1355.235919][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1355.241653][T24598] __msan_chain_origin+0x54/0xa0 [ 1355.246605][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1355.251734][T24598] get_compat_msghdr+0x108/0x2b0 [ 1355.256723][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1355.261249][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1355.265949][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.272033][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.278205][T24598] __do_fast_syscall_32+0x127/0x180 [ 1355.283425][T24598] do_fast_syscall_32+0x77/0xd0 [ 1355.288311][T24598] do_SYSENTER_32+0x73/0x90 [ 1355.292831][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1355.299177][T24598] [ 1355.301502][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1355.308169][T24598] do_recvmmsg+0xbf/0x22d0 [ 1355.312604][T24598] do_recvmmsg+0xbf/0x22d0 [ 1355.572988][T24582] not chained 1820000 origins [ 1355.577719][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1355.586496][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.596575][T24582] Call Trace: [ 1355.599868][T24582] dump_stack+0x24c/0x2e0 [ 1355.604224][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1355.609958][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1355.615352][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1355.620912][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1355.626148][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1355.631793][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1355.637871][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1355.643084][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1355.648963][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1355.655057][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1355.660267][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1355.665915][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1355.672010][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1355.677310][T24582] ? _copy_from_user+0x1fd/0x300 [ 1355.682281][T24582] __msan_chain_origin+0x54/0xa0 [ 1355.687294][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1355.692500][T24582] get_compat_msghdr+0x108/0x2b0 [ 1355.697458][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1355.701984][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1355.707230][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1355.713070][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1355.718310][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1355.723956][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1355.729252][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1355.734042][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1355.738735][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.744850][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.751027][T24582] __do_fast_syscall_32+0x127/0x180 [ 1355.756250][T24582] do_fast_syscall_32+0x77/0xd0 [ 1355.761126][T24582] do_SYSENTER_32+0x73/0x90 [ 1355.765657][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1355.772038][T24582] RIP: 0023:0xf7f64549 [ 1355.776133][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1355.795787][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1355.804234][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1355.812216][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1355.820196][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1355.828212][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1355.836242][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1355.844226][T24582] Uninit was stored to memory at: [ 1355.849238][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1355.854983][T24582] __msan_chain_origin+0x54/0xa0 [ 1355.859948][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1355.865071][T24582] get_compat_msghdr+0x108/0x2b0 [ 1355.870015][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1355.874530][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1355.879215][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.885297][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.891479][T24582] __do_fast_syscall_32+0x127/0x180 [ 1355.896805][T24582] do_fast_syscall_32+0x77/0xd0 [ 1355.901684][T24582] do_SYSENTER_32+0x73/0x90 [ 1355.906200][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1355.912553][T24582] [ 1355.914876][T24582] Uninit was stored to memory at: [ 1355.919888][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1355.925625][T24582] __msan_chain_origin+0x54/0xa0 [ 1355.930572][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1355.935696][T24582] get_compat_msghdr+0x108/0x2b0 [ 1355.940647][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1355.945170][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1355.949868][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.955966][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.962146][T24582] __do_fast_syscall_32+0x127/0x180 [ 1355.967364][T24582] do_fast_syscall_32+0x77/0xd0 [ 1355.972232][T24582] do_SYSENTER_32+0x73/0x90 [ 1355.976758][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1355.983105][T24582] [ 1355.985433][T24582] Uninit was stored to memory at: [ 1355.990448][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1355.996225][T24582] __msan_chain_origin+0x54/0xa0 [ 1356.001172][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1356.006301][T24582] get_compat_msghdr+0x108/0x2b0 [ 1356.011265][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1356.015787][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1356.020523][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.026647][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.032878][T24582] __do_fast_syscall_32+0x127/0x180 [ 1356.038094][T24582] do_fast_syscall_32+0x77/0xd0 [ 1356.042957][T24582] do_SYSENTER_32+0x73/0x90 [ 1356.047574][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.053916][T24582] [ 1356.056240][T24582] Uninit was stored to memory at: [ 1356.061251][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1356.066992][T24582] __msan_chain_origin+0x54/0xa0 [ 1356.071939][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1356.077068][T24582] get_compat_msghdr+0x108/0x2b0 [ 1356.082015][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1356.086545][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1356.091231][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.097319][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.103486][T24582] __do_fast_syscall_32+0x127/0x180 [ 1356.108700][T24582] do_fast_syscall_32+0x77/0xd0 [ 1356.113559][T