019.552933][T22077] do_recvmmsg+0xbf/0x22d0 [ 1019.846196][T22077] not chained 290000 origins [ 1019.850862][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1019.859641][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.869677][T22077] Call Trace: [ 1019.872937][T22077] dump_stack+0x24c/0x2e0 [ 1019.877390][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1019.883108][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1019.888313][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1019.893421][T22077] ? release_sock+0x26a/0x2d0 [ 1019.898086][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1019.902963][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1019.908146][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1019.913938][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1019.920086][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1019.925272][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1019.930892][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1019.936972][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1019.942247][T22077] ? _copy_from_user+0x1fd/0x300 [ 1019.947188][T22077] __msan_chain_origin+0x54/0xa0 [ 1019.952185][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1019.957294][T22077] get_compat_msghdr+0x108/0x2b0 [ 1019.962280][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1019.966778][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1019.972337][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1019.977519][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1019.983309][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1019.988927][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1019.994197][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1019.998956][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.003646][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.009699][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.015906][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.021106][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.025945][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.030431][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.036744][T22077] RIP: 0023:0xf7f66549 [ 1020.040793][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1020.060385][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1020.068804][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1020.076796][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.084765][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1020.092731][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1020.100685][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1020.108640][T22077] Uninit was stored to memory at: [ 1020.113659][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.119360][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.124290][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.129382][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.134319][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.138807][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.143497][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.149570][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.155720][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.160930][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.165763][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.170253][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.176602][T22077] [ 1020.178926][T22077] Uninit was stored to memory at: [ 1020.183947][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.189652][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.194576][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.199669][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.204643][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.209158][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.213843][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.219895][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.226032][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.231214][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.236063][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.240551][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.246888][T22077] [ 1020.249193][T22077] Uninit was stored to memory at: [ 1020.254185][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.259884][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.264843][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.269972][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.274892][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.279413][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.284100][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.290188][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.296354][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.301573][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.306407][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.310897][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.317209][T22077] [ 1020.319528][T22077] Uninit was stored to memory at: [ 1020.324519][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.330217][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.335507][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.340607][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.345572][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.350060][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.354719][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.360765][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.366904][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.372087][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.376920][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.381435][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.387750][T22077] [ 1020.390072][T22077] Uninit was stored to memory at: [ 1020.395082][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.400802][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.405744][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.410839][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.415757][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.420241][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.424897][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.430957][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.437095][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.442281][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.447121][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.451609][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.457932][T22077] [ 1020.460233][T22077] Uninit was stored to memory at: [ 1020.465224][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.470927][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.475844][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.480938][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.485859][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.490342][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.495002][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.501064][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.507205][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.512419][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.517276][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.521788][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.528098][T22077] [ 1020.530439][T22077] Uninit was stored to memory at: [ 1020.535431][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1020.541141][T22077] __msan_chain_origin+0x54/0xa0 [ 1020.546065][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1020.551191][T22077] get_compat_msghdr+0x108/0x2b0 [ 1020.556117][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1020.560616][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1020.565275][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1020.571325][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1020.577479][T22077] __do_fast_syscall_32+0x127/0x180 [ 1020.582689][T22077] do_fast_syscall_32+0x77/0xd0 [ 1020.587524][T22077] do_SYSENTER_32+0x73/0x90 [ 1020.592026][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1020.598341][T22077] [ 1020.600672][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1020.607336][T22077] do_recvmmsg+0xbf/0x22d0 [ 1020.611762][T22077] do_recvmmsg+0xbf/0x22d0 [ 1020.914565][T22077] not chained 300000 origins [ 1020.919195][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1020.927954][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.937994][T22077] Call Trace: [ 1020.941277][T22077] dump_stack+0x24c/0x2e0 [ 1020.945628][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1020.951335][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1020.956527][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1020.961680][T22077] ? release_sock+0x26a/0x2d0 [ 1020.966377][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1020.971241][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1020.976437][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1020.982265][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1020.988323][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1020.993521][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1020.999152][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1021.005202][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1021.010481][T22077] ? _copy_from_user+0x1fd/0x300 [ 1021.015435][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.020364][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.025464][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.030389][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.034881][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1021.040442][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1021.045623][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1021.051408][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1021.057026][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1021.062332][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1021.067084][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.071773][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.077832][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.083998][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.089183][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.094022][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.098513][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.104885][T22077] RIP: 0023:0xf7f66549 [ 1021.108932][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1021.128564][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1021.136976][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1021.144949][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.152920][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.160879][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1021.168854][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.176820][T22077] Uninit was stored to memory at: [ 1021.181834][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.187541][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.192497][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.197598][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.202577][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.207065][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.211746][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.217800][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.223980][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.229200][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.234086][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.238581][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.244932][T22077] [ 1021.247238][T22077] Uninit was stored to memory at: [ 1021.252249][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.257971][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.262963][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.268092][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.273085][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.277596][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.282283][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.288340][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.294480][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.299664][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.304495][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.308980][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.315290][T22077] [ 1021.317596][T22077] Uninit was stored to memory at: [ 1021.322619][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.328321][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.333252][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.338366][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.343320][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.347831][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.352492][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.358545][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.364745][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.369968][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.374804][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.379294][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.385635][T22077] [ 1021.387939][T22077] Uninit was stored to memory at: [ 1021.392936][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.398644][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.403592][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.408687][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.413620][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.418138][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.422840][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.428893][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.435032][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.440232][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.445067][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.449590][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.455941][T22077] [ 1021.458252][T22077] Uninit was stored to memory at: [ 1021.463263][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.468972][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.473919][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.479019][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.483983][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.488497][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.493187][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.499268][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.505409][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.510591][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.515427][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.519911][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.526242][T22077] [ 1021.528561][T22077] Uninit was stored to memory at: [ 1021.533573][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.539275][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.544194][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.549293][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.554243][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.558738][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.563478][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.569550][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.575721][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.580906][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.585751][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.590234][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.596557][T22077] [ 1021.598896][T22077] Uninit was stored to memory at: [ 1021.603887][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1021.609587][T22077] __msan_chain_origin+0x54/0xa0 [ 1021.614527][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1021.619623][T22077] get_compat_msghdr+0x108/0x2b0 [ 1021.624567][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1021.629058][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1021.633740][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.639794][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.645961][T22077] __do_fast_syscall_32+0x127/0x180 [ 1021.651144][T22077] do_fast_syscall_32+0x77/0xd0 [ 1021.655981][T22077] do_SYSENTER_32+0x73/0x90 [ 1021.660475][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.666791][T22077] [ 1021.669110][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1021.675809][T22077] do_recvmmsg+0xbf/0x22d0 [ 1021.680236][T22077] do_recvmmsg+0xbf/0x22d0 [ 1021.955055][T22077] not chained 310000 origins [ 1021.959776][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1021.968564][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.978893][T22077] Call Trace: [ 1021.982194][T22077] dump_stack+0x24c/0x2e0 [ 1021.986522][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1021.992254][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1021.997445][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1022.002570][T22077] ? release_sock+0x26a/0x2d0 [ 1022.007275][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1022.012114][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1022.017296][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1022.023113][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1022.029161][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1022.034343][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1022.039965][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1022.046040][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1022.051309][T22077] ? _copy_from_user+0x1fd/0x300 [ 1022.056230][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.061157][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.066260][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.071185][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.075675][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1022.081213][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1022.086431][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1022.092252][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1022.097873][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1022.103162][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1022.107928][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.112623][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.118725][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.124909][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.130146][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.135051][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.139544][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.145923][T22077] RIP: 0023:0xf7f66549 [ 1022.149972][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1022.169597][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1022.178075][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1022.186034][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.194008][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.201959][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1022.209914][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.217872][T22077] Uninit was stored to memory at: [ 1022.222883][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.228597][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.233551][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.238645][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.243579][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.248063][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.252750][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.258821][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.264988][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.270193][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.275051][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.279553][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.285878][T22077] [ 1022.288181][T22077] Uninit was stored to memory at: [ 1022.293189][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.298892][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.303808][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.308903][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.313860][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.318346][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.323018][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.329093][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.335266][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.340451][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.345305][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.349790][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.356103][T22077] [ 1022.358417][T22077] Uninit was stored to memory at: [ 1022.363438][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.369142][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.374121][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.379234][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.384155][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.388651][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.393341][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.399409][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.405549][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.410729][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.415564][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.420049][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.426361][T22077] [ 1022.428683][T22077] Uninit was stored to memory at: [ 1022.433693][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.439414][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.444371][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.449468][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.454421][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.458909][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.463586][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.469638][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.475791][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.480970][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.485816][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.490304][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.496662][T22077] [ 1022.498965][T22077] Uninit was stored to memory at: [ 1022.503956][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.509658][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.514579][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.519694][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.524633][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.529139][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.533825][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.539878][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.546015][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.551200][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.556063][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.560552][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.566869][T22077] [ 1022.569189][T22077] Uninit was stored to memory at: [ 1022.574199][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.579920][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.584854][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.589953][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.594904][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.599425][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.604137][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.610204][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.616348][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.621619][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.626454][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.630964][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.637285][T22077] [ 1022.639633][T22077] Uninit was stored to memory at: [ 1022.644657][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1022.650359][T22077] __msan_chain_origin+0x54/0xa0 [ 1022.655292][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1022.660403][T22077] get_compat_msghdr+0x108/0x2b0 [ 1022.665346][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1022.669833][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1022.674509][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.680568][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.686739][T22077] __do_fast_syscall_32+0x127/0x180 [ 1022.691946][T22077] do_fast_syscall_32+0x77/0xd0 [ 1022.696785][T22077] do_SYSENTER_32+0x73/0x90 [ 1022.701314][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.707632][T22077] [ 1022.709952][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1022.716622][T22077] do_recvmmsg+0xbf/0x22d0 [ 1022.721049][T22077] do_recvmmsg+0xbf/0x22d0 [ 1022.996662][T22077] not chained 320000 origins [ 1023.001303][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1023.010078][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.020148][T22077] Call Trace: [ 1023.023437][T22077] dump_stack+0x24c/0x2e0 [ 1023.027761][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1023.033506][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1023.038698][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1023.043817][T22077] ? release_sock+0x26a/0x2d0 [ 1023.048524][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1023.053404][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1023.058601][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1023.064393][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1023.070440][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1023.075622][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1023.081238][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1023.087303][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1023.092570][T22077] ? _copy_from_user+0x1fd/0x300 [ 1023.097494][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.102445][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.107558][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.112538][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.117026][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1023.122588][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1023.127781][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1023.133585][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1023.139204][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1023.144481][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1023.149234][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.153928][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.159983][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.166141][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.171343][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.176205][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.180731][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.187043][T22077] RIP: 0023:0xf7f66549 [ 1023.191101][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1023.210701][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1023.219156][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1023.227116][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.235088][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1023.243037][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1023.250988][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1023.258945][T22077] Uninit was stored to memory at: [ 1023.263953][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.269656][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.274572][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.279666][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.284586][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.289069][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.293728][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.299790][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.305924][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.311128][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.316004][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.320491][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.326865][T22077] [ 1023.329170][T22077] Uninit was stored to memory at: [ 1023.334175][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.339877][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.344797][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.349898][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.354816][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.359302][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.363961][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.370017][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.376157][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.381354][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.386203][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.390733][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.397046][T22077] [ 1023.399348][T22077] Uninit was stored to memory at: [ 1023.404339][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.410038][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.414960][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.420081][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.425019][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.429554][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.434243][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.440296][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.446439][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.451645][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.456480][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.461010][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.467328][T22077] [ 1023.469657][T22077] Uninit was stored to memory at: [ 1023.474652][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.480367][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.485297][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.490418][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.495339][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.499826][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.504487][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.510534][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.516678][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.521891][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.526728][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.531213][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.537527][T22077] [ 1023.539850][T22077] Uninit was stored to memory at: [ 1023.544866][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.550567][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.555485][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.560588][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.565523][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.570028][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.574714][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.580765][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.586941][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.592164][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.597002][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.601504][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.607826][T22077] [ 1023.610128][T22077] Uninit was stored to memory at: [ 1023.615119][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.620823][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.625742][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.630850][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.635770][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.640274][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.644947][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.650999][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.657172][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.662381][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.667212][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.671700][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.678008][T22077] [ 1023.680318][T22077] Uninit was stored to memory at: [ 1023.685337][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1023.691053][T22077] __msan_chain_origin+0x54/0xa0 [ 1023.695973][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1023.701063][T22077] get_compat_msghdr+0x108/0x2b0 [ 1023.705979][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1023.710463][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1023.715121][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.721186][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.727371][T22077] __do_fast_syscall_32+0x127/0x180 [ 1023.732557][T22077] do_fast_syscall_32+0x77/0xd0 [ 1023.737386][T22077] do_SYSENTER_32+0x73/0x90 [ 1023.741890][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.748199][T22077] [ 1023.750499][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1023.757165][T22077] do_recvmmsg+0xbf/0x22d0 [ 1023.761609][T22077] do_recvmmsg+0xbf/0x22d0 [ 1024.048211][T22077] not chained 330000 origins [ 1024.052796][T22077] CPU: 1 PID: 22077 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1024.061534][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.071567][T22077] Call Trace: [ 1024.074837][T22077] dump_stack+0x24c/0x2e0 [ 1024.079172][T22077] kmsan_internal_chain_origin+0x6f/0x130 [ 1024.084874][T22077] ? __local_bh_enable_ip+0x7d/0xb0 [ 1024.090069][T22077] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1024.095190][T22077] ? release_sock+0x26a/0x2d0 [ 1024.099851][T22077] ? sctp_recvmsg+0x109a/0x14c0 [ 1024.104721][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1024.109978][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1024.115783][T22077] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1024.121863][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1024.127063][T22077] ? kmsan_set_origin_checked+0xa2/0x100 [ 1024.132696][T22077] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1024.138747][T22077] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1024.144024][T22077] ? _copy_from_user+0x1fd/0x300 [ 1024.148972][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.153903][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.159002][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.163922][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.168406][T22077] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1024.173975][T22077] ? kmsan_get_metadata+0x116/0x180 [ 1024.179187][T22077] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1024.184978][T22077] ? kmsan_internal_set_origin+0x82/0xc0 [ 1024.190592][T22077] ? __msan_poison_alloca+0xec/0x110 [ 1024.195874][T22077] ? __sys_recvmmsg+0xb5/0x6f0 [ 1024.200642][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.205309][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.211359][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.217500][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.222685][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.227531][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.232043][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.238387][T22077] RIP: 0023:0xf7f66549 [ 1024.242453][T22077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1024.262054][T22077] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1024.270447][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1024.278414][T22077] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.286366][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.294314][T22077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1024.302263][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.310216][T22077] Uninit was stored to memory at: [ 1024.315209][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.320931][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.325847][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.330938][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.335861][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.340375][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.345035][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.351083][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.357219][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.362410][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.367238][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.371751][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.378062][T22077] [ 1024.380405][T22077] Uninit was stored to memory at: [ 1024.385418][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.391134][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.396103][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.401199][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.406126][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.410607][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.415271][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.421326][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.427496][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.432678][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.437516][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.442033][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.448346][T22077] [ 1024.450650][T22077] Uninit was stored to memory at: [ 1024.455641][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.461344][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.466260][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.471390][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.476315][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.480838][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.485497][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.491564][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.497712][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.502891][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.507722][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.512206][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.518514][T22077] [ 1024.520825][T22077] Uninit was stored to memory at: [ 1024.525826][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.531541][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.536478][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.541571][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.546521][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.551020][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.555676][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.561727][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.567866][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.573047][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.577894][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.582376][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.588685][T22077] [ 1024.590984][T22077] Uninit was stored to memory at: [ 1024.595976][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.601684][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.606616][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.611711][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.616629][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.621171][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.625828][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.631874][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.638008][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.643207][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.648080][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.652596][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.658905][T22077] [ 1024.661207][T22077] Uninit was stored to memory at: [ 1024.666213][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.671916][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.676837][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.681930][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.686846][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.691329][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.695988][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.702050][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.708188][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.713377][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.718222][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.722704][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.729012][T22077] [ 1024.731313][T22077] Uninit was stored to memory at: [ 1024.736310][T22077] kmsan_internal_chain_origin+0xad/0x130 [ 1024.742035][T22077] __msan_chain_origin+0x54/0xa0 [ 1024.746953][T22077] __get_compat_msghdr+0x6db/0x9d0 [ 1024.752049][T22077] get_compat_msghdr+0x108/0x2b0 [ 1024.756979][T22077] do_recvmmsg+0xdc1/0x22d0 [ 1024.761466][T22077] __sys_recvmmsg+0x519/0x6f0 [ 1024.766160][T22077] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.772209][T22077] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.778376][T22077] __do_fast_syscall_32+0x127/0x180 [ 1024.783558][T22077] do_fast_syscall_32+0x77/0xd0 [ 1024.788387][T22077] do_SYSENTER_32+0x73/0x90 [ 1024.792872][T22077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.799187][T22077] [ 1024.801489][T22077] Local variable ----msg_sys@do_recvmmsg created at: [ 1024.808180][T22077] do_recvmmsg+0xbf/0x22d0 [ 1024.812594][T22077] do_recvmmsg+0xbf/0x22d0 14:47:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2}, 0xff}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x5e78}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 14:47:23 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 14:47:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x11, 0x1300}, 0x40) 14:47:23 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:23 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback=0xac1414aa, @local, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@private}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 14:47:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:24 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) 14:47:24 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:24 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 14:47:24 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:47:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() [ 1026.568714][T22115] not chained 340000 origins [ 1026.573343][T22115] CPU: 1 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1026.582123][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.592188][T22115] Call Trace: [ 1026.595475][T22115] dump_stack+0x24c/0x2e0 [ 1026.599836][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1026.605585][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1026.610816][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1026.615952][T22115] ? release_sock+0x26a/0x2d0 [ 1026.620660][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1026.625554][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1026.630798][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1026.636632][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1026.642724][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1026.647939][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1026.653592][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1026.659696][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1026.665007][T22115] ? _copy_from_user+0x1fd/0x300 [ 1026.669981][T22115] __msan_chain_origin+0x54/0xa0 [ 1026.674960][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1026.680111][T22115] get_compat_msghdr+0x108/0x2b0 [ 1026.685078][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1026.689630][T22115] ? __msan_get_context_state+0x9/0x20 [ 1026.695116][T22115] ? kfree+0x29/0x11f0 [ 1026.699310][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1026.705408][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1026.711067][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1026.716372][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1026.721160][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1026.725888][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.731981][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.738165][T22115] __do_fast_syscall_32+0x127/0x180 [ 1026.743411][T22115] do_fast_syscall_32+0x77/0xd0 [ 1026.748314][T22115] do_SYSENTER_32+0x73/0x90 [ 1026.752887][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.759240][T22115] RIP: 0023:0xf7f66549 [ 1026.763339][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1026.782974][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1026.791420][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1026.799414][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1026.807434][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1026.815443][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1026.823430][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1026.831422][T22115] Uninit was stored to memory at: [ 1026.836446][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1026.842219][T22115] __msan_chain_origin+0x54/0xa0 [ 1026.847174][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1026.852328][T22115] get_compat_msghdr+0x108/0x2b0 [ 1026.857384][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1026.861996][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1026.866695][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.872790][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.878965][T22115] __do_fast_syscall_32+0x127/0x180 [ 1026.884210][T22115] do_fast_syscall_32+0x77/0xd0 [ 1026.889124][T22115] do_SYSENTER_32+0x73/0x90 [ 1026.893677][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.900030][T22115] [ 1026.902356][T22115] Uninit was stored to memory at: [ 1026.907392][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1026.913149][T22115] __msan_chain_origin+0x54/0xa0 [ 1026.918120][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1026.923246][T22115] get_compat_msghdr+0x108/0x2b0 [ 1026.928417][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1026.932946][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1026.937648][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.943745][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.949922][T22115] __do_fast_syscall_32+0x127/0x180 [ 1026.955146][T22115] do_fast_syscall_32+0x77/0xd0 [ 1026.960032][T22115] do_SYSENTER_32+0x73/0x90 [ 1026.964560][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.970916][T22115] [ 1026.973244][T22115] Uninit was stored to memory at: [ 1026.978266][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1026.984007][T22115] __msan_chain_origin+0x54/0xa0 [ 1026.988974][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1026.994123][T22115] get_compat_msghdr+0x108/0x2b0 [ 1026.999138][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1027.003668][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1027.008367][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.014470][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.020670][T22115] __do_fast_syscall_32+0x127/0x180 [ 1027.025892][T22115] do_fast_syscall_32+0x77/0xd0 [ 1027.030758][T22115] do_SYSENTER_32+0x73/0x90 [ 1027.035281][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.041631][T22115] [ 1027.043977][T22115] Uninit was stored to memory at: [ 1027.048991][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1027.054725][T22115] __msan_chain_origin+0x54/0xa0 [ 1027.059694][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1027.064826][T22115] get_compat_msghdr+0x108/0x2b0 [ 1027.069778][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1027.074296][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1027.079007][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.085092][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.091290][T22115] __do_fast_syscall_32+0x127/0x180 [ 1027.096529][T22115] do_fast_syscall_32+0x77/0xd0 [ 1027.101405][T22115] do_SYSENTER_32+0x73/0x90 [ 1027.105923][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.112274][T22115] [ 1027.114600][T22115] Uninit was stored to memory at: [ 1027.119659][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1027.125412][T22115] __msan_chain_origin+0x54/0xa0 [ 1027.130367][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1027.135495][T22115] get_compat_msghdr+0x108/0x2b0 [ 1027.140455][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1027.144968][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1027.149654][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.155738][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.161919][T22115] __do_fast_syscall_32+0x127/0x180 [ 1027.167142][T22115] do_fast_syscall_32+0x77/0xd0 [ 1027.172007][T22115] do_SYSENTER_32+0x73/0x90 [ 1027.176539][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.182912][T22115] [ 1027.185229][T22115] Uninit was stored to memory at: [ 1027.190239][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1027.195981][T22115] __msan_chain_origin+0x54/0xa0 [ 1027.200936][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1027.206094][T22115] get_compat_msghdr+0x108/0x2b0 [ 1027.211072][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1027.215584][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1027.220270][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.226347][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.232512][T22115] __do_fast_syscall_32+0x127/0x180 [ 1027.237737][T22115] do_fast_syscall_32+0x77/0xd0 [ 1027.242598][T22115] do_SYSENTER_32+0x73/0x90 [ 1027.247122][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.253460][T22115] [ 1027.255773][T22115] Uninit was stored to memory at: [ 1027.260780][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1027.266509][T22115] __msan_chain_origin+0x54/0xa0 [ 1027.271447][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1027.276563][T22115] get_compat_msghdr+0x108/0x2b0 [ 1027.281529][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1027.286052][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1027.290749][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.296835][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.303001][T22115] __do_fast_syscall_32+0x127/0x180 [ 1027.308206][T22115] do_fast_syscall_32+0x77/0xd0 [ 1027.313066][T22115] do_SYSENTER_32+0x73/0x90 [ 1027.317589][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.323925][T22115] [ 1027.326237][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1027.332897][T22115] do_recvmmsg+0xbf/0x22d0 [ 1027.337337][T22115] do_recvmmsg+0xbf/0x22d0 14:47:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1818000000000000000000000000fd47870500000000000995"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1028.407900][T22115] not chained 350000 origins [ 1028.412621][T22115] CPU: 1 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1028.421397][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.431476][T22115] Call Trace: [ 1028.434758][T22115] dump_stack+0x24c/0x2e0 [ 1028.439129][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1028.444884][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1028.450100][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1028.455253][T22115] ? release_sock+0x26a/0x2d0 [ 1028.459950][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1028.464818][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1028.470031][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1028.475853][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1028.481949][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1028.487165][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1028.492819][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1028.498899][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1028.504229][T22115] ? _copy_from_user+0x1fd/0x300 [ 1028.509180][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.514134][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.519274][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.524233][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.528794][T22115] ? __msan_get_context_state+0x9/0x20 [ 1028.534267][T22115] ? kfree+0x29/0x11f0 [ 1028.538360][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1028.544498][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1028.550139][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1028.555432][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1028.560195][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.564875][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.570942][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.577081][T22115] __do_fast_syscall_32+0x127/0x180 [ 1028.582271][T22115] do_fast_syscall_32+0x77/0xd0 [ 1028.587114][T22115] do_SYSENTER_32+0x73/0x90 [ 1028.591635][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.597947][T22115] RIP: 0023:0xf7f66549 [ 1028.601991][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1028.621573][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1028.629992][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1028.637956][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1028.645927][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1028.653878][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1028.661853][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.669819][T22115] Uninit was stored to memory at: [ 1028.674828][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1028.680545][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.685477][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.690603][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.695521][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.700004][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.704677][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.710723][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.716871][T22115] __do_fast_syscall_32+0x127/0x180 [ 1028.722051][T22115] do_fast_syscall_32+0x77/0xd0 [ 1028.726894][T22115] do_SYSENTER_32+0x73/0x90 [ 1028.731374][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.737688][T22115] [ 1028.740003][T22115] Uninit was stored to memory at: [ 1028.744997][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1028.750706][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.755622][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.760714][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.765635][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.770136][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.774795][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.780860][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.787010][T22115] __do_fast_syscall_32+0x127/0x180 [ 1028.792195][T22115] do_fast_syscall_32+0x77/0xd0 [ 1028.797029][T22115] do_SYSENTER_32+0x73/0x90 [ 1028.801544][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.807870][T22115] [ 1028.810240][T22115] Uninit was stored to memory at: [ 1028.815256][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1028.820959][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.825935][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.831070][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.836016][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.840507][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.845209][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.851267][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.857522][T22115] __do_fast_syscall_32+0x127/0x180 [ 1028.862724][T22115] do_fast_syscall_32+0x77/0xd0 [ 1028.867571][T22115] do_SYSENTER_32+0x73/0x90 [ 1028.872072][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.878385][T22115] [ 1028.880703][T22115] Uninit was stored to memory at: [ 1028.885695][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1028.891395][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.896329][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.901429][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.906364][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.910852][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.915526][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.921576][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.927728][T22115] __do_fast_syscall_32+0x127/0x180 [ 1028.932922][T22115] do_fast_syscall_32+0x77/0xd0 [ 1028.937762][T22115] do_SYSENTER_32+0x73/0x90 [ 1028.942288][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.948632][T22115] [ 1028.950933][T22115] Uninit was stored to memory at: [ 1028.955943][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1028.961645][T22115] __msan_chain_origin+0x54/0xa0 [ 1028.966594][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1028.971682][T22115] get_compat_msghdr+0x108/0x2b0 [ 1028.976616][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1028.981137][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1028.985862][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.991914][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.998053][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.003256][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.008126][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.012629][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.018941][T22115] [ 1029.021253][T22115] Uninit was stored to memory at: [ 1029.026249][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.031954][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.036872][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.042001][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.046925][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.051427][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.056087][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.062171][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.068307][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.073490][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.078323][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.082822][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.089144][T22115] [ 1029.091447][T22115] Uninit was stored to memory at: [ 1029.096444][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.102189][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.107112][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.112206][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.117128][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.121614][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.126282][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.132343][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.138530][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.143735][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.148578][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.153138][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.159455][T22115] [ 1029.161755][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1029.168400][T22115] do_recvmmsg+0xbf/0x22d0 [ 1029.172800][T22115] do_recvmmsg+0xbf/0x22d0 [ 1029.487997][T22115] not chained 360000 origins [ 1029.492605][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1029.501476][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.511542][T22115] Call Trace: [ 1029.514802][T22115] dump_stack+0x24c/0x2e0 [ 1029.519190][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1029.524894][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1029.530077][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1029.535173][T22115] ? release_sock+0x26a/0x2d0 [ 1029.539839][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1029.544676][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1029.549881][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1029.555678][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1029.561735][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1029.566932][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1029.572546][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1029.578596][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1029.583897][T22115] ? _copy_from_user+0x1fd/0x300 [ 1029.588831][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.593750][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.598846][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.603768][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.608257][T22115] ? __msan_get_context_state+0x9/0x20 [ 1029.613715][T22115] ? kfree+0x29/0x11f0 [ 1029.617784][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1029.623832][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1029.629444][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1029.634725][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1029.639473][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.644134][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.650187][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.656326][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.661565][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.666436][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.670925][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.677251][T22115] RIP: 0023:0xf7f66549 [ 1029.681301][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1029.700903][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1029.709298][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1029.717251][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.725213][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1029.733163][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1029.741138][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1029.749092][T22115] Uninit was stored to memory at: [ 1029.754089][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.759790][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.764708][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.769806][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.774725][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.779212][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.783872][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.789953][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.796142][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.801374][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.806227][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.810714][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.817044][T22115] [ 1029.819377][T22115] Uninit was stored to memory at: [ 1029.824382][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.830084][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.835001][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.840095][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.845029][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.849514][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.854197][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.860249][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.866393][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.871626][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.876480][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.880973][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.887285][T22115] [ 1029.889615][T22115] Uninit was stored to memory at: [ 1029.894623][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.900322][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.905242][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.910347][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.915278][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.919774][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.924448][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.930511][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.936654][T22115] __do_fast_syscall_32+0x127/0x180 [ 1029.941842][T22115] do_fast_syscall_32+0x77/0xd0 [ 1029.946676][T22115] do_SYSENTER_32+0x73/0x90 [ 1029.951183][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.957494][T22115] [ 1029.959797][T22115] Uninit was stored to memory at: [ 1029.964816][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1029.970519][T22115] __msan_chain_origin+0x54/0xa0 [ 1029.975548][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1029.980648][T22115] get_compat_msghdr+0x108/0x2b0 [ 1029.985615][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1029.990133][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1029.994812][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.000877][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.007025][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.012204][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.017039][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.021525][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.027869][T22115] [ 1030.030209][T22115] Uninit was stored to memory at: [ 1030.035205][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.040923][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.045845][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.050967][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.055908][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.060409][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.065073][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.071159][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.077359][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.082543][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.087377][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.091862][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.098196][T22115] [ 1030.100499][T22115] Uninit was stored to memory at: [ 1030.105499][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.111200][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.116151][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.121272][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.126192][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.130680][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.135348][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.141396][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.147533][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.152728][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.157559][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.162043][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.168350][T22115] [ 1030.170657][T22115] Uninit was stored to memory at: [ 1030.175668][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.181376][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.186299][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.191390][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.196310][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.200808][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.205507][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.211556][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.217708][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.222904][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.227733][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.232218][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.238528][T22115] [ 1030.240830][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1030.247473][T22115] do_recvmmsg+0xbf/0x22d0 [ 1030.251881][T22115] do_recvmmsg+0xbf/0x22d0 [ 1030.559842][T22115] not chained 370000 origins [ 1030.564470][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1030.573214][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.583264][T22115] Call Trace: [ 1030.586546][T22115] dump_stack+0x24c/0x2e0 [ 1030.590875][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1030.596630][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1030.601831][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1030.606927][T22115] ? release_sock+0x26a/0x2d0 [ 1030.611599][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1030.616465][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1030.621646][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1030.627434][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1030.633515][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1030.638711][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1030.644325][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1030.650373][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1030.655638][T22115] ? _copy_from_user+0x1fd/0x300 [ 1030.660557][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.665477][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.670586][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.675516][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.680005][T22115] ? __msan_get_context_state+0x9/0x20 [ 1030.685470][T22115] ? kfree+0x29/0x11f0 [ 1030.689571][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1030.695622][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1030.701239][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1030.706509][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1030.711257][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.715921][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.721976][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.728149][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.733350][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.738201][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.742805][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.749137][T22115] RIP: 0023:0xf7f66549 [ 1030.753219][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1030.772850][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1030.781245][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1030.789209][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.797164][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1030.805116][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1030.813065][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.821068][T22115] Uninit was stored to memory at: [ 1030.826096][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.831846][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.836765][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.841861][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.846805][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.851317][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.855984][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.862043][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.868194][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.873378][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.878211][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.882720][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.889036][T22115] [ 1030.891374][T22115] Uninit was stored to memory at: [ 1030.896383][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.902107][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.907039][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.912136][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.917094][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.921591][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.926249][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.932302][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.938451][T22115] __do_fast_syscall_32+0x127/0x180 [ 1030.943748][T22115] do_fast_syscall_32+0x77/0xd0 [ 1030.948621][T22115] do_SYSENTER_32+0x73/0x90 [ 1030.953136][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.959451][T22115] [ 1030.961795][T22115] Uninit was stored to memory at: [ 1030.966792][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1030.972504][T22115] __msan_chain_origin+0x54/0xa0 [ 1030.977421][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1030.982518][T22115] get_compat_msghdr+0x108/0x2b0 [ 1030.987451][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1030.991942][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1030.996669][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.002731][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.008908][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.014126][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.018961][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.023478][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.029803][T22115] [ 1031.032126][T22115] Uninit was stored to memory at: [ 1031.037121][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.042825][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.047752][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.052846][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.057766][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.062251][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.066910][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.072973][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.079128][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.084312][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.089158][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.093652][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.099989][T22115] [ 1031.102312][T22115] Uninit was stored to memory at: [ 1031.107322][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.113024][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.117940][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.123032][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.127957][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.132450][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.137111][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.143172][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.149305][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.154484][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.159318][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.163837][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.170162][T22115] [ 1031.172472][T22115] Uninit was stored to memory at: [ 1031.177463][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.183184][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.188124][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.193232][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.198154][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.202669][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.207334][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.213531][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.219666][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.224864][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.229698][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.234217][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.240542][T22115] [ 1031.242842][T22115] Uninit was stored to memory at: [ 1031.247846][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.253546][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.258463][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.263553][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.268497][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.272982][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.277638][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.283687][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.289823][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.295013][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.299851][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.304368][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.310680][T22115] [ 1031.312978][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1031.319619][T22115] do_recvmmsg+0xbf/0x22d0 [ 1031.324033][T22115] do_recvmmsg+0xbf/0x22d0 [ 1031.651229][T22115] not chained 380000 origins [ 1031.655839][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1031.664582][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.674644][T22115] Call Trace: [ 1031.677904][T22115] dump_stack+0x24c/0x2e0 [ 1031.682233][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1031.687936][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1031.693135][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1031.698230][T22115] ? release_sock+0x26a/0x2d0 [ 1031.702894][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1031.707755][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1031.712986][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1031.718792][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1031.724860][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1031.730058][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1031.735713][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1031.741765][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1031.747037][T22115] ? _copy_from_user+0x1fd/0x300 [ 1031.751970][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.756889][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.761990][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.766911][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.771401][T22115] ? __msan_get_context_state+0x9/0x20 [ 1031.776849][T22115] ? kfree+0x29/0x11f0 [ 1031.780920][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1031.786968][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1031.792582][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1031.797859][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1031.802606][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.807282][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.813337][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.819492][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.824675][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.829507][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.833996][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.840309][T22115] RIP: 0023:0xf7f66549 [ 1031.844357][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1031.863941][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1031.872338][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1031.880291][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.888243][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1031.896205][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1031.904183][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1031.912164][T22115] Uninit was stored to memory at: [ 1031.917195][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.923026][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.927958][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1031.933053][T22115] get_compat_msghdr+0x108/0x2b0 [ 1031.937982][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1031.942467][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1031.947124][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.953173][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.959308][T22115] __do_fast_syscall_32+0x127/0x180 [ 1031.964494][T22115] do_fast_syscall_32+0x77/0xd0 [ 1031.969342][T22115] do_SYSENTER_32+0x73/0x90 [ 1031.973827][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.980137][T22115] [ 1031.982439][T22115] Uninit was stored to memory at: [ 1031.987433][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1031.993146][T22115] __msan_chain_origin+0x54/0xa0 [ 1031.998063][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.003211][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.008164][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.012660][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.017317][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.023369][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.029522][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.034720][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.039576][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.044064][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.050379][T22115] [ 1032.052680][T22115] Uninit was stored to memory at: [ 1032.057670][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.063387][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.068306][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.073402][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.078319][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.082809][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.087481][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.093546][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.099680][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.104867][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.109698][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.114186][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.120502][T22115] [ 1032.122806][T22115] Uninit was stored to memory at: [ 1032.127797][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.133503][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.138440][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.143543][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.148463][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.152960][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.157613][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.163660][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.169793][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.174984][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.179818][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.184318][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.190629][T22115] [ 1032.192951][T22115] Uninit was stored to memory at: [ 1032.197946][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.203675][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.208605][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.213715][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.218637][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.223149][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.227809][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.233887][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.240021][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.245200][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.250031][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.254515][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.260821][T22115] [ 1032.263137][T22115] Uninit was stored to memory at: [ 1032.268159][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.273860][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.278790][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.283899][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.288816][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.293301][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.297974][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.304023][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.310170][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.315352][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.320184][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.324670][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.330994][T22115] [ 1032.333294][T22115] Uninit was stored to memory at: [ 1032.338310][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.344009][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.348924][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.354015][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.358945][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.363446][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.368103][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.374158][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.380305][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.385498][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.390347][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.394847][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.401160][T22115] [ 1032.403486][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1032.410145][T22115] do_recvmmsg+0xbf/0x22d0 [ 1032.414558][T22115] do_recvmmsg+0xbf/0x22d0 [ 1032.701849][T22115] not chained 390000 origins [ 1032.706464][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1032.715220][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.725251][T22115] Call Trace: [ 1032.728510][T22115] dump_stack+0x24c/0x2e0 [ 1032.732837][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1032.738571][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1032.743793][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1032.748885][T22115] ? release_sock+0x26a/0x2d0 [ 1032.753549][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1032.758396][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1032.763577][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1032.769362][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1032.775412][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1032.780593][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1032.786209][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1032.792266][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1032.797539][T22115] ? _copy_from_user+0x1fd/0x300 [ 1032.802459][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.807390][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.812506][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.817458][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.821977][T22115] ? __msan_get_context_state+0x9/0x20 [ 1032.827433][T22115] ? kfree+0x29/0x11f0 [ 1032.831489][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1032.837579][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1032.843201][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1032.848484][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1032.853251][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.857949][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.864006][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.870147][T22115] __do_fast_syscall_32+0x127/0x180 [ 1032.875336][T22115] do_fast_syscall_32+0x77/0xd0 [ 1032.880171][T22115] do_SYSENTER_32+0x73/0x90 [ 1032.884807][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.891162][T22115] RIP: 0023:0xf7f66549 [ 1032.895216][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1032.914812][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1032.923210][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1032.931163][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.939119][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1032.947075][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1032.955027][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.962982][T22115] Uninit was stored to memory at: [ 1032.967979][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1032.973682][T22115] __msan_chain_origin+0x54/0xa0 [ 1032.978605][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1032.983698][T22115] get_compat_msghdr+0x108/0x2b0 [ 1032.988622][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1032.993109][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1032.997807][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.003856][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.009991][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.015199][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.020031][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.024516][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.030822][T22115] [ 1033.033133][T22115] Uninit was stored to memory at: [ 1033.038164][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.043924][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.048846][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.053938][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.058871][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.063355][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.068011][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.074060][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.080194][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.085389][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.090229][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.094735][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.101067][T22115] [ 1033.103381][T22115] Uninit was stored to memory at: [ 1033.108375][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.114073][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.119003][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.124109][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.129028][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.133538][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.138195][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.144247][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.150391][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.155584][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.160418][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.164902][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.171223][T22115] [ 1033.173546][T22115] Uninit was stored to memory at: [ 1033.178541][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.184251][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.189176][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.194269][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.199196][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.203681][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.208338][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.214404][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.220539][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.225719][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.230550][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.235033][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.241342][T22115] [ 1033.243662][T22115] Uninit was stored to memory at: [ 1033.248704][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.254409][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.259328][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.264426][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.269358][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.273857][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.278515][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.284565][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.290699][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.295880][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.300725][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.305219][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.311545][T22115] [ 1033.313848][T22115] Uninit was stored to memory at: [ 1033.318853][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.324555][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.329471][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.334594][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.339516][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.343999][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.348670][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.354748][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.360900][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.366092][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.370925][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.375405][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.381728][T22115] [ 1033.384037][T22115] Uninit was stored to memory at: [ 1033.389029][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1033.394838][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.399753][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.404845][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.409761][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.414245][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.418902][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.424955][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.431090][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.436271][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.441134][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.445615][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.451940][T22115] [ 1033.454260][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1033.460921][T22115] do_recvmmsg+0xbf/0x22d0 [ 1033.465319][T22115] do_recvmmsg+0xbf/0x22d0 [ 1033.764924][T22115] not chained 400000 origins [ 1033.769549][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1033.778331][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.788378][T22115] Call Trace: [ 1033.791637][T22115] dump_stack+0x24c/0x2e0 [ 1033.795962][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1033.801693][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1033.806877][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1033.811979][T22115] ? release_sock+0x26a/0x2d0 [ 1033.816638][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1033.821476][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1033.826670][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1033.832468][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1033.838531][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1033.843715][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1033.849329][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1033.855379][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1033.860657][T22115] ? _copy_from_user+0x1fd/0x300 [ 1033.865582][T22115] __msan_chain_origin+0x54/0xa0 [ 1033.870501][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1033.875600][T22115] get_compat_msghdr+0x108/0x2b0 [ 1033.880551][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1033.885057][T22115] ? __msan_get_context_state+0x9/0x20 [ 1033.890495][T22115] ? kfree+0x29/0x11f0 [ 1033.894561][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1033.900676][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1033.906297][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1033.911637][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1033.916386][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1033.921133][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.927214][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.933366][T22115] __do_fast_syscall_32+0x127/0x180 [ 1033.938565][T22115] do_fast_syscall_32+0x77/0xd0 [ 1033.943435][T22115] do_SYSENTER_32+0x73/0x90 [ 1033.947921][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.954239][T22115] RIP: 0023:0xf7f66549 [ 1033.958285][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1033.977987][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1033.986409][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1033.994376][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.002327][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1034.010293][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1034.018246][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1034.026202][T22115] Uninit was stored to memory at: [ 1034.031208][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.036926][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.041842][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.046957][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.051877][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.056360][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.061017][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.067066][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.073216][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.078431][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.083265][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.087747][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.094072][T22115] [ 1034.096372][T22115] Uninit was stored to memory at: [ 1034.101365][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.107092][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.112017][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.117112][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.122038][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.126520][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.131178][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.137227][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.143362][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.148539][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.153384][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.157910][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.164240][T22115] [ 1034.166587][T22115] Uninit was stored to memory at: [ 1034.171613][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.177316][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.182251][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.187358][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.192278][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.196777][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.201435][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.207482][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.213616][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.218809][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.223645][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.228134][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.234445][T22115] [ 1034.236747][T22115] Uninit was stored to memory at: [ 1034.241754][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.247457][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.252374][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.257475][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.262408][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.266896][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.271602][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.277679][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.283826][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.289005][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.293837][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.298352][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.304716][T22115] [ 1034.307036][T22115] Uninit was stored to memory at: [ 1034.312031][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.317732][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.322649][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.327756][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.332675][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.337158][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.341816][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.347877][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.354012][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.359193][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.364028][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.368526][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.374836][T22115] [ 1034.377150][T22115] Uninit was stored to memory at: [ 1034.382144][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.387870][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.392788][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.397878][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.402796][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.407278][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.411951][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.417997][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.424147][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.429328][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.434160][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.438643][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.444952][T22115] [ 1034.447265][T22115] Uninit was stored to memory at: [ 1034.452286][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1034.457984][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.462915][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.468003][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.472926][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.477439][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.482122][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.488173][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.494317][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.499497][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.504330][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.508828][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.515153][T22115] [ 1034.517455][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1034.524102][T22115] do_recvmmsg+0xbf/0x22d0 [ 1034.528506][T22115] do_recvmmsg+0xbf/0x22d0 [ 1034.806600][T22115] not chained 410000 origins [ 1034.811222][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1034.819992][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.830027][T22115] Call Trace: [ 1034.833299][T22115] dump_stack+0x24c/0x2e0 [ 1034.837628][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1034.843345][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1034.848544][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1034.853649][T22115] ? release_sock+0x26a/0x2d0 [ 1034.858311][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1034.863151][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1034.868331][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1034.874129][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1034.880224][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1034.885409][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1034.891039][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1034.897121][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1034.902397][T22115] ? _copy_from_user+0x1fd/0x300 [ 1034.907323][T22115] __msan_chain_origin+0x54/0xa0 [ 1034.912261][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1034.917370][T22115] get_compat_msghdr+0x108/0x2b0 [ 1034.922294][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1034.926783][T22115] ? __msan_get_context_state+0x9/0x20 [ 1034.932231][T22115] ? kfree+0x29/0x11f0 [ 1034.936302][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1034.942372][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1034.948000][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1034.953282][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1034.958057][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1034.962717][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.968784][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.974955][T22115] __do_fast_syscall_32+0x127/0x180 [ 1034.980142][T22115] do_fast_syscall_32+0x77/0xd0 [ 1034.984984][T22115] do_SYSENTER_32+0x73/0x90 [ 1034.989538][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.995853][T22115] RIP: 0023:0xf7f66549 [ 1034.999920][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1035.019508][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1035.027917][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1035.035870][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.043841][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.051809][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1035.059761][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.067731][T22115] Uninit was stored to memory at: [ 1035.072726][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.078427][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.083359][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.088459][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.093410][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.097900][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.102569][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.108636][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.114776][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.119976][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.124809][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.129293][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.135616][T22115] [ 1035.137919][T22115] Uninit was stored to memory at: [ 1035.142910][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.148626][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.153544][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.158650][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.163570][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.168055][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.172711][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.178757][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.184905][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.190093][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.194961][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.199465][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.205780][T22115] [ 1035.208081][T22115] Uninit was stored to memory at: [ 1035.213077][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.218821][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.223752][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.228845][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.233779][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.238264][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.242937][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.249017][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.255170][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.260356][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.265208][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.269698][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.276010][T22115] [ 1035.278312][T22115] Uninit was stored to memory at: [ 1035.283310][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.289020][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.293941][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.299039][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.303966][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.308449][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.313108][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.319176][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.325312][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.330493][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.335343][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.339839][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.346150][T22115] [ 1035.348452][T22115] Uninit was stored to memory at: [ 1035.353443][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.359162][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.364097][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.369185][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.374122][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.378611][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.383270][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.389321][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.395477][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.400721][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.405564][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.410051][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.416376][T22115] [ 1035.418734][T22115] Uninit was stored to memory at: [ 1035.423739][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.429437][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.434356][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.439448][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.444390][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.448878][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.453536][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.459586][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.465743][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.470923][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.475758][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.480257][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.486581][T22115] [ 1035.488886][T22115] Uninit was stored to memory at: [ 1035.493890][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1035.499591][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.504514][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.509649][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.514570][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.519056][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1035.523711][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.529756][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.535910][T22115] __do_fast_syscall_32+0x127/0x180 [ 1035.541126][T22115] do_fast_syscall_32+0x77/0xd0 [ 1035.545968][T22115] do_SYSENTER_32+0x73/0x90 [ 1035.550453][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.556762][T22115] [ 1035.559064][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1035.565708][T22115] do_recvmmsg+0xbf/0x22d0 [ 1035.570104][T22115] do_recvmmsg+0xbf/0x22d0 [ 1035.871457][T22115] not chained 420000 origins [ 1035.876077][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1035.884903][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.894937][T22115] Call Trace: [ 1035.898200][T22115] dump_stack+0x24c/0x2e0 [ 1035.902715][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1035.908434][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1035.913652][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1035.918783][T22115] ? release_sock+0x26a/0x2d0 [ 1035.923483][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1035.928316][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1035.933498][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1035.939301][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1035.945362][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1035.950566][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1035.956186][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1035.962251][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1035.967539][T22115] ? _copy_from_user+0x1fd/0x300 [ 1035.972460][T22115] __msan_chain_origin+0x54/0xa0 [ 1035.977410][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1035.982541][T22115] get_compat_msghdr+0x108/0x2b0 [ 1035.987494][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1035.991985][T22115] ? __msan_get_context_state+0x9/0x20 [ 1035.997424][T22115] ? kfree+0x29/0x11f0 [ 1036.001476][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1036.007530][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1036.013293][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1036.018587][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1036.023369][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.028037][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.034112][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.040258][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.045562][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.050428][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.054947][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.061258][T22115] RIP: 0023:0xf7f66549 [ 1036.065309][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1036.084943][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1036.093337][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1036.101289][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.109240][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.117201][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1036.125188][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.133153][T22115] Uninit was stored to memory at: [ 1036.138150][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.143854][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.148771][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.153898][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.158816][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.163298][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.167955][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.174016][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.180169][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.185364][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.190231][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.194761][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.201073][T22115] [ 1036.203374][T22115] Uninit was stored to memory at: [ 1036.208394][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.214099][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.219082][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.224185][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.229106][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.233615][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.238274][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.244370][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.250534][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.255715][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.260546][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.265031][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.271373][T22115] [ 1036.273681][T22115] Uninit was stored to memory at: [ 1036.278674][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.284404][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.289325][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.294416][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.299359][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.303847][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.308519][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.314589][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.320762][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.325964][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.330807][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.335292][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.341627][T22115] [ 1036.343929][T22115] Uninit was stored to memory at: [ 1036.348921][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.354621][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.359542][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.364646][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.369578][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.374070][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.378750][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.384800][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.390937][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.396163][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.400997][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.405488][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.411798][T22115] [ 1036.414113][T22115] Uninit was stored to memory at: [ 1036.419112][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.424853][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.429828][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.434952][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.439875][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.444365][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.449024][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.455076][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.461262][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.466569][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.471417][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.475906][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.482219][T22115] [ 1036.484519][T22115] Uninit was stored to memory at: [ 1036.489527][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.495270][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.500189][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.505279][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.510371][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.514860][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.519528][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.525622][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.531762][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.536942][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.541805][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.546290][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.552600][T22115] [ 1036.554930][T22115] Uninit was stored to memory at: [ 1036.559923][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1036.565621][T22115] __msan_chain_origin+0x54/0xa0 [ 1036.570537][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1036.575646][T22115] get_compat_msghdr+0x108/0x2b0 [ 1036.580593][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1036.585077][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1036.589740][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.595790][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.601937][T22115] __do_fast_syscall_32+0x127/0x180 [ 1036.607140][T22115] do_fast_syscall_32+0x77/0xd0 [ 1036.611973][T22115] do_SYSENTER_32+0x73/0x90 [ 1036.616469][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.622791][T22115] [ 1036.625114][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1036.631772][T22115] do_recvmmsg+0xbf/0x22d0 [ 1036.636172][T22115] do_recvmmsg+0xbf/0x22d0 [ 1036.959404][T22115] not chained 430000 origins [ 1036.964004][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1036.972742][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.982777][T22115] Call Trace: [ 1036.986037][T22115] dump_stack+0x24c/0x2e0 [ 1036.990354][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1036.996052][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1037.001233][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1037.006325][T22115] ? release_sock+0x26a/0x2d0 [ 1037.010990][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1037.015830][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1037.021035][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1037.026842][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1037.032895][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1037.038138][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1037.043755][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1037.049818][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1037.055118][T22115] ? _copy_from_user+0x1fd/0x300 [ 1037.060086][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.065038][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.070145][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.075066][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.079567][T22115] ? __msan_get_context_state+0x9/0x20 [ 1037.085017][T22115] ? kfree+0x29/0x11f0 [ 1037.089072][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1037.095146][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1037.100760][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1037.106058][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1037.110819][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.115497][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.121562][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.127699][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.132897][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.137749][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.142239][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.148553][T22115] RIP: 0023:0xf7f66549 [ 1037.152642][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1037.172229][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1037.180667][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1037.188636][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1037.196604][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1037.204554][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1037.212505][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1037.220487][T22115] Uninit was stored to memory at: [ 1037.225512][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.231226][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.236174][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.241299][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.246235][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.250720][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.255378][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.261427][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.267563][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.272745][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.277576][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.282078][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.288406][T22115] [ 1037.290708][T22115] Uninit was stored to memory at: [ 1037.295718][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.301434][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.306354][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.311467][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.316384][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.320877][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.325536][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.331585][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.337724][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.342934][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.347774][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.352266][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.358580][T22115] [ 1037.360879][T22115] Uninit was stored to memory at: [ 1037.365869][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.371566][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.376479][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.381585][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.386507][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.390994][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.395652][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.401699][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.407836][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.413030][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.417858][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.422341][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.428667][T22115] [ 1037.430968][T22115] Uninit was stored to memory at: [ 1037.435975][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.441679][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.446625][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.451750][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.456666][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.461151][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.465815][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.471890][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.478034][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.483214][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.488060][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.492544][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.498853][T22115] [ 1037.501156][T22115] Uninit was stored to memory at: [ 1037.506149][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.511850][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.516767][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.521859][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.526776][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.531275][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.535931][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.541996][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.548132][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.553332][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.558179][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.562666][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.568987][T22115] [ 1037.571301][T22115] Uninit was stored to memory at: [ 1037.576298][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.582014][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.586931][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.592025][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.596958][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.601442][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.606123][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.612185][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.618337][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.623550][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.628398][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.632901][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.639210][T22115] [ 1037.641510][T22115] Uninit was stored to memory at: [ 1037.646504][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1037.652242][T22115] __msan_chain_origin+0x54/0xa0 [ 1037.657165][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1037.662275][T22115] get_compat_msghdr+0x108/0x2b0 [ 1037.667226][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1037.671709][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1037.676377][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.682426][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.688560][T22115] __do_fast_syscall_32+0x127/0x180 [ 1037.693759][T22115] do_fast_syscall_32+0x77/0xd0 [ 1037.698593][T22115] do_SYSENTER_32+0x73/0x90 [ 1037.703080][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.709429][T22115] [ 1037.711728][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1037.718371][T22115] do_recvmmsg+0xbf/0x22d0 [ 1037.722787][T22115] do_recvmmsg+0xbf/0x22d0 [ 1038.042637][T22115] not chained 440000 origins [ 1038.047258][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1038.056003][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.066058][T22115] Call Trace: [ 1038.069496][T22115] dump_stack+0x24c/0x2e0 [ 1038.073829][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1038.079554][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1038.084738][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1038.089832][T22115] ? release_sock+0x26a/0x2d0 [ 1038.094495][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1038.099369][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1038.104549][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1038.110462][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1038.116584][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1038.121834][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1038.127478][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1038.133530][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1038.138801][T22115] ? _copy_from_user+0x1fd/0x300 [ 1038.143739][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.148659][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.153759][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.158691][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.163223][T22115] ? __msan_get_context_state+0x9/0x20 [ 1038.168687][T22115] ? kfree+0x29/0x11f0 [ 1038.172739][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1038.178789][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1038.184507][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1038.189772][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1038.194517][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.199214][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.205268][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.211408][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.216593][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.221426][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.225913][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.232239][T22115] RIP: 0023:0xf7f66549 [ 1038.236285][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1038.255875][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1038.264302][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1038.272259][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1038.280210][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1038.288164][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1038.296137][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1038.304097][T22115] Uninit was stored to memory at: [ 1038.309120][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.314823][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.319792][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.324906][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.329833][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.334341][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.339001][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.345047][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.351183][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.356378][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.361215][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.365706][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.372026][T22115] [ 1038.374327][T22115] Uninit was stored to memory at: [ 1038.379319][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.385020][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.389937][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.395046][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.399971][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.404465][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.409122][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.415175][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.421315][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.426509][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.431372][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.435864][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.442196][T22115] [ 1038.444516][T22115] Uninit was stored to memory at: [ 1038.449508][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.455210][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.460129][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.465228][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.470203][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.474695][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.479354][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.485419][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.491556][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.496737][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.501569][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.506064][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.512385][T22115] [ 1038.514682][T22115] Uninit was stored to memory at: [ 1038.519685][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.525481][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.530422][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.535523][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.540461][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.544976][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.549657][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.555707][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.561877][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.567062][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.571936][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.576423][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.582745][T22115] [ 1038.585061][T22115] Uninit was stored to memory at: [ 1038.590098][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.595819][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.600737][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.605855][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.610790][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.615273][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.619932][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.625998][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.632139][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.637372][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.642221][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.646725][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.653045][T22115] [ 1038.655343][T22115] Uninit was stored to memory at: [ 1038.660343][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.666046][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.670972][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.676104][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.681053][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.685538][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.690195][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.696260][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.702397][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.707580][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.712426][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.716914][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.723227][T22115] [ 1038.725528][T22115] Uninit was stored to memory at: [ 1038.730561][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1038.736262][T22115] __msan_chain_origin+0x54/0xa0 [ 1038.741179][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1038.746274][T22115] get_compat_msghdr+0x108/0x2b0 [ 1038.751212][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1038.755746][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1038.760475][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.766571][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.772746][T22115] __do_fast_syscall_32+0x127/0x180 [ 1038.777976][T22115] do_fast_syscall_32+0x77/0xd0 [ 1038.782820][T22115] do_SYSENTER_32+0x73/0x90 [ 1038.787318][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.793631][T22115] [ 1038.795959][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1038.802614][T22115] do_recvmmsg+0xbf/0x22d0 [ 1038.807029][T22115] do_recvmmsg+0xbf/0x22d0 [ 1039.119247][T22115] not chained 450000 origins [ 1039.123942][T22115] CPU: 1 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1039.132682][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.142741][T22115] Call Trace: [ 1039.146043][T22115] dump_stack+0x24c/0x2e0 [ 1039.150393][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1039.156143][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1039.161399][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1039.166509][T22115] ? release_sock+0x26a/0x2d0 [ 1039.171201][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1039.176040][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1039.181262][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1039.187120][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1039.193171][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1039.198354][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1039.204029][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1039.210077][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1039.215344][T22115] ? _copy_from_user+0x1fd/0x300 [ 1039.220268][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.225189][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.230326][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.235249][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.239738][T22115] ? __msan_get_context_state+0x9/0x20 [ 1039.245179][T22115] ? kfree+0x29/0x11f0 [ 1039.249254][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1039.255319][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1039.260950][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1039.266226][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1039.271018][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.275680][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.281739][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.287902][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.293112][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.297955][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.302500][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.308822][T22115] RIP: 0023:0xf7f66549 [ 1039.312901][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1039.332521][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1039.340966][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1039.348937][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.356893][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1039.364872][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1039.372826][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.380780][T22115] Uninit was stored to memory at: [ 1039.385779][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.391516][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.396441][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.401562][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.406498][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.410983][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.415639][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.421688][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.427840][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.433021][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.437855][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.442381][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.448701][T22115] [ 1039.451033][T22115] Uninit was stored to memory at: [ 1039.456029][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.461769][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.466689][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.471818][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.476742][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.481253][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.485921][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.491998][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.498140][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.503348][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.508216][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.512716][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.519034][T22115] [ 1039.521337][T22115] Uninit was stored to memory at: [ 1039.526331][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.532032][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.536967][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.542116][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.547055][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.551556][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.556217][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.562298][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.568461][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.573681][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.578520][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.583054][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.589411][T22115] [ 1039.591734][T22115] Uninit was stored to memory at: [ 1039.596783][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.602529][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.607450][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.612545][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.617465][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.621974][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.626664][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.632732][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.638876][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.644091][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.648956][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.653445][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.659755][T22115] [ 1039.662055][T22115] Uninit was stored to memory at: [ 1039.667054][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.672755][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.677675][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.682794][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.687731][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.692221][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.696888][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.702968][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.709160][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.714343][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.719174][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.723658][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.729966][T22115] [ 1039.732266][T22115] Uninit was stored to memory at: [ 1039.737266][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.743009][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.747943][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.753037][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.758001][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.762511][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.767169][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.773219][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.779355][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.784537][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.789406][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.793925][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.800239][T22115] [ 1039.802559][T22115] Uninit was stored to memory at: [ 1039.807567][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1039.813282][T22115] __msan_chain_origin+0x54/0xa0 [ 1039.818206][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1039.823326][T22115] get_compat_msghdr+0x108/0x2b0 [ 1039.828250][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1039.832747][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1039.837428][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1039.843501][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1039.849636][T22115] __do_fast_syscall_32+0x127/0x180 [ 1039.854816][T22115] do_fast_syscall_32+0x77/0xd0 [ 1039.859648][T22115] do_SYSENTER_32+0x73/0x90 [ 1039.864149][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1039.870461][T22115] [ 1039.872762][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1039.879412][T22115] do_recvmmsg+0xbf/0x22d0 [ 1039.883839][T22115] do_recvmmsg+0xbf/0x22d0 [ 1040.167365][T22115] not chained 460000 origins [ 1040.172140][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1040.180886][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.190924][T22115] Call Trace: [ 1040.194184][T22115] dump_stack+0x24c/0x2e0 [ 1040.198534][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1040.204238][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1040.209423][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1040.214520][T22115] ? release_sock+0x26a/0x2d0 [ 1040.219181][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1040.224019][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1040.229197][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1040.234986][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1040.241049][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1040.246244][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1040.251859][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1040.257924][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1040.263207][T22115] ? _copy_from_user+0x1fd/0x300 [ 1040.268148][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.273069][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.278210][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.283135][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.287626][T22115] ? __msan_get_context_state+0x9/0x20 [ 1040.293065][T22115] ? kfree+0x29/0x11f0 [ 1040.297166][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1040.303257][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1040.308877][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1040.314177][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1040.318935][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.323596][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.329664][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.335802][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.341002][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.345858][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.350345][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.356659][T22115] RIP: 0023:0xf7f66549 [ 1040.360707][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1040.380296][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1040.388700][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1040.396683][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.404635][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.412603][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1040.420581][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1040.428568][T22115] Uninit was stored to memory at: [ 1040.433565][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.439282][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.444235][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.449327][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.454245][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.458759][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.463418][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.469481][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.475617][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.480799][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.485633][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.490220][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.496608][T22115] [ 1040.498922][T22115] Uninit was stored to memory at: [ 1040.503925][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.509624][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.514547][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.519680][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.524599][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.529089][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.533751][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.539798][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.545932][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.551111][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.555943][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.560427][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.566750][T22115] [ 1040.569049][T22115] Uninit was stored to memory at: [ 1040.574038][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.579753][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.584732][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.589849][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.594782][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.599265][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.603922][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.609967][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.616110][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.621330][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.626167][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.630724][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.637067][T22115] [ 1040.639382][T22115] Uninit was stored to memory at: [ 1040.644372][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.650086][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.655005][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.660113][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.665037][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.669536][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.674203][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.680258][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.686405][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.691589][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.696437][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.700938][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.707276][T22115] [ 1040.709578][T22115] Uninit was stored to memory at: [ 1040.714574][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.720280][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.725242][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.730335][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.735253][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.739740][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.744396][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.750472][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.756608][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.761804][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.766635][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.771125][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.777435][T22115] [ 1040.779739][T22115] Uninit was stored to memory at: [ 1040.784730][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.790447][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.795365][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.800455][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.805375][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.809859][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.814520][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.820573][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.826764][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.831967][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.836802][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.841403][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.847719][T22115] [ 1040.850019][T22115] Uninit was stored to memory at: [ 1040.855008][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1040.860707][T22115] __msan_chain_origin+0x54/0xa0 [ 1040.865622][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1040.870728][T22115] get_compat_msghdr+0x108/0x2b0 [ 1040.875647][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1040.880160][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1040.884816][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1040.890862][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1040.896997][T22115] __do_fast_syscall_32+0x127/0x180 [ 1040.902177][T22115] do_fast_syscall_32+0x77/0xd0 [ 1040.907009][T22115] do_SYSENTER_32+0x73/0x90 [ 1040.911491][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1040.917800][T22115] [ 1040.920100][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1040.926766][T22115] do_recvmmsg+0xbf/0x22d0 [ 1040.931181][T22115] do_recvmmsg+0xbf/0x22d0 [ 1041.223321][T22115] not chained 470000 origins [ 1041.227912][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1041.236655][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.246696][T22115] Call Trace: [ 1041.250006][T22115] dump_stack+0x24c/0x2e0 [ 1041.254386][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1041.260121][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1041.265331][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1041.270550][T22115] ? release_sock+0x26a/0x2d0 [ 1041.275224][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1041.280099][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1041.285298][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1041.291105][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1041.297171][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1041.302360][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1041.307975][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1041.314023][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1041.319287][T22115] ? _copy_from_user+0x1fd/0x300 [ 1041.324236][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.329160][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.334281][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.339233][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.343760][T22115] ? __msan_get_context_state+0x9/0x20 [ 1041.349238][T22115] ? kfree+0x29/0x11f0 [ 1041.353305][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1041.359370][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1041.364999][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1041.370267][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1041.375042][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.379736][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.385819][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.391975][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.397159][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.401997][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.406479][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.412803][T22115] RIP: 0023:0xf7f66549 [ 1041.416869][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1041.436464][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1041.444893][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1041.452847][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1041.460798][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1041.468747][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1041.476696][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1041.484652][T22115] Uninit was stored to memory at: [ 1041.489644][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.495346][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.500264][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.505361][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.510281][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.514794][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.519455][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.525531][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.531697][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.536884][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.541760][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.546247][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.552588][T22115] [ 1041.554885][T22115] Uninit was stored to memory at: [ 1041.559877][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.565611][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.570576][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.575670][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.580603][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.585086][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.589757][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.595807][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.601944][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.607125][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.611971][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.616465][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.622812][T22115] [ 1041.625114][T22115] Uninit was stored to memory at: [ 1041.630108][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.635827][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.640768][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.645891][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.650841][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.655322][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.659981][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.666044][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.672184][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.677375][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.682220][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.686723][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.693035][T22115] [ 1041.695335][T22115] Uninit was stored to memory at: [ 1041.700328][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.706067][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.710988][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.716079][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.721023][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.725502][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.730156][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.736204][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.742345][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.747570][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.752407][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.756908][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.763222][T22115] [ 1041.765520][T22115] Uninit was stored to memory at: [ 1041.770514][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.776218][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.781137][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.786231][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.791156][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.795662][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.800348][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.806405][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.812556][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.817739][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.822589][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.827122][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.833434][T22115] [ 1041.835734][T22115] Uninit was stored to memory at: [ 1041.840730][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.846431][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.851377][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.856485][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.861434][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.865931][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.870586][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.876632][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.882767][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.887946][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.892779][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.897264][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.903589][T22115] [ 1041.905889][T22115] Uninit was stored to memory at: [ 1041.910883][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1041.916583][T22115] __msan_chain_origin+0x54/0xa0 [ 1041.921500][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1041.926601][T22115] get_compat_msghdr+0x108/0x2b0 [ 1041.931532][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1041.936024][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1041.940697][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1041.946751][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1041.952970][T22115] __do_fast_syscall_32+0x127/0x180 [ 1041.958152][T22115] do_fast_syscall_32+0x77/0xd0 [ 1041.963004][T22115] do_SYSENTER_32+0x73/0x90 [ 1041.967503][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1041.973846][T22115] [ 1041.976160][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1041.982817][T22115] do_recvmmsg+0xbf/0x22d0 [ 1041.987229][T22115] do_recvmmsg+0xbf/0x22d0 [ 1042.301237][T22115] not chained 480000 origins [ 1042.305827][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1042.314621][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.324664][T22115] Call Trace: [ 1042.327939][T22115] dump_stack+0x24c/0x2e0 [ 1042.332256][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1042.337967][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1042.343160][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1042.348271][T22115] ? release_sock+0x26a/0x2d0 [ 1042.352935][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1042.357775][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1042.362989][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1042.368829][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1042.374874][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1042.380070][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1042.385689][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1042.391740][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1042.397006][T22115] ? _copy_from_user+0x1fd/0x300 [ 1042.401927][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.406843][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.411954][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.416890][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.421381][T22115] ? __msan_get_context_state+0x9/0x20 [ 1042.426821][T22115] ? kfree+0x29/0x11f0 [ 1042.430874][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1042.436919][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1042.442533][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1042.447805][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1042.452559][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.457223][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.463303][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.469463][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.474671][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.479504][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.484013][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.490347][T22115] RIP: 0023:0xf7f66549 [ 1042.494410][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1042.514024][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1042.522443][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1042.530394][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1042.538361][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1042.546316][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1042.554284][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.562260][T22115] Uninit was stored to memory at: [ 1042.567273][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.572978][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.577910][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.583030][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.587949][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.592434][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.597125][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.603197][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.609332][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.614526][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.619363][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.623846][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.630156][T22115] [ 1042.632469][T22115] Uninit was stored to memory at: [ 1042.637464][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.643220][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.648169][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.653274][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.658194][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.662677][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.667335][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.673389][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.679524][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.684713][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.689542][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.694027][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.700349][T22115] [ 1042.702647][T22115] Uninit was stored to memory at: [ 1042.707649][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.713365][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.718322][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.723428][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.728356][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.732871][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.737555][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.743619][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.749753][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.754934][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.759777][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.764265][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.770586][T22115] [ 1042.772892][T22115] Uninit was stored to memory at: [ 1042.777887][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.783603][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.788590][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.793688][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.798607][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.803094][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.807750][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.813811][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.819945][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.825126][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.829971][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.834456][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.840766][T22115] [ 1042.843070][T22115] Uninit was stored to memory at: [ 1042.848059][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.853758][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.858683][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.863799][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.868737][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.873282][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.877946][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.883996][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.890141][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.895323][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.900164][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.904651][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.910976][T22115] [ 1042.913277][T22115] Uninit was stored to memory at: [ 1042.918269][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.923980][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.929017][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1042.934129][T22115] get_compat_msghdr+0x108/0x2b0 [ 1042.939063][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1042.943555][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1042.948235][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1042.954286][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1042.960424][T22115] __do_fast_syscall_32+0x127/0x180 [ 1042.965627][T22115] do_fast_syscall_32+0x77/0xd0 [ 1042.970481][T22115] do_SYSENTER_32+0x73/0x90 [ 1042.975015][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1042.981345][T22115] [ 1042.983650][T22115] Uninit was stored to memory at: [ 1042.988668][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1042.994381][T22115] __msan_chain_origin+0x54/0xa0 [ 1042.999316][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.004412][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.009337][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.013862][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.018524][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.024577][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.030729][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.035929][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.040772][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.045263][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.051573][T22115] [ 1043.053885][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1043.060539][T22115] do_recvmmsg+0xbf/0x22d0 [ 1043.064945][T22115] do_recvmmsg+0xbf/0x22d0 [ 1043.353216][T22115] not chained 490000 origins [ 1043.357805][T22115] CPU: 0 PID: 22115 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1043.366546][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.376579][T22115] Call Trace: [ 1043.379849][T22115] dump_stack+0x24c/0x2e0 [ 1043.384222][T22115] kmsan_internal_chain_origin+0x6f/0x130 [ 1043.389956][T22115] ? __local_bh_enable_ip+0x7d/0xb0 [ 1043.395162][T22115] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1043.400259][T22115] ? release_sock+0x26a/0x2d0 [ 1043.404937][T22115] ? sctp_recvmsg+0x109a/0x14c0 [ 1043.409800][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1043.414991][T22115] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1043.420789][T22115] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1043.426839][T22115] ? kmsan_get_metadata+0x116/0x180 [ 1043.432017][T22115] ? kmsan_set_origin_checked+0xa2/0x100 [ 1043.437667][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1043.443715][T22115] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1043.449089][T22115] ? _copy_from_user+0x1fd/0x300 [ 1043.454014][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.458931][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.464028][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.468989][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.473477][T22115] ? __msan_get_context_state+0x9/0x20 [ 1043.478917][T22115] ? kfree+0x29/0x11f0 [ 1043.482994][T22115] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1043.489075][T22115] ? kmsan_internal_set_origin+0x82/0xc0 [ 1043.494703][T22115] ? __msan_poison_alloca+0xec/0x110 [ 1043.500001][T22115] ? __sys_recvmmsg+0xb5/0x6f0 [ 1043.504746][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.509418][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.515469][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.521608][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.526834][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.531668][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.536172][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.542501][T22115] RIP: 0023:0xf7f66549 [ 1043.546547][T22115] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1043.566172][T22115] RSP: 002b:00000000f553f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1043.574565][T22115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1043.582516][T22115] RDX: 00000000ffffff1f RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.590469][T22115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1043.598426][T22115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1043.606398][T22115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1043.614355][T22115] Uninit was stored to memory at: [ 1043.619351][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.625077][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.629995][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.635089][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.640047][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.644547][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.649233][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.655294][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.661446][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.666642][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.671473][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.675973][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.682286][T22115] [ 1043.684585][T22115] Uninit was stored to memory at: [ 1043.689580][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.695322][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.700241][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.705352][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.710274][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.714769][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.719440][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.725492][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.731627][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.736845][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.741702][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.746185][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.752525][T22115] [ 1043.754840][T22115] Uninit was stored to memory at: [ 1043.759834][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.765532][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.770490][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.775587][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.780526][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.785008][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.789673][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.795769][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.801914][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.807129][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.811960][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.816440][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.822748][T22115] [ 1043.825058][T22115] Uninit was stored to memory at: [ 1043.830053][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.835778][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.840697][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.845826][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.850812][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.855297][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.859960][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.866010][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.872159][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.877340][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.882176][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.886668][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.892983][T22115] [ 1043.895301][T22115] Uninit was stored to memory at: [ 1043.900316][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.906031][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.910950][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.916044][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.920963][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.925445][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1043.930128][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1043.936183][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1043.942320][T22115] __do_fast_syscall_32+0x127/0x180 [ 1043.947513][T22115] do_fast_syscall_32+0x77/0xd0 [ 1043.952350][T22115] do_SYSENTER_32+0x73/0x90 [ 1043.956841][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1043.963154][T22115] [ 1043.965453][T22115] Uninit was stored to memory at: [ 1043.970460][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1043.976163][T22115] __msan_chain_origin+0x54/0xa0 [ 1043.981086][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1043.986255][T22115] get_compat_msghdr+0x108/0x2b0 [ 1043.991203][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1043.995707][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1044.000393][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1044.006459][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1044.012598][T22115] __do_fast_syscall_32+0x127/0x180 [ 1044.017781][T22115] do_fast_syscall_32+0x77/0xd0 [ 1044.022616][T22115] do_SYSENTER_32+0x73/0x90 [ 1044.027100][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1044.033428][T22115] [ 1044.035728][T22115] Uninit was stored to memory at: [ 1044.040727][T22115] kmsan_internal_chain_origin+0xad/0x130 [ 1044.046425][T22115] __msan_chain_origin+0x54/0xa0 [ 1044.051409][T22115] __get_compat_msghdr+0x6db/0x9d0 [ 1044.056503][T22115] get_compat_msghdr+0x108/0x2b0 [ 1044.061439][T22115] do_recvmmsg+0xdc1/0x22d0 [ 1044.065941][T22115] __sys_recvmmsg+0x519/0x6f0 [ 1044.070601][T22115] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1044.076663][T22115] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1044.082799][T22115] __do_fast_syscall_32+0x127/0x180 [ 1044.087976][T22115] do_fast_syscall_32+0x77/0xd0 [ 1044.092823][T22115] do_SYSENTER_32+0x73/0x90 [ 1044.097325][T22115] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1044.103668][T22115] [ 1044.105968][T22115] Local variable ----msg_sys@do_recvmmsg created at: [ 1044.112610][T22115] do_recvmmsg+0xbf/0x22d0 [ 1044.117005][T22115] do_recvmmsg+0xbf/0x22d0 14:47:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000fd47870500000000000995"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:47:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 14:47:42 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 14:47:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x2, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:42 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:43 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 14:47:43 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:43 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$rxrpc(r0, 0x0, 0x0) 14:47:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 14:47:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x24) 14:47:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:44 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$unix(r0, &(0x7f0000002600)=[{0x0, 0x0, 0x0}], 0x1, 0x11) 14:47:44 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:44 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x14000) pipe(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001b80)={'gretap0\x00', &(0x7f0000001b00)={'tunl0\x00', 0x0, 0x80, 0x7, 0x8001, 0x5b35, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x1f, 0xd3, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100]}, @timestamp={0x44, 0x8, 0x74, 0x0, 0xb, [0x71]}, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@multicast2, 0x1}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001bc0)={r4, 0x6, 0x8, 0x9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001cc0)={'syztnl1\x00', &(0x7f0000001c40)={'sit0\x00', 0x0, 0x4, 0x7, 0x2, 0x6, 0x48, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x6, 0x9}}) 14:47:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 14:47:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000fd47871000000000000995"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:47:45 executing program 4: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 14:47:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:45 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000040)) 14:47:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa}, 0x40) 14:47:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 14:47:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) 14:47:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:46 executing program 0: mmap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x0, 0x95ef2c55398d5970, 0xffffffffffffffff, 0x0) 14:47:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) 14:47:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x17, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:46 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 14:47:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:46 executing program 0: bpf$BPF_PROG_QUERY(0x23, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:47:46 executing program 3: socket(0x1e, 0x2, 0x0) 14:47:46 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2}, 0xff}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x306, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x8034}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 14:47:47 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 14:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xd13}, 0x14}}, 0x0) [ 1049.901046][T22229] not chained 500000 origins [ 1049.905680][T22229] CPU: 1 PID: 22229 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 1049.914538][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.924611][T22229] Call Trace: [ 1049.927898][T22229] dump_stack+0x24c/0x2e0 [ 1049.932254][T22229] kmsan_internal_chain_origin+0x6f/0x130 [ 1049.937992][T22229] ? kmsan_internal_chain_origin+0xad/0x130 [ 1049.943911][T22229] ? __msan_chain_origin+0x54/0xa0 [ 1049.949036][T22229] ? sctp_chunk_fail+0x119/0x150 [ 1049.954066][T22229] ? __sctp_outq_teardown+0x111e/0x15f0 [ 1049.959632][T22229] ? sctp_outq_free+0x37/0x40 [ 1049.964322][T22229] ? sctp_association_free+0x3f8/0x11b0 [ 1049.969890][T22229] ? sctp_do_sm+0x929b/0xa160 [ 1049.974601][T22229] ? sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1049.980262][T22229] ? sctp_close+0x811/0x1060 [ 1049.984898][T22229] ? inet_release+0x30c/0x390 [ 1049.989729][T22229] ? sock_close+0x150/0x450 [ 1049.994268][T22229] ? __fput+0x6bd/0xf00 [ 1049.998482][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.003701][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.008922][T22229] ? kmsan_set_origin_checked+0xa2/0x100 [ 1050.014579][T22229] ? __msan_instrument_asm_store+0x22/0x130 [ 1050.020490][T22229] ? __msan_get_context_state+0x9/0x20 [ 1050.025965][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.031182][T22229] ? kmsan_set_origin_checked+0xa2/0x100 [ 1050.036839][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.042054][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.047276][T22229] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1050.053105][T22229] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1050.059204][T22229] ? __genradix_ptr+0x8e6/0xbe0 [ 1050.064096][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.069323][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.074554][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.079782][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.084738][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.089538][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.094938][T22229] sctp_outq_free+0x37/0x40 [ 1050.099486][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.104880][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.110095][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.115312][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.119856][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.125071][T22229] ? kmsan_set_origin_checked+0xa2/0x100 [ 1050.130715][T22229] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1050.136805][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.142031][T22229] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1050.147858][T22229] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1050.154029][T22229] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 1050.159854][T22229] ? skb_dequeue+0x253/0x320 [ 1050.164501][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.170031][T22229] sctp_close+0x811/0x1060 [ 1050.174490][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.179709][T22229] ? sctp_destruct_sock+0xa0/0xa0 [ 1050.184751][T22229] inet_release+0x30c/0x390 [ 1050.189317][T22229] sock_close+0x150/0x450 [ 1050.193667][T22229] ? inet_listen+0xaf0/0xaf0 [ 1050.198276][T22229] ? sock_mmap+0x120/0x120 [ 1050.202718][T22229] __fput+0x6bd/0xf00 [ 1050.206745][T22229] ____fput+0x37/0x40 [ 1050.210743][T22229] ? fput_many+0x360/0x360 [ 1050.215174][T22229] task_work_run+0x140/0x280 [ 1050.219913][T22229] get_signal+0x37d2/0x39e0 [ 1050.224465][T22229] ? __sys_sendmsg+0x810/0x830 [ 1050.229249][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.234482][T22229] ? kmsan_internal_set_origin+0x82/0xc0 [ 1050.240134][T22229] ? __msan_poison_alloca+0xec/0x110 [ 1050.245448][T22229] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1050.251334][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.256967][T22229] ? kmsan_get_metadata+0x116/0x180 [ 1050.262184][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.267907][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.273435][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.278652][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.283520][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.288035][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.294406][T22229] RIP: 0023:0xf7f64549 [ 1050.298478][T22229] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1050.318094][T22229] RSP: 002b:00000000f54fb5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1050.326523][T22229] RAX: 000000000001a000 RBX: 0000000000000003 RCX: 000000002001afc8 [ 1050.334497][T22229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.342470][T22229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.350444][T22229] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1050.358438][T22229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.366432][T22229] Uninit was stored to memory at: [ 1050.371453][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.377184][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.382134][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.386915][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.392299][T22229] sctp_outq_free+0x37/0x40 [ 1050.396813][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.402242][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.406760][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.412236][T22229] sctp_close+0x811/0x1060 [ 1050.416670][T22229] inet_release+0x30c/0x390 [ 1050.421192][T22229] sock_close+0x150/0x450 [ 1050.425536][T22229] __fput+0x6bd/0xf00 [ 1050.429527][T22229] ____fput+0x37/0x40 [ 1050.433521][T22229] task_work_run+0x140/0x280 [ 1050.438126][T22229] get_signal+0x37d2/0x39e0 [ 1050.442642][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.448206][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.453856][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.459331][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.464547][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.469436][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.473959][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.480307][T22229] [ 1050.482631][T22229] Uninit was stored to memory at: [ 1050.487662][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.493406][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.498351][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.503129][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.508511][T22229] sctp_outq_free+0x37/0x40 [ 1050.513018][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.518437][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.522967][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.528442][T22229] sctp_close+0x811/0x1060 [ 1050.532875][T22229] inet_release+0x30c/0x390 [ 1050.537393][T22229] sock_close+0x150/0x450 [ 1050.541737][T22229] __fput+0x6bd/0xf00 [ 1050.545728][T22229] ____fput+0x37/0x40 [ 1050.549723][T22229] task_work_run+0x140/0x280 [ 1050.554319][T22229] get_signal+0x37d2/0x39e0 [ 1050.558864][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.564417][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.570092][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.575582][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.580795][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.585653][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.590195][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.596535][T22229] [ 1050.598850][T22229] Uninit was stored to memory at: [ 1050.603856][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.609580][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.614525][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.619298][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.624675][T22229] sctp_outq_free+0x37/0x40 [ 1050.629181][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.634563][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.639085][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.644581][T22229] sctp_close+0x811/0x1060 [ 1050.649013][T22229] inet_release+0x30c/0x390 [ 1050.653541][T22229] sock_close+0x150/0x450 [ 1050.657877][T22229] __fput+0x6bd/0xf00 [ 1050.661878][T22229] ____fput+0x37/0x40 [ 1050.665862][T22229] task_work_run+0x140/0x280 [ 1050.670455][T22229] get_signal+0x37d2/0x39e0 [ 1050.674960][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.680514][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.686195][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.691664][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.696873][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.701734][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.706258][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.712598][T22229] [ 1050.714939][T22229] Uninit was stored to memory at: [ 1050.719950][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.725686][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.730634][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.735411][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.740792][T22229] sctp_outq_free+0x37/0x40 [ 1050.745302][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.750687][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.755213][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.760685][T22229] sctp_close+0x811/0x1060 [ 1050.765111][T22229] inet_release+0x30c/0x390 [ 1050.769625][T22229] sock_close+0x150/0x450 [ 1050.773965][T22229] __fput+0x6bd/0xf00 [ 1050.777967][T22229] ____fput+0x37/0x40 [ 1050.781952][T22229] task_work_run+0x140/0x280 [ 1050.786556][T22229] get_signal+0x37d2/0x39e0 [ 1050.791070][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.796638][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.802283][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.807754][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.812975][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.817856][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.822366][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.828756][T22229] [ 1050.831072][T22229] Uninit was stored to memory at: [ 1050.836097][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.841849][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.846790][T22229] sctp_chunk_fail+0x119/0x150 [ 1050.851563][T22229] __sctp_outq_teardown+0x111e/0x15f0 [ 1050.856942][T22229] sctp_outq_free+0x37/0x40 [ 1050.861452][T22229] sctp_association_free+0x3f8/0x11b0 [ 1050.866866][T22229] sctp_do_sm+0x929b/0xa160 [ 1050.871388][T22229] sctp_primitive_SHUTDOWN+0x175/0x1a0 [ 1050.876859][T22229] sctp_close+0x811/0x1060 [ 1050.881284][T22229] inet_release+0x30c/0x390 [ 1050.885801][T22229] sock_close+0x150/0x450 [ 1050.890137][T22229] __fput+0x6bd/0xf00 [ 1050.894122][T22229] ____fput+0x37/0x40 [ 1050.898138][T22229] task_work_run+0x140/0x280 [ 1050.902736][T22229] get_signal+0x37d2/0x39e0 [ 1050.907241][T22229] arch_do_signal_or_restart+0xa4/0xe10 [ 1050.912819][T22229] exit_to_user_mode_prepare+0x2d2/0x560 [ 1050.918460][T22229] syscall_exit_to_user_mode+0x35/0x60 [ 1050.923928][T22229] __do_fast_syscall_32+0x14f/0x180 [ 1050.929248][T22229] do_fast_syscall_32+0x77/0xd0 [ 1050.934116][T22229] do_SYSENTER_32+0x73/0x90 [ 1050.938645][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1050.944984][T22229] [ 1050.947301][T22229] Uninit was stored to memory at: [ 1050.952311][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1050.958040][T22229] __msan_chain_origin+0x54/0xa0 [ 1050.962987][T22229] sctp_datamsg_from_user+0x1d3c/0x2470 [ 1050.968548][T22229] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 1050.973949][T22229] sctp_sendmsg+0x35a5/0x5c60 [ 1050.978638][T22229] inet_sendmsg+0x15b/0x1d0 [ 1050.983155][T22229] ____sys_sendmsg+0xcfc/0x12f0 [ 1050.988023][T22229] __sys_sendmsg+0x714/0x830 [ 1050.992622][T22229] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1050.997926][T22229] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1051.003391][T22229] __do_fast_syscall_32+0x127/0x180 [ 1051.008602][T22229] do_fast_syscall_32+0x77/0xd0 [ 1051.013464][T22229] do_SYSENTER_32+0x73/0x90 [ 1051.017978][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1051.024313][T22229] [ 1051.026644][T22229] Uninit was stored to memory at: [ 1051.031656][T22229] kmsan_internal_chain_origin+0xad/0x130 [ 1051.037394][T22229] __msan_chain_origin+0x54/0xa0 [ 1051.042351][T22229] sctp_datamsg_from_user+0x35a/0x2470 [ 1051.047822][T22229] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 1051.053217][T22229] sctp_sendmsg+0x35a5/0x5c60 [ 1051.057904][T22229] inet_sendmsg+0x15b/0x1d0 [ 1051.062415][T22229] ____sys_sendmsg+0xcfc/0x12f0 [ 1051.067271][T22229] __sys_sendmsg+0x714/0x830 [ 1051.071869][T22229] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1051.077160][T22229] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1051.082625][T22229] __do_fast_syscall_32+0x127/0x180 [ 1051.087832][T22229] do_fast_syscall_32+0x77/0xd0 [ 1051.092689][T22229] do_SYSENTER_32+0x73/0x90 [ 1051.097212][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1051.103559][T22229] [ 1051.105874][T22229] Uninit was created at: [ 1051.110105][T22229] kmsan_internal_poison_shadow+0x66/0xd0 [ 1051.115842][T22229] kmsan_slab_alloc+0x8e/0xe0 [ 1051.120526][T22229] kmem_cache_alloc_trace+0x8c7/0x1030 [ 1051.125997][T22229] sctp_datamsg_from_user+0xf7/0x2470 [ 1051.131380][T22229] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 1051.136763][T22229] sctp_sendmsg+0x35a5/0x5c60 [ 1051.141464][T22229] inet_sendmsg+0x15b/0x1d0 [ 1051.145979][T22229] ____sys_sendmsg+0xcfc/0x12f0 [ 1051.150835][T22229] __sys_sendmsg+0x714/0x830 [ 1051.155443][T22229] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1051.160740][T22229] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1051.166214][T22229] __do_fast_syscall_32+0x127/0x180 [ 1051.171430][T22229] do_fast_syscall_32+0x77/0xd0 [ 1051.176287][T22229] do_SYSENTER_32+0x73/0x90 [ 1051.180798][T22229] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 14:47:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:50 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) 14:47:50 executing program 0: pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000cf000000000000000000fd23870500000000000995"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa9) 14:47:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 14:47:50 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 14:47:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x22, 0x0, 0x0) 14:47:50 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:50 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}, {{@in=@private}, 0x0, @in6=@mcast2}}, 0xe8) 14:47:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) 14:47:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 14:47:51 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x24) 14:47:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x24008800) 14:47:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x14, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x87}}, 0x0) 14:47:52 executing program 5: pipe(&(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 14:47:52 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1053.684805][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1053.828957][ T34] audit: type=1804 audit(1625669272.260:5): pid=22268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir354229351/syzkaller.sDcWKd/439/cgroup.controllers" dev="sda1" ino=14081 res=1 errno=0 14:47:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x24008800) 14:47:52 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) 14:47:52 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1d}, 0x40) 14:47:52 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 14:47:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x24008800) 14:47:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x7b6}, 0x40) 14:47:54 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) 14:47:54 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 14:47:54 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 14:47:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:54 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 14:47:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4098812, r0, 0x0) 14:47:54 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) connect$rxrpc(r0, 0x0, 0x0) 14:47:54 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:54 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 14:47:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 14:47:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xd13}, 0x14}}, 0x0) 14:47:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:56 executing program 3: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) 14:47:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0xffffffff, 0x4) 14:47:56 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:47:56 executing program 4: socketpair(0x25, 0x1, 0x7fffffff, &(0x7f0000000140)) 14:47:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$inet6(r0, 0x0, &(0x7f0000000280)) 14:47:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xfffffff7, 0x0, 0x7b6, 0x40}, 0x40) 14:47:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) 14:47:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:47:58 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) 14:47:58 executing program 3: bpf$BPF_PROG_QUERY(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:47:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x20048804, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 14:47:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 14:47:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:47:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x11, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x40) 14:47:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:47:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x20048804, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 14:47:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x11, 0x0, 0x8}, 0x40) 14:47:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x0, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:00 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) 14:48:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x11}, 0x40) 14:48:00 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 14:48:00 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x24, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:48:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) 14:48:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x4}, 0x40) 14:48:00 executing program 4: pipe(&(0x7f0000001440)={0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001480), 0x2, 0x0) 14:48:00 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) [ 1062.441311][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.447950][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 14:48:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 14:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x0, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8}, 0x40) 14:48:02 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) 14:48:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="183e261a00000000000000000000fd47870500000000000995"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) 14:48:02 executing program 4: socketpair(0x0, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 14:48:02 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) bind$nfc_llcp(r0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000480)=@ethernet, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 14:48:02 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:48:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:02 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) 14:48:03 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x15) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) [ 1065.209344][T22455] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1065.264524][T22457] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 14:48:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x0, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:04 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "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"}, 0x1000) 14:48:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x14, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x34}}, 0x0) 14:48:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:04 executing program 3: pipe(&(0x7f0000001a00)) 14:48:05 executing program 5: bpf$BPF_PROG_QUERY(0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) [ 1066.743191][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:48:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:05 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x3, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:48:05 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) 14:48:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xc2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)) 14:48:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000440)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) 14:48:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x20048804, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) close(r0) 14:48:07 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 14:48:07 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) close(r0) 14:48:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0x2, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 14:48:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:07 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 14:48:07 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1, 0x0, @remote}}, 0x24) 14:48:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x48, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:07 executing program 4: bpf$BPF_PROG_QUERY(0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:48:07 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) close(r0) 14:48:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xfffffff7, 0x29a, 0x7b6, 0x40}, 0x40) 14:48:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x401, 0x4) 14:48:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:09 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) 14:48:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8}, 0x40) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf2501000000080002000500000028000180060005004e2300001400040000000000000000000000000000000001080006000300000030000180060005004e20000014000400fc02000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB="0800a97a", @ANYRES32=0x0, @ANYBLOB="080003000000000008000200070000000800020001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xfb, 0x5, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x40, 0x80, 0x0, 0x1b5d}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x2f, 0xee, 0xf, 0x4, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0xc0, 0x1, 0x4, 0xffffffff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2b}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000480)={{0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x6, [0x7fffffff, 0x853, 0xfffffffe, 0x2, 0x8001, 0x0, 0x4, 0xc9f0]}, 0x5c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0xe05, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8e50}]}, 0x60}, 0x1, 0x0, 0x0, 0x240409dc}, 0x40000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3a4b41657ddf185d}, 0x8040) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl2\x00', r3, 0x4, 0xee, 0x7, 0x1289, 0x8, @private2, @loopback, 0x8, 0x10, 0x1}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44810}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) 14:48:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 14:48:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)) 14:48:09 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:48:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x9, 0x5, 0x7, 0x663, 0xa, 0x1}, 0x40) 14:48:09 executing program 4: bpf$BPF_PROG_QUERY(0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0}, 0x20) 14:48:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0xb0d, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 14:48:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14}, 0x93) 14:48:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x5, 0x4) 14:48:11 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 14:48:11 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x23) 14:48:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x24008800) 14:48:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, &(0x7f0000009f80)=[{&(0x7f0000007c80)=""/224, 0xe0}, {&(0x7f0000007d80)=""/132, 0x84}, {&(0x7f0000007e40)}, {&(0x7f0000007e80)=""/4096, 0x1000}, {&(0x7f0000008e80)=""/4096, 0x1000}, {&(0x7f0000009e80)=""/216, 0xd8}], 0x6}, 0x5c1036ab}], 0x1, 0x400101a0, &(0x7f000000b580)={0x0, 0x3938700}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b600), r0) 14:48:12 executing program 5: r0 = socket$inet6(0x2, 0x3, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 14:48:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="71a499246307dd02a1c9e8f7765de87832d76790bff127e1fa8d6e2344300e57", 0x20, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c) [ 1074.055517][T22582] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1074.064333][T22582] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x24008800) 14:48:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x0, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 14:48:13 executing program 4: bpf$BPF_PROG_QUERY(0x12, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:48:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:13 executing program 0: bpf$BPF_PROG_QUERY(0x1d, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:48:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1075.530475][T22610] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1075.540707][T22610] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:14 executing program 0: clock_gettime(0x2, &(0x7f0000000c80)) 14:48:14 executing program 4: r0 = socket$inet6(0x2, 0x1, 0x0) getpeername$l2tp6(r0, 0x0, 0x0) 14:48:14 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001d00)={&(0x7f00000004c0)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x18}, 0x0) 14:48:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') 14:48:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2, 0x79}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) [ 1076.574434][T22627] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1076.582951][T22627] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x0, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) 14:48:16 executing program 1: socketpair(0x29, 0x2, 0x9, &(0x7f0000000040)) 14:48:16 executing program 5: r0 = socket$inet6(0x2, 0x1, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000040)) 14:48:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@remote]}, 0x18) [ 1078.083198][T22640] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1078.083272][T22640] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:16 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 14:48:16 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x80000001}, 0x8) 14:48:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x18, 0x6, &(0x7f0000000380)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x10}, @alu={0x4, 0x0, 0x6}, @exit]}, &(0x7f0000004f00)='GPL\x00', 0x4, 0xf3, &(0x7f0000000280)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:48:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x0, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:18 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@remote, @private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x100}) 14:48:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=@framed={{}, [@func]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x100, &(0x7f0000000600)=""/256, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0xe5e, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 14:48:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012bbd7000eedbdf2505400004067e"], 0x30}}, 0x0) 14:48:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:18 executing program 1: ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 14:48:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 14:48:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@call]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1080.343580][T22679] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1080.401958][T22681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 14:48:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x4}, 0x40) 14:48:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x0, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) 14:48:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000380)) 14:48:20 executing program 1: ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) 14:48:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x0, 0x1, &(0x7f00000023c0)=@raw=[@generic], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 14:48:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 14:48:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="17"], 0x1c}}, 0x0) 14:48:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:48:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012bbd70000100000073"], 0x30}}, 0x0) 14:48:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x7, &(0x7f0000000080)=@framed={{}, [@alu, @ldst, @initr0]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x0, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:22 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x5d, 'cma\x00'}]}, 0x18}}, 0x0) 14:48:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x14, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x73000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 14:48:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="17"], 0x1c}}, 0x0) 14:48:22 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:23 executing program 0: bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) [ 1084.672055][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1084.725802][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001700)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @dev}}, {0x20, 0x2, @in6={0x2, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) [ 1085.254990][T22776] tipc: Started in network mode [ 1085.260251][T22776] tipc: Node identity , cluster identity 4711 [ 1085.268925][T22776] tipc: Failed to set node id, please configure manually [ 1085.276108][T22776] tipc: Enabling of bearer rejected, failed to enable media [ 1085.315264][T22777] tipc: Started in network mode [ 1085.320501][T22777] tipc: Node identity , cluster identity 4711 [ 1085.326686][T22777] tipc: Failed to set node id, please configure manually [ 1085.334436][T22777] tipc: Enabling of bearer rejected, failed to enable media 14:48:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x0, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @remote}}}}) 14:48:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302b71f9856690607f50400000018000180140063"], 0x30}}, 0x0) 14:48:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000001280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x50}, 0x0) 14:48:25 executing program 1: r0 = socket$inet6(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 14:48:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:48:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x0, 0x1, 0x0, 0xd}, 0x20) 14:48:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:25 executing program 1: socketpair(0x2b, 0x1, 0x1, &(0x7f0000000000)) 14:48:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x0, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x54, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @loopback}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) 14:48:27 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1, 0x3, &(0x7f00000010c0)=@framed, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 14:48:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 14:48:27 executing program 1: socketpair(0x22, 0x0, 0x3, &(0x7f0000013440)) [ 1088.974965][T22826] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1088.983553][T22826] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1089.065800][T22828] netlink: 44631 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1089.104973][T22829] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 14:48:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x7f1, 0x0, 0x8}, 0x40) [ 1089.113732][T22829] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:48:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x3b, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 14:48:27 executing program 4: socket$inet6(0x2, 0x3, 0x1) 14:48:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:27 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200), 0x10) [ 1089.641520][T22841] netlink: 44631 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601030000000e00060000000000000600010007"], 0x1c}}, 0x0) [ 1089.997437][T22845] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1090.005666][T22845] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:48:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x0, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:29 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 14:48:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb}, 0x40) 14:48:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, &(0x7f0000009f80)=[{0x0}, {&(0x7f0000007d80)=""/132, 0x84}, {0x0}, {&(0x7f0000007e80)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b600), r0) 14:48:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x42, 0x0) [ 1091.282975][T22861] netlink: 44631 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 14:48:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7c) 14:48:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:48:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:30 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x140f, 0x1}, 0x10}}, 0x0) [ 1091.924745][T22875] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x8, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 14:48:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x0, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0xc0, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}}, 0x0) 14:48:31 executing program 1: socketpair(0x15, 0x5, 0xb2, &(0x7f00000001c0)) 14:48:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 14:48:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:31 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) [ 1093.679506][T22892] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:32 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x19, 0x4, 0x8, 0x6}, 0x40) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x7, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:48:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x100, &(0x7f0000000600)=""/256, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:32 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 14:48:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES64], 0x30}}, 0x0) 14:48:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1094.433701][T22910] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:32 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001d00)={&(0x7f00000004c0)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@dontfrag={{0x14}}], 0x18}, 0x0) 14:48:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e25, 0x0, @mcast2, 0x2}, 0x1c, 0x0}, 0x0) 14:48:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 14:48:34 executing program 0: sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xf, 0x80000, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000004480)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x48, r3, 0x22e, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) getpeername$packet(r1, &(0x7f0000004b80), &(0x7f0000004bc0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:48:34 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) [ 1095.948060][T22925] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1095.956282][T22925] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:48:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000011000d0400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 14:48:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="71a499246307dd02a1c9e8f7765de87832d76790bff127e1fa8d6e2344300e", 0x1f, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c) 14:48:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) 14:48:34 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:35 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f00000001c0)) [ 1096.697296][T22941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.793350][T22950] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1096.802184][T22950] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1096.830500][T22951] device veth3 entered promiscuous mode [ 1097.382985][T22951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:48:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x0) 14:48:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:36 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001800)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) 14:48:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0xe5e, 0x8}, 0x40) [ 1097.875986][T22994] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1097.884481][T22994] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@map]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xe) 14:48:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x14, &(0x7f0000000000)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0x2, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 14:48:36 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x9}, 0x40) [ 1098.899993][T23019] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1098.908549][T23019] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0xff59}}], 0x18}, 0x0) 14:48:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}) 14:48:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:38 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000112, 0x0) [ 1099.911766][T23041] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1099.920151][T23041] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x3e, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 14:48:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="71a499246307dd02a1c9e8f7765de87832d76790bff127e1fa8d6e2344300e57fe", 0x21, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c) 14:48:38 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 14:48:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 14:48:38 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1100.695913][T23059] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1100.704411][T23059] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:39 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f0000013440)) 14:48:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@tclass={{0x14}}], 0x18}, 0x0) 14:48:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:39 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000200), 0x40) 14:48:39 executing program 3: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x87, &(0x7f00000001c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1101.373323][T23074] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1101.381769][T23074] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:40 executing program 0: socketpair(0x2, 0x1, 0x0, &(0x7f00000000c0)) 14:48:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0}, 0xda) 14:48:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x4}}) 14:48:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0x2, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 14:48:40 executing program 3: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x5, 0x4) [ 1102.277724][T23091] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1102.285961][T23091] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 14:48:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private}}}}) 14:48:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0xbb8) 14:48:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b600), r0) 14:48:41 executing program 3: r0 = socket$inet(0x2, 0x0, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1102.992639][T23111] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1103.001017][T23111] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:41 executing program 5: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000100)) 14:48:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:48:41 executing program 1: bpf$BPF_PROG_QUERY(0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0}, 0x20) 14:48:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:42 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1103.744097][T23129] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1103.752631][T23129] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x40) 14:48:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:42 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4020940d, 0x0) [ 1104.595610][T23147] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1104.604046][T23147] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:43 executing program 0: r0 = socket$inet6(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 14:48:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 14:48:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000008"], 0x18}, 0x0) 14:48:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:43 executing program 0: socketpair(0x10, 0x3, 0x400, &(0x7f0000000000)) [ 1105.447393][T23165] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1105.455779][T23165] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000), 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 14:48:44 executing program 1: r0 = socket$inet6(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 14:48:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000240), 0x4) 14:48:44 executing program 0: ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5421, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) 14:48:44 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1106.076200][T23178] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1106.084785][T23178] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:44 executing program 4: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 14:48:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x0) 14:48:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x30}, 0x0) 14:48:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) 14:48:44 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1106.708897][T23192] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1106.717132][T23192] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000), 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:45 executing program 5: pipe(&(0x7f0000000140)) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 14:48:45 executing program 1: socket$inet6(0x2, 0x3, 0x106) 14:48:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000900)=0x3, 0x4) 14:48:45 executing program 3: socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp_addr={0x44, 0x4}]}}}}}) [ 1107.570690][T23205] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1107.579230][T23205] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) 14:48:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10}, 0x40) 14:48:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast2}}, 0xe8) close(r0) 14:48:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 14:48:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1108.362894][T23225] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1108.371429][T23225] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xa, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01012bbd7000eedbdf250540000406001d00d5d573d107"], 0x30}}, 0x18) 14:48:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000), 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000540)=ANY=[], 0x48) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 14:48:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x87, &(0x7f00000001c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:47 executing program 4: socket$inet6(0x2, 0x1, 0x106) [ 1109.325491][T23239] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1109.335706][T23239] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0xf, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:48:48 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100), 0x4) 14:48:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x200005, 0x4) 14:48:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) 14:48:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:48 executing program 4: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x80000001) [ 1110.337998][T23254] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1110.346258][T23254] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x5000}, 0x0) 14:48:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000040)="c7", 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:48:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r0) 14:48:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x15, &(0x7f0000000000)={{{@in=@multicast2, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0xe8) [ 1111.256330][T23270] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1111.264792][T23270] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0xe5e, 0x8, 0x400}, 0x40) 14:48:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@alu={0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) 14:48:49 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:48:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400020a3, 0x0) [ 1112.013279][T23283] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1112.021837][T23283] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:50 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 14:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) 14:48:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:51 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) 14:48:51 executing program 5: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) [ 1112.723364][T23294] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1112.731721][T23294] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 14:48:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 14:48:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x20f6, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:48:51 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) 14:48:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:51 executing program 5: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0xb, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1113.461502][T23311] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1114.082596][ T34] audit: type=1800 audit(1625669332.518:6): pid=23316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14398 res=0 errno=0 14:48:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:52 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5414, &(0x7f0000000080)=0x3) 14:48:52 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x402c5828, 0x0) 14:48:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu, @map_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @generic, @func]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xdc, &(0x7f00000000c0)=""/220, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1114.436382][T23325] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:52 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0xa7e}, 0x20) 14:48:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@tclass={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}], 0x30}, 0x0) 14:48:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ftruncate(r1, 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 14:48:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1114.814058][ T34] audit: type=1800 audit(1625669333.248:7): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14398 res=0 errno=0 14:48:53 executing program 5: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0xb, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) 14:48:53 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x402c542c, &(0x7f00000001c0)) [ 1115.207239][T23338] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/24, &(0x7f0000000080)=0x18) [ 1115.717210][ T34] audit: type=1800 audit(1625669334.148:8): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15246 res=0 errno=0 14:48:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0x40046607, &(0x7f00000000c0)={0x0, 0xffffffea}) 14:48:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:54 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5437, 0x0) 14:48:54 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000003ec0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e070df1eeac2617105f8fdffffffffffffff66d6b39431eac3ab0000000000000000"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f00000000c0)=@v3={0x3000000, [{0x3f, 0x9f1}, {0x0, 0x81}], 0xee00}, 0x18, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x4000, 0x8) signalfd(r2, &(0x7f0000000440)={[0xab, 0x7]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtfilter={0xa4, 0x2c, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x6}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8e3}, @filter_kind_options=@f_tcindex={{0xc}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3c9}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x43f97082}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x2}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x92}, 0x24040010) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0), 0x4) [ 1116.462566][T23357] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1116.565876][T23361] ptrace attach of "/root/syz-executor.1"[23356] was attempted by "/root/syz-executor.1"[23361] 14:48:55 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000016c0)=[{&(0x7f0000000640)="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", 0x1000}], 0x0, 0x0) 14:48:55 executing program 5: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0xb, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) 14:48:55 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000002a40), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, 0x0) 14:48:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:55 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000003ec0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e070df1eeac2617105f8fdffffffffffffff66d6b39431eac3ab0000000000000000"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f00000000c0)=@v3={0x3000000, [{0x3f, 0x9f1}, {0x0, 0x81}], 0xee00}, 0x18, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x4000, 0x8) signalfd(r2, &(0x7f0000000440)={[0xab, 0x7]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtfilter={0xa4, 0x2c, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x6}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8e3}, @filter_kind_options=@f_tcindex={{0xc}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3c9}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x43f97082}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x2}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x92}, 0x24040010) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0), 0x4) [ 1117.240260][T23376] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 14:48:55 executing program 4: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x20, {0x0, 0x184b, 0x200, 0x6, 0x1}}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000940)={0x0, 0x6, 0x65, 0x1}) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fdd, 0x5, 0x0, 0x884a, 0x100000008200000, 0x0, 0x6, 0x400000000800000, 0xde9, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8) unshare(0x8000600) membarrier(0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01138b816c3c36f4d10010000000100000a32288f7345f8176a2857300f752fb1335a1531104b7a525e400cd43253342000000000e05000000e7ffffff0759dee69ab8e2ac051f8e1ffda092c7679d61b0696c8d35f93e76a6d20072917ab7003dad3506a2b61097f3f27b52a2d8f3188187b9970606e10cc710c39858443e10d536b91336706f0f1cc0e76ef53a8e69546cc61ae1749127550227f9a4e2aec3a82882838cb43a60ee04d814e709f6caf8b4b521514077afb143ca3b857fffb74cbd2e4f526f80be44ea0b577203db9ef965787c5ee76900c1e101f06e54962fb98bfe2d04598b1642b808a7dcc0adcb4098aa2bd47e"], &(0x7f0000000500)=""/226, 0x34, 0xe2, 0x1}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000840)="134f7b71b02bf83d0c3b5858887e95e49a0296e1c4c0fe7984f4f2c712b06218c3b41a32f81c1216e77de1e8094f434feea09ad266c182c48766eb551c2798307341755105c49840d98807ae92fd629a585ea501a550918aeda07507ddd000876eab2cb9d54efe17c76db9e50646e952fabe2f8615cdd51d743cb6ce11964d2c08980468f5df9a3cb02cbcc7b7e1691aac405b5ec17792dac94a0590d11bddddc982ca00912160bdcc335299fb865cd184a3a189d9a47b6ac47dd3827387f283f5558dd8fb2e2151bda7aa0e39ad", 0xce, 0x0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') setns(0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x0073\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x841, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x7b, 0x0, [0x4, 0x0, 0x400000000000000, 0x5]}) mq_getsetattr(r1, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x2}, &(0x7f0000000600)) clone(0x400, &(0x7f0000000680)="6afe53065f5920a6d2fffa9686ec6717015b9da2a40ecc8ee0c91b96c55c707cb4dd955f1a8f6d4938455579be2d8763db2e0a288822406687a2e8d3ce7c1df0589e62b94b015b1c6a1997cbc12e7f38d7a86939417e0e0857b983d3bb17", &(0x7f00000000c0), &(0x7f0000000700), &(0x7f0000000740)="846c717f9b93ee6c4bf331d154dd359341f1847847e63caff049cc255302d837824334d16474ad8991309430f00ddfd82778767d2bc39e0b793d07bf0235cf85182b24460c591cf31c4797afa76fcc8d03ee998fd17eb07eeb5cf30d353eb08f3e1d3fbf5d487e84aa6a432c37b19c10cef229ede349b26e7d4760") dup(r0) mq_getsetattr(r2, &(0x7f00000004c0)={0x800, 0x3fe, 0x101, 0x2}, 0x0) [ 1117.354508][ T34] audit: type=1800 audit(1625669335.788:9): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15010 res=0 errno=0 14:48:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:56 executing program 5: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0xb, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) 14:48:56 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x540c, 0x0) 14:48:56 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000003ec0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e070df1eeac2617105f8fdffffffffffffff66d6b39431eac3ab0000000000000000"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f00000000c0)=@v3={0x3000000, [{0x3f, 0x9f1}, {0x0, 0x81}], 0xee00}, 0x18, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x4000, 0x8) signalfd(r2, &(0x7f0000000440)={[0xab, 0x7]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtfilter={0xa4, 0x2c, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x6}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8e3}, @filter_kind_options=@f_tcindex={{0xc}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3c9}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x43f97082}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x2}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x92}, 0x24040010) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0), 0x4) 14:48:57 executing program 4: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x20, {0x0, 0x184b, 0x200, 0x6, 0x1}}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000940)={0x0, 0x6, 0x65, 0x1}) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fdd, 0x5, 0x0, 0x884a, 0x100000008200000, 0x0, 0x6, 0x400000000800000, 0xde9, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8) unshare(0x8000600) membarrier(0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01138b816c3c36f4d10010000000100000a32288f7345f8176a2857300f752fb1335a1531104b7a525e400cd43253342000000000e05000000e7ffffff0759dee69ab8e2ac051f8e1ffda092c7679d61b0696c8d35f93e76a6d20072917ab7003dad3506a2b61097f3f27b52a2d8f3188187b9970606e10cc710c39858443e10d536b91336706f0f1cc0e76ef53a8e69546cc61ae1749127550227f9a4e2aec3a82882838cb43a60ee04d814e709f6caf8b4b521514077afb143ca3b857fffb74cbd2e4f526f80be44ea0b577203db9ef965787c5ee76900c1e101f06e54962fb98bfe2d04598b1642b808a7dcc0adcb4098aa2bd47e"], &(0x7f0000000500)=""/226, 0x34, 0xe2, 0x1}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000840)="134f7b71b02bf83d0c3b5858887e95e49a0296e1c4c0fe7984f4f2c712b06218c3b41a32f81c1216e77de1e8094f434feea09ad266c182c48766eb551c2798307341755105c49840d98807ae92fd629a585ea501a550918aeda07507ddd000876eab2cb9d54efe17c76db9e50646e952fabe2f8615cdd51d743cb6ce11964d2c08980468f5df9a3cb02cbcc7b7e1691aac405b5ec17792dac94a0590d11bddddc982ca00912160bdcc335299fb865cd184a3a189d9a47b6ac47dd3827387f283f5558dd8fb2e2151bda7aa0e39ad", 0xce, 0x0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') setns(0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x0073\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x841, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x7b, 0x0, [0x4, 0x0, 0x400000000000000, 0x5]}) mq_getsetattr(r1, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x2}, &(0x7f0000000600)) clone(0x400, &(0x7f0000000680)="6afe53065f5920a6d2fffa9686ec6717015b9da2a40ecc8ee0c91b96c55c707cb4dd955f1a8f6d4938455579be2d8763db2e0a288822406687a2e8d3ce7c1df0589e62b94b015b1c6a1997cbc12e7f38d7a86939417e0e0857b983d3bb17", &(0x7f00000000c0), &(0x7f0000000700), &(0x7f0000000740)="846c717f9b93ee6c4bf331d154dd359341f1847847e63caff049cc255302d837824334d16474ad8991309430f00ddfd82778767d2bc39e0b793d07bf0235cf85182b24460c591cf31c4797afa76fcc8d03ee998fd17eb07eeb5cf30d353eb08f3e1d3fbf5d487e84aa6a432c37b19c10cef229ede349b26e7d4760") dup(r0) mq_getsetattr(r2, &(0x7f00000004c0)={0x800, 0x3fe, 0x101, 0x2}, 0x0) [ 1118.724265][T23396] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.927674][ T34] audit: type=1800 audit(1625669337.358:10): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15256 res=0 errno=0 14:48:57 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5456, 0x0) 14:48:57 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000003ec0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e070df1eeac2617105f8fdffffffffffffff66d6b39431eac3ab0000000000000000"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f00000000c0)=@v3={0x3000000, [{0x3f, 0x9f1}, {0x0, 0x81}], 0xee00}, 0x18, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x4000, 0x8) signalfd(r2, &(0x7f0000000440)={[0xab, 0x7]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000480)="3ee2d5e1171244fcd61ede5a371c42dc563c1904280c4ca0cf77d6aa1a353cc4135e449ca8be81af8723d7b78567004a53f89d6c7c53694f864602c4025bc0399e74feffed9ed61558c1a2d256199ecc89e761e1ae6d8ee362308f34eb56e4f76b051b7b857c94d82818fa5a6ed97ff1ef05cefbc92434737562cc0b1594deb4b8977014e4922073bf86aedbe28fc6eed4b49b249bd424da1796f6ed80cf41044a798764e3617cbc61f1b27acb9fe8560cdb57af390e41a0e025c631d79d586ee8cee8461c03eb424bb65c4a512da48b42e396915488a2be4549dbbac3f9e7ca41f703ec2af86dcb30614039d68918dd4ae82132046feece034a2aa2aae355c43a9bc261f6d70b9d5b30b0ae102ff28069e437bb439425e9cedf44ecf9010d3359df474f3be19fd0d2b00aa729393f868e061d79cd4af0f26563c9d465813afa01d1fac33229522cda758cafe748350f58a39e43a7d6c50cc8db988f7b4c02f2b3771a9fb06b01311e34c0a5b6ad33f6dcd31f571e5926b61578b0ac0e0767c6d85449a8a861466038b23e7f27b2244060c7dbb141725caee04025d72b991a10cd7310b611b925dbed72b879f5990bb26c2eee39721f0d51b2b8d9ae6d58e4e0ad1484e8221cfc744cf7031ffed6a7e1834628bf5ba1d7919deb29d7fdf5e472673e9554db6cfbc92a5b4608e95e6dd61615b41c74d89b67748b766a7ba2951ac42ef3a4a10aa9cfbceef8938c82190bf8db8689c3ba1724c9ef72d7e911362383c073da307c2110337505fa9727e8628f00b94441561120f7655001bf8dd80898abf2d671bda57f8760ed0684a2bbd1e72d18018f4a3a9ec3442b4fde1dc673f12d84b555ecd39c2ba636cfacbd29582fcc7c42acfc0bd1a9f4dfdbdbf27147542070c715a008addaec2f36130e52bbbf75c1c5fb11b0cda73a7741dae7ebc2b45fc6c84f1887b46f83137cf1ca65a3f72f55bf23a09c870c7da6a4cfda9177b888aa74b607f73669ac124788ec4ad3e67c0f4d0d569072d7180219b4dc8b5f78f45b0d527c1496184bc60b66c4e3b92703633128004713602148c6d82b62b8509d7a987ef095fd582706410964f9a1f51cdd2cb2e2ab8af5831fcf31e5f101d9e122a38caefd63db2539c4058e9d79061952c863d23a67590e2fc9f37ff22a5a93ece33daf224281379f268bd86a22f0baddf645608ba9cab20297e9d967f66daa8e0fd89be796cf73f23b7ed09d305829e9c84a7bd5a27b6f932fd1b9f18337761cb8234bccde81b39b08141a79004e719a3e1105936d10a4c195b84e09548cb939f4ef4d3e8b4233ea5f890ff6446652a26d9e15244f9008138fc9f3bd191b11cf052a25d1babccd225d5103d06d4bd7dfc9cddcbd0caf1a58214ff0b223282f24b8af53b7c925159729cbd81deb2653a59c7fae2af5d73e22f2a481d4b12d37b975eb4ddb3585199a3e60e3decee63ed7ecb78b4147b632d6739aed44a7b57a05ff49af57f781f8a21da6d8c6744802a17e4464409a4e05fd37b9ea0105b89c6e2d355f9c64c29f171927615608400faf60bcd81796cdf7a11bc920f22f50e45e7e01ef304797c2458f1a02e560d1f33452c9f0c0b085414bdc4db5f421f0cb0419456c8b081781692b56b91c8083f1bb5e0e356bc444d1b55b95ec2212ac40470cfbb7841acdfeaa4538741ff081a5bac93e29eb01cf6d82c97c5083e772eb08f85a72b150f6c6d7bf4cf24bece697537b0136f67aaf9ba8fd50c34a258ebb9ef469d68998f9df516b2fa1ab7198e9f51fca5f215e049d567211b79bd14bec1bf5b507639a78ebba13bd0a25cce182f6dd1587d5e8b22cbd6918f15a965690b38df3aec2abf3c97a5f5fe5c12a23c5c81256da212e10841157fa31373e68a310f4fa59fb59e6151063fc9da328081bcd972d7c72fc860a66ef448919a6a6bba72d5151d570bdd339aa7fc3c1e84c2e101061ad7925cbb79176740b04bf42f396c001c6549cd6be06506aeb2ffa3b429467eb7fd3e416474a5daa48e476146fd4f80d3077edfbe4f84034000f12cc89378d6c86614fccd096931f9f6a8c9b10b4936426bfba75c1a9019a1a80dc105bb453742f142cbf8af5a8793d758363025077c6ce14782e4aa3bc17c9c4989728f9b0f9fc439a3cbb7509ba38f5372ad1dde46c08ea6392effcdf8207fb0224ed5aba0ad957f3a28b7a83077a2340ddb0882103e74291b5d4890f6ce85fa56d36598069b1bb72c64ceac94f1208ea5a477d77660da44743a8aedd30171d5e920e408fa2244ed3970907b5e5d14ed15fc290b8e509b1f8152048c6d32358ffe57da75eb993998ba29447d398c36a7763522e5abfb9a4fb1e6ed4374f3a7f4cc1e372db254261a2a1d3f6bf3a6cf0e796a970c9c687e496842d6171be00512585c4d090d124c745e49cffc160273060f62a08387d9dcef911125fb09605003c7fcf637d8324d745fcc09df7b68e3c70a81474f9bfff372cad28b54b6296bef8741f605eac32925949e3a639a939db70d8df34f4677e171198e601ad7dd92977dce59a1c0e580abad114b8793005ef6eed2ce5b42cbc2a4eb97a4bc776536709d8302c8957fa61f12c5dd1d9d2b60ded610c2ac356f349b55117b8196bfa84a0d34f6747d6886ca8e49a1abf94cbe9684aae04f59706bfc6be521cc5bf0a9d305356a0a640baf16324d38960b82eb9af90980a9b0d7c3f8d541cf3a6b959ee8d3c2b658434e1e7b57f2fc5cf698679e8f0d1d76c34209b47b8b237f25dde94f80364419e4539846aa0ea1da6fbd7a6f7e02cf121e2a79485191e477e84220f7d8e073b6ae5f6c29ab0a388d4bb9bc4423016906444d7c1ad04031008e2e58877b33c7c5f7993e44e74f8865f94470cd26849176d8f241f8d3d4224da39b84ca7fa0f6ca17bc9cde4e22e7a214de765c4889078ff42ce137f7c7b165294b0e100c9a18059e441e9e9d8ae23c505ebd6ca0c28a8f3586c72903cd01ae9a2974fa5155abc24bf9a8d8570c62072516131af72b134d350c1ebfe97e0799dc790cd0e56a5690ecfeefa615239d5243fe34b7ae0dc77a38d834ca637ade2f64917d327e5ea18744dc9ee05d93fe542b9c14349d5baa2cc92d8282b5d2d0df5e786e50bf730617a9182f33351c0671cc3acaff4bb941d26a8f7319a8be9b1f0c953d78b74888babb57c33371960f2df42ef9a72cfbc61fb238af1e00885dbd80e3be88526a2f1b5a6a67a6281fac34b75d3cd1f21230542e75d29697cd56a4460e56c929639dae992566a042a3c0384016a1943d20348ea3e4ac2def642df10264d24e593eb0efb23191310401972cce0d0218a153d9a3f591b6d97128efa865bc3e44bea6c875525eac5bc74e309c3227d0827844a4f24a2d7ac256b72749e4b7ad80e940ccd422c5b7cbd134f5aaaa2b6feba3b3c5a95cbf93cb3dc9d004c77a7ed24ab0c65ce9eef7478040987b5ad570435340fad6f67967e3f1d9158513c3d6217993c027954fe810dc578eda2c1d0ef2fbafb25f8815048b2856e85272760dc034b5b3a5de19a5a556d144a691e830267247f239828f40988530c07ab39307dd69e344196dd0b407010cd54445f8824d857fe0e26d642ee3214b8ec202909cbd08462c24b7b6bc8ca549a7c651b06dc4cbe885abd9027db832271ba88a711e7a74b0e6e2ee001e472827f169bacea9054fc235053d3e5c71713502255b26947d5c6919d13d33e6ae18f98ee8ecd68964d9402da1679447803fe98be437c6f250237f1ebcbee70bb8e54e593c286b13e619f0c0b10103fdaf83829a2ee5a84b7c75cbb963ed7b4e21562ff6205374e72f94c5300bd3b1080b1491ef22a4dfcfc1a8ff1336d0af41cef063e03aab26eecd4c8cd10523b3ffc18ed3f15b4328ede45d5230af4e67bb29beb5b92c50a72dbbddfc2fec8e12d419203500b9381f2aae8523df3706116fae3c7394ec06c7d7952914000d36f06379e9e1dc33bcb44941c08b878a0a8ca763ff27cd5b0ccd9fe8664a1896a42ad0553b3058a45b9f29251d449341039c35ef5e31451fc784284b764ad0a92b8d2e1edf75d5725d69470b6f7eed9f7f94e474812d69c97287f8968f8ccd48571fda7e7b7fadc4e7339fa2d866feb6d6ce448a23f021dc0ad95b3f8067fdb2a15b04fb1d133f6ba0faa97d24cae082f2a23501b12abf683be7c0ecc05f7fbef5a444bf5a35c85bec91c995c66d4a825a800cdf49452e115a855248064df16d644b61a88617adc4f258b7d80e1960f3daeb7fd0f6848e9b86b314919812fb9d5ee232e8e38eba7096cf79687ca45919cb855a6459b8b05b9eb8527def700ac5a07df5617741f8a8bfdcf94128f93b955d2f013fc168cbf840cba734e172eb0f9f0f17cfcad78a3fc11a8dc49e19fff6b049d027368fd6fa9c8bc5ab7d0f8e25c05434bb101eac08a2df51823eca644e79df843f2ba4ca1b6adfb6cc8b40614af39e8805c00fff7c5a1f4500dcbbb1750f039c7fb813360f8555086b9b6e12c7b9448676b14fa8bc4d2953dfe0674adbb2bfa23d131e8cea2a5a0fe93f59c01dc15f13b636c3401a8ec0551d55da30bce2ec426db8d92eb532660692e5e41ea22692104cb8c53955d85cd585c714faa044600456e6ef53c620163ec1c8deda7207d89af35380b36443d22f9a6d5176d908ad038918e9bf1df57def1e3dbca03ccad3807ef638eb553b5e79fb7cf2b6db74f24cf5c5578ca3df9e9a35de0a0e6f494ce09013c2c40f213ea00487121239775a38c68573f3dad6fec66bc0ce067e098452f06c37391f09b73a4acf4c3694373ff2613eb50aa2c07a748aa63ed79b3edd497e10f7e876dfa411775812da6bd79af2773d9d6afc39fa07bb4af552559fdf68d7b010c7919ebe8a15b03eaf1653ff23d4b7f65f70306564da2ac1007668d0de81b2e880da5371557f682ce93fb2a5d3a4d3a08cc2a28766e4aa131287ccbd6abded56ae05f8c218def9d49ae5706b2c443cea91343f338c65edb4c7ac0b595b117a264af4c0c983639ca961dd144cda4c1e12e8ef4c14ceeff9dd007c7d5d5c6dced145abafbf13b58b784efabcd7a2d9c4145a35da8da680496e501b26e6aac31d731c8efc8776a85f4f0de94ac91de724925e5ac245c0481782af711baa331c554ff49aaa5067430019d7d20363f8acb91c92c7c76c3519caca11e7123c9179b3276dca8fc9cbad83d1d424ca400d1ad6ecf0293286e902fa3322796aef6abd5ec7cd2c06c7ce95d53aec02af6ff69f57970b541d6469f7153e547f6a98ba43f363ff024f91f793948f0f8a45fd0ffa267d03fbba1a3de0bfc967ecde3aab93b4c31ce6e1e78843a05b98118b693d22d11356336af13da44d0c9c543a06e1dd83e596ee5d93037cdd38908a5bbd866e2ff700754ed0b2c2bd6cc7232c3803110f6e3d77bfa12214ca2a89e368bfbb1536ed967811a651f999aa2a659ccd146baefd7a2282b0036da5441ea48b2b4d81a261494c953b593f8739b105b1e5bc7167d7f6a22ce1d02d999e5ba81e2f335c06145dfa08997e94ffa056a2a593d2fee5a461ce264157a21c71a586e95f2266c14fcb4d6929ffa9a792412d71aae020ddaafc2157e28b70150c6c99c393b5e03142a2a41add238f63dbb8f596f26052d690a6151b57bf29335bc28baf6cf9e9090e16cf7cc41c9dd26c2a3e579f6b20f20ee3e3afdb8185f39a253f87d0b1e9211fcf46d0e992d338f2b127f0f430ed3398a4f4e1e516edd2ec22f0436ddba9d3e355d753c26d2e3", 0x1000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtfilter={0xa4, 0x2c, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x6}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8e3}, @filter_kind_options=@f_tcindex={{0xc}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3c9}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x43f97082}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x2}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x92}, 0x24040010) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0), 0x4) [ 1119.027611][T23404] ptrace attach of "/root/syz-executor.1"[23399] was attempted by "/root/syz-executor.1"[23404] 14:48:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1119.903322][T23415] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r0, 0x545d, 0x0) 14:48:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)=0xfffffffffffffcf4) 14:48:58 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5452, 0x0) 14:48:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:48:59 executing program 4: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x20, {0x0, 0x184b, 0x200, 0x6, 0x1}}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000940)={0x0, 0x6, 0x65, 0x1}) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fdd, 0x5, 0x0, 0x884a, 0x100000008200000, 0x0, 0x6, 0x400000000800000, 0xde9, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8) unshare(0x8000600) membarrier(0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01138b816c3c36f4d10010000000100000a32288f7345f8176a2857300f752fb1335a1531104b7a525e400cd43253342000000000e05000000e7ffffff0759dee69ab8e2ac051f8e1ffda092c7679d61b0696c8d35f93e76a6d20072917ab7003dad3506a2b61097f3f27b52a2d8f3188187b9970606e10cc710c39858443e10d536b91336706f0f1cc0e76ef53a8e69546cc61ae1749127550227f9a4e2aec3a82882838cb43a60ee04d814e709f6caf8b4b521514077afb143ca3b857fffb74cbd2e4f526f80be44ea0b577203db9ef965787c5ee76900c1e101f06e54962fb98bfe2d04598b1642b808a7dcc0adcb4098aa2bd47e"], &(0x7f0000000500)=""/226, 0x34, 0xe2, 0x1}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000840)="134f7b71b02bf83d0c3b5858887e95e49a0296e1c4c0fe7984f4f2c712b06218c3b41a32f81c1216e77de1e8094f434feea09ad266c182c48766eb551c2798307341755105c49840d98807ae92fd629a585ea501a550918aeda07507ddd000876eab2cb9d54efe17c76db9e50646e952fabe2f8615cdd51d743cb6ce11964d2c08980468f5df9a3cb02cbcc7b7e1691aac405b5ec17792dac94a0590d11bddddc982ca00912160bdcc335299fb865cd184a3a189d9a47b6ac47dd3827387f283f5558dd8fb2e2151bda7aa0e39ad", 0xce, 0x0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') setns(0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x0073\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x841, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x7b, 0x0, [0x4, 0x0, 0x400000000000000, 0x5]}) mq_getsetattr(r1, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x2}, &(0x7f0000000600)) clone(0x400, &(0x7f0000000680)="6afe53065f5920a6d2fffa9686ec6717015b9da2a40ecc8ee0c91b96c55c707cb4dd955f1a8f6d4938455579be2d8763db2e0a288822406687a2e8d3ce7c1df0589e62b94b015b1c6a1997cbc12e7f38d7a86939417e0e0857b983d3bb17", &(0x7f00000000c0), &(0x7f0000000700), &(0x7f0000000740)="846c717f9b93ee6c4bf331d154dd359341f1847847e63caff049cc255302d837824334d16474ad8991309430f00ddfd82778767d2bc39e0b793d07bf0235cf85182b24460c591cf31c4797afa76fcc8d03ee998fd17eb07eeb5cf30d353eb08f3e1d3fbf5d487e84aa6a432c37b19c10cef229ede349b26e7d4760") dup(r0) mq_getsetattr(r2, &(0x7f00000004c0)={0x800, 0x3fe, 0x101, 0x2}, 0x0) 14:48:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:59 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5423, &(0x7f00000001c0)) 14:48:59 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5407, &(0x7f00000001c0)) 14:48:59 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5411, &(0x7f00000001c0)) [ 1120.937696][T23434] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:59 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="4c3a52ae075f2d123ed0ba144adea80817d24ae124149d41bd972a8046cb9e201e3caa2ee8e5a84e80479ea0ff11adcc7e5c131db1a67f39d26de4ecce39007628da307e575922c529ce79e04a3cd314cc53949fa73f9bd40581b29495b4d1e9d24b9a3c6375e0e2d45e42aba695a1f0ca76f34263bf2b22539eefb335e1a62a6e15150af371027a1adf572ffd2b0784a48a54e555b94dc016b9a7ec8c46e11893b488f3c8f7f991da07206ab802e62e725d5d3ca96a878e50548ef0dad642689954bd3a0f0f46835417992dffa10adf1ccb1b59d214276bf97754") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0xd8, 0x59000000, 0x294, 0xd8, 0x294, 0x1e4, 0x378, 0x378, 0x1e4, 0x378, 0xd802, 0x0, {[{{@ipv6={@private1, @private0, [], [], 'veth0_vlan\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xd8, 0x52020000}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@private0, @mcast2, [], [], 'macsec0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) 14:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ftruncate(r1, 0x16) sendfile(r0, r0, &(0x7f0000000240)=0x10, 0x7fff) 14:48:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:48:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000ac0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) [ 1122.157060][T23451] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1122.199434][T23446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1122.341090][T23446] overlayfs: filesystem on './bus' not supported as upperdir [ 1122.459736][T23447] SET target dimension over the limit! 14:49:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:01 executing program 4: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x20, {0x0, 0x184b, 0x200, 0x6, 0x1}}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000940)={0x0, 0x6, 0x65, 0x1}) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fdd, 0x5, 0x0, 0x884a, 0x100000008200000, 0x0, 0x6, 0x400000000800000, 0xde9, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8) unshare(0x8000600) membarrier(0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01138b816c3c36f4d10010000000100000a32288f7345f8176a2857300f752fb1335a1531104b7a525e400cd43253342000000000e05000000e7ffffff0759dee69ab8e2ac051f8e1ffda092c7679d61b0696c8d35f93e76a6d20072917ab7003dad3506a2b61097f3f27b52a2d8f3188187b9970606e10cc710c39858443e10d536b91336706f0f1cc0e76ef53a8e69546cc61ae1749127550227f9a4e2aec3a82882838cb43a60ee04d814e709f6caf8b4b521514077afb143ca3b857fffb74cbd2e4f526f80be44ea0b577203db9ef965787c5ee76900c1e101f06e54962fb98bfe2d04598b1642b808a7dcc0adcb4098aa2bd47e"], &(0x7f0000000500)=""/226, 0x34, 0xe2, 0x1}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000840)="134f7b71b02bf83d0c3b5858887e95e49a0296e1c4c0fe7984f4f2c712b06218c3b41a32f81c1216e77de1e8094f434feea09ad266c182c48766eb551c2798307341755105c49840d98807ae92fd629a585ea501a550918aeda07507ddd000876eab2cb9d54efe17c76db9e50646e952fabe2f8615cdd51d743cb6ce11964d2c08980468f5df9a3cb02cbcc7b7e1691aac405b5ec17792dac94a0590d11bddddc982ca00912160bdcc335299fb865cd184a3a189d9a47b6ac47dd3827387f283f5558dd8fb2e2151bda7aa0e39ad", 0xce, 0x0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') setns(0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x0073\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x841, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x7b, 0x0, [0x4, 0x0, 0x400000000000000, 0x5]}) mq_getsetattr(r1, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x2}, &(0x7f0000000600)) clone(0x400, &(0x7f0000000680)="6afe53065f5920a6d2fffa9686ec6717015b9da2a40ecc8ee0c91b96c55c707cb4dd955f1a8f6d4938455579be2d8763db2e0a288822406687a2e8d3ce7c1df0589e62b94b015b1c6a1997cbc12e7f38d7a86939417e0e0857b983d3bb17", &(0x7f00000000c0), &(0x7f0000000700), &(0x7f0000000740)="846c717f9b93ee6c4bf331d154dd359341f1847847e63caff049cc255302d837824334d16474ad8991309430f00ddfd82778767d2bc39e0b793d07bf0235cf85182b24460c591cf31c4797afa76fcc8d03ee998fd17eb07eeb5cf30d353eb08f3e1d3fbf5d487e84aa6a432c37b19c10cef229ede349b26e7d4760") dup(r0) mq_getsetattr(r2, &(0x7f00000004c0)={0x800, 0x3fe, 0x101, 0x2}, 0x0) [ 1123.055457][T23464] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:02 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x541b, &(0x7f00000001c0)) 14:49:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x492e1bf7, 0x0, [{}, {}, {}, {}, {0x0, 0x5e}]}}) 14:49:02 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5423, 0x0) 14:49:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:02 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5414, &(0x7f00000001c0)) [ 1123.883485][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.890227][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.956651][T23477] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1124.033816][T23479] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:02 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 14:49:02 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5414, 0x0) 14:49:02 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 14:49:02 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0) 14:49:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) [ 1124.738698][T23495] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:03 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x541a, &(0x7f00000001c0)) 14:49:03 executing program 5: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0xffffffffffffff54) 14:49:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:03 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) 14:49:03 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) [ 1125.459876][T23504] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1125.576814][T23508] 9pnet: p9_fd_create_unix (23508): problem connecting socket: éq‰Y’3aK: -111 [ 1125.619278][T23512] 9pnet: p9_fd_create_unix (23512): problem connecting socket: éq‰Y’3aK: -111 14:49:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) 14:49:04 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) 14:49:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 14:49:04 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0xc0189436, 0x0) 14:49:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) [ 1126.097296][T23518] 9pnet: p9_fd_create_unix (23518): problem connecting socket: éq‰Y’3aK: -111 [ 1126.129259][T23523] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1126.208659][T23524] 9pnet: p9_fd_create_unix (23524): problem connecting socket: éq‰Y’3aK: -111 [ 1126.524475][T23532] 9pnet: p9_fd_create_unix (23532): problem connecting socket: éq‰Y’3aK: -111 14:49:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:05 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) 14:49:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000, 0x1}], 0x8000, &(0x7f0000001200)=ANY=[]) 14:49:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) 14:49:05 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) [ 1126.955679][T23538] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.102763][T23542] 9pnet: p9_fd_create_unix (23542): problem connecting socket: éq‰Y’3aK: -111 [ 1127.117908][T23545] loop5: detected capacity change from 0 to 8 [ 1127.149221][T23544] 9pnet: p9_fd_create_unix (23544): problem connecting socket: éq‰Y’3aK: -111 14:49:05 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xff0e3000) bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) munmap(&(0x7f000024c000/0x2000)=nil, 0x2000) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x30000040}, 0x10) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)={0x5dc, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf3b5b999be6e563722e4135f41f25b2e64c34f79c905833f9084cac12fa0081"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c610c2f3a962943d762026bdd57b13c625184e0b801fd327ffc4ba826133fee"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xce1a}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9664870c94d81b5100b6fbc9e089d8b55018030d13512577cfe42ba578f8c155"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9acb1dbed173a3dbe48cd81c40c47e8ee7b4b76ac61034a6b161c56b49d391ca"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80633905aae3ba73271e55602ed329b6f30ab3666d3171769ff5ff5e1ee7e058"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3fc3a7afdc3ff66e8914fed64ec6c17f065dddf487890d01273190bf5f19b6f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x82, @private2, 0x8001}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bfec1ae2d71e3ecfebb0941a67e3cbe3d820f6d533c5d3bda71c9a23e3a26aa7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d972e9746ea011043ff4205c0d0146017a939c70e393d231a1ee0bdfc73edb0a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c67317d78a92e61df24a9195af2968cd3d2cf9154a85771bb5e3a391e805da2"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4034001}, 0x8008) 14:49:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000ac0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) [ 1127.271452][T23545] loop5: detected capacity change from 0 to 8 14:49:05 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)) 14:49:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b0"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:06 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)=0x67b) [ 1127.755144][T23562] 9pnet: p9_fd_create_unix (23562): problem connecting socket: éq‰Y’3aK: -111 14:49:06 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0xb46bdd629e0a059e) [ 1127.881981][T23561] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1127.960948][T23566] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.990161][T23564] overlayfs: filesystem on './bus' not supported as upperdir 14:49:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) 14:49:07 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) 14:49:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b0"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:07 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5452, &(0x7f0000000080)=0x3) 14:49:07 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5421, &(0x7f0000000080)=0x3) [ 1128.746565][T23581] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r0, 0x5437, 0x0) 14:49:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r0, 0x5428, 0x0) 14:49:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b0"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:07 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[{&(0x7f0000000180)="2670ddd21fba260434e0b09012f62105bcee02e9af42997bf7997634f611f40e72ff446a75c5369430e7a0a394497d5e3c75c91fa9013bee8b6be5e95890abfd0dd3d0a9b916617aba", 0x49}], 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)) 14:49:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '.]%'}], 0xa, "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"}, 0xb0f) [ 1129.417631][T23594] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:08 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f0000000080)=0x3) 14:49:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:08 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000080)) 14:49:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:08 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) 14:49:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 14:49:08 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x8000, 0x2, &(0x7f0000001200)=[{&(0x7f0000000180)="2670ddd21fba260434e0b09012f62105bcee02e9af42997bf7997634f611f40e72ff446a75c5369430e7a0a394497d5e3c75c91fa9013bee8b6be5e95890abfd0dd3d0a9b916617aba16e4cb8e", 0x4d}, {0x0}], 0x1080, &(0x7f0000001240)) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)) [ 1130.354759][T23620] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1130.409757][T23621] 9pnet: p9_fd_create_unix (23621): problem connecting socket: éq‰Y’3aK: -111 14:49:08 executing program 4: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, 0x0) 14:49:08 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x540d, 0x0) 14:49:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 14:49:09 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) 14:49:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0x12fb, 0x0) [ 1131.045674][T23634] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1131.229738][T23638] 9pnet: p9_fd_create_unix (23638): problem connecting socket: éq‰Y’3aK: -111 14:49:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 14:49:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:10 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5412, 0x0) 14:49:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) 14:49:10 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5412, &(0x7f00000001c0)) 14:49:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() [ 1131.934180][T23650] netlink: 43843 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1131.985651][T23651] 9pnet: p9_fd_create_unix (23651): problem connecting socket: éq‰Y’3aK: -111 14:49:10 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5453, 0x0) 14:49:10 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:49:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3059304830303030303030303002000000302c00"]) [ 1132.612151][T23663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1132.620916][T23663] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1132.658627][T23664] 9pnet: p9_fd_create_unix (23664): problem connecting socket: éq‰Y’3aK: -111 14:49:11 executing program 4: setuid(0xee01) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="b3", 0x1}], 0x0, 0x0) 14:49:11 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5409, 0x0) 14:49:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x20, 0x7, 0x0, 0x2, 0x4804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x10, 0x49, 0x3, 0x5, 0x0, 0x723b, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x4) 14:49:11 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x545c, &(0x7f00000001c0)) 14:49:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:11 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x22000b00, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0xd8, 0x59000000, 0x294, 0xd8, 0x294, 0x1e4, 0x378, 0x378, 0x1e4, 0x378, 0xd802, 0x0, {[{{@ipv6={@private1, @private0, [], [], 'veth0_vlan\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xd8, 0x52020000}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@private0, @mcast2, [], [], 'macsec0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) [ 1133.376020][T23673] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1133.384505][T23673] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:11 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5422, 0x0) [ 1133.579524][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1133.589132][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1133.857893][T23682] SET target dimension over the limit! 14:49:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:12 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x22000b00, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0xd8, 0x59000000, 0x294, 0xd8, 0x294, 0x1e4, 0x378, 0x378, 0x1e4, 0x378, 0xd802, 0x0, {[{{@ipv6={@private1, @private0, [], [], 'veth0_vlan\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xd8, 0x52020000}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@private0, @mcast2, [], [], 'macsec0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) 14:49:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDSETLED(r2, 0x1261, 0x9170000) 14:49:12 executing program 5: getuid() syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000001200)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="2670ddd21fba260434e0b09012f62105bcee02e9af42997bf7997634f611f40e72ff446a75c5369430e7a0a394497d5e3c75c91fa9013bee8b6be5e95890abfd0dd3d0a9b916617aba16e4cb8e", 0x4d}, {0x0}], 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)) [ 1134.435251][T23695] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1134.443932][T23695] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:12 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x22000b00, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0xd8, 0x59000000, 0x294, 0xd8, 0x294, 0x1e4, 0x378, 0x378, 0x1e4, 0x378, 0xd802, 0x0, {[{{@ipv6={@private1, @private0, [], [], 'veth0_vlan\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xd8, 0x52020000}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@private0, @mcast2, [], [], 'macsec0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) 14:49:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x20, 0x7, 0x0, 0x2, 0x4804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x10, 0x49, 0x3, 0x5, 0x0, 0x723b, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x4) [ 1134.477800][T23696] SET target dimension over the limit! [ 1134.651543][T23699] fuse: Bad value for 'fd' 14:49:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1134.887953][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1134.898905][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:49:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x22000b00, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0xd8, 0x59000000, 0x294, 0xd8, 0x294, 0x1e4, 0x378, 0x378, 0x1e4, 0x378, 0xd802, 0x0, {[{{@ipv6={@private1, @private0, [], [], 'veth0_vlan\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xd8, 0x52020000}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@private0, @mcast2, [], [], 'macsec0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) 14:49:13 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x6701, 0x0) [ 1134.972692][T23717] SET target dimension over the limit! 14:49:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:13 executing program 5: socketpair(0x2, 0x0, 0x3ff, &(0x7f0000000440)) [ 1135.247936][T23722] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1135.256480][T23722] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1135.315366][T23725] SET target dimension over the limit! 14:49:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "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"}, 0xec1) 14:49:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:14 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5408, 0x0) 14:49:14 executing program 5: mknodat$null(0xffffffffffffffff, 0x0, 0x4090, 0x103) 14:49:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x20, 0x7, 0x0, 0x2, 0x4804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x10, 0x49, 0x3, 0x5, 0x0, 0x723b, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x4) 14:49:14 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5423, &(0x7f00000001c0)=0x67b) [ 1135.964476][T23738] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1135.972918][T23738] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:14 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000180)="2670ddd21fba260434e0b09012f62105bcee02e9af42997bf7997634f611f40e72ff446a75c5369430e7a0a394497d5e3c75c91fa9013bee8b6be5e95890abfd0dd3d0a9b916617aba16e4cb", 0x4c}], 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)) 14:49:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x8}, 0x40) [ 1136.323945][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1136.334651][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:49:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 1136.727681][T23757] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:49:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:15 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x402c542d, &(0x7f00000001c0)) 14:49:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000580)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000ac0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 14:49:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 14:49:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x20, 0x7, 0x0, 0x2, 0x4804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x10, 0x49, 0x3, 0x5, 0x0, 0x723b, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x4) [ 1137.511876][T23770] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1137.588549][T23773] 9pnet: Insufficient options for proto=fd 14:49:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1137.757070][T23771] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 14:49:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000007880)) getpgid(0x0) 14:49:16 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0) [ 1137.916476][T23781] overlayfs: filesystem on './bus' not supported as upperdir 14:49:16 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5404, &(0x7f00000001c0)=0xfdfdffff) [ 1138.136078][T23785] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:49:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "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"}, 0xab3) [ 1138.735673][T23793] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1138.735752][T23793] __nla_validate_parse: 5 callbacks suppressed [ 1138.735805][T23793] netlink: 43807 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:17 executing program 1: setuid(0xee01) syz_open_dev$tty20(0xc, 0x4, 0x1) 14:49:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x4, [0x6, 0x8, 0x80, 0x16a]}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) getpid() 14:49:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000032c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:49:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:17 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5411, 0x0) 14:49:17 executing program 5: socketpair(0x28, 0x0, 0x1d4, &(0x7f0000000080)) [ 1139.223497][T23801] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1139.234140][T23801] netlink: 43799 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001240)) 14:49:18 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5413, &(0x7f00000001c0)) 14:49:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000032c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 14:49:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc00e900", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001080000c80008809a3d008014000406000000007f00000199afbbdcd5bc7965080003000000000074000000200004000a000000000000000100000000000000000000000000000040000000240002002cae60f5dd0570bbf48bf233fba1a9b017538688b5095343e13f2c7be6c565a824000100bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcbbbbbbbbbbbbbbbbbbbbbbbbbba906000500000000003000008024000100e0e9ffffa9aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000129001f4d154a837393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="130000ee30001f00040004eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c9ae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:49:18 executing program 5: r0 = openat$zero(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1139.800692][T18308] ===================================================== [ 1139.807714][T18308] BUG: KMSAN: uninit-value in kmsan_check_skb+0x3c/0x240 [ 1139.814757][T18308] CPU: 0 PID: 18308 Comm: kworker/u4:2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1139.823471][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.833576][T18308] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1139.841524][T18308] Call Trace: [ 1139.844807][T18308] dump_stack+0x24c/0x2e0 [ 1139.849156][T18308] kmsan_report+0xfb/0x1e0 [ 1139.853589][T18308] kmsan_internal_check_memory+0x1f5/0x500 [ 1139.859431][T18308] kmsan_check_skb+0x3c/0x240 [ 1139.864137][T18308] pfifo_fast_dequeue+0x1031/0x1190 [ 1139.869408][T18308] ? pfifo_fast_enqueue+0x9f0/0x9f0 [ 1139.874627][T18308] dequeue_skb+0x4ad/0x3680 [ 1139.879156][T18308] __qdisc_run+0x101/0x490 [ 1139.883595][T18308] ? kmsan_set_origin_checked+0xa2/0x100 [ 1139.889258][T18308] __dev_queue_xmit+0x26ad/0x4600 [ 1139.894357][T18308] ? kmsan_get_metadata+0x116/0x180 [ 1139.899587][T18308] dev_queue_xmit+0x4b/0x60 [ 1139.904104][T18308] batadv_send_skb_packet+0x622/0x970 [ 1139.909555][T18308] batadv_send_broadcast_skb+0x76/0x90 [ 1139.915033][T18308] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 1139.922118][T18308] ? batadv_iv_ogm_queue_add+0x1c40/0x1c40 [ 1139.927944][T18308] process_one_work+0x1219/0x1fe0 [ 1139.932996][T18308] worker_thread+0x10ec/0x2340 [ 1139.937790][T18308] ? kmsan_get_metadata+0x116/0x180 [ 1139.943008][T18308] kthread+0x521/0x560 [ 1139.947132][T18308] ? process_one_work+0x1fe0/0x1fe0 [ 1139.952361][T18308] ? kthread_blkcg+0x110/0x110 [ 1139.957145][T18308] ret_from_fork+0x1f/0x30 [ 1139.961600][T18308] [ 1139.963920][T18308] Uninit was stored to memory at: [ 1139.968937][T18308] kmsan_internal_chain_origin+0xad/0x130 [ 1139.974685][T18308] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 1139.980687][T18308] kmsan_memcpy_metadata+0xb/0x10 [ 1139.985722][T18308] __msan_memcpy+0x46/0x60 [ 1139.990162][T18308] pskb_expand_head+0x3d6/0x1e20 [ 1139.995131][T18308] batadv_skb_head_push+0x2cc/0x410 [ 1140.000394][T18308] batadv_send_skb_packet+0x1ed/0x970 [ 1140.005783][T18308] batadv_send_broadcast_skb+0x76/0x90 [ 1140.011268][T18308] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 1140.018312][T18308] process_one_work+0x1219/0x1fe0 [ 1140.023356][T18308] worker_thread+0x10ec/0x2340 [ 1140.028141][T18308] kthread+0x521/0x560 [ 1140.032224][T18308] ret_from_fork+0x1f/0x30 [ 1140.036654][T18308] [ 1140.038978][T18308] Uninit was created at: [ 1140.043208][T18308] kmsan_internal_poison_shadow+0x66/0xd0 [ 1140.048945][T18308] kmsan_slab_alloc+0x8e/0xe0 [ 1140.053629][T18308] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1140.059529][T18308] __alloc_skb+0x4dd/0xe90 [ 1140.063971][T18308] __netdev_alloc_skb+0x45d/0x810 [ 1140.069000][T18308] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 1140.074640][T18308] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 1140.080192][T18308] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 1140.087230][T18308] process_one_work+0x1219/0x1fe0 [ 1140.092272][T18308] worker_thread+0x10ec/0x2340 [ 1140.097062][T18308] kthread+0x521/0x560 [ 1140.101137][T18308] ret_from_fork+0x1f/0x30 [ 1140.105556][T18308] [ 1140.107883][T18308] Bytes 52-53 of 74 are uninitialized [ 1140.113246][T18308] Memory access of size 74 starts at ffff8880a9f20840 [ 1140.119997][T18308] ===================================================== [ 1140.126914][T18308] Disabling lock debugging due to kernel taint [ 1140.133063][T18308] Kernel panic - not syncing: panic_on_kmsan set ... [ 1140.139726][T18308] CPU: 0 PID: 18308 Comm: kworker/u4:2 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1140.149720][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.159804][T18308] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1140.167623][T18308] Call Trace: [ 1140.170897][T18308] dump_stack+0x24c/0x2e0 [ 1140.175240][T18308] panic+0x4c6/0xea7 [ 1140.179191][T18308] ? add_taint+0x17c/0x210 [ 1140.183618][T18308] kmsan_report+0x1de/0x1e0 [ 1140.188143][T18308] kmsan_internal_check_memory+0x1f5/0x500 [ 1140.193962][T18308] kmsan_check_skb+0x3c/0x240 [ 1140.198648][T18308] pfifo_fast_dequeue+0x1031/0x1190 [ 1140.203866][T18308] ? pfifo_fast_enqueue+0x9f0/0x9f0 [ 1140.209171][T18308] dequeue_skb+0x4ad/0x3680 [ 1140.213693][T18308] __qdisc_run+0x101/0x490 [ 1140.218117][T18308] ? kmsan_set_origin_checked+0xa2/0x100 [ 1140.223755][T18308] __dev_queue_xmit+0x26ad/0x4600 [ 1140.228787][T18308] ? kmsan_get_metadata+0x116/0x180 [ 1140.234001][T18308] dev_queue_xmit+0x4b/0x60 [ 1140.238517][T18308] batadv_send_skb_packet+0x622/0x970 [ 1140.243915][T18308] batadv_send_broadcast_skb+0x76/0x90 [ 1140.249385][T18308] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 1140.256459][T18308] ? batadv_iv_ogm_queue_add+0x1c40/0x1c40 [ 1140.262310][T18308] process_one_work+0x1219/0x1fe0 [ 1140.267349][T18308] worker_thread+0x10ec/0x2340 [ 1140.272144][T18308] ? kmsan_get_metadata+0x116/0x180 [ 1140.277371][T18308] kthread+0x521/0x560 [ 1140.281455][T18308] ? process_one_work+0x1fe0/0x1fe0 [ 1140.286684][T18308] ? kthread_blkcg+0x110/0x110 [ 1140.291466][T18308] ret_from_fork+0x1f/0x30 [ 1140.296765][T18308] Kernel Offset: disabled [ 1140.301095][T18308] Rebooting in 86400 seconds..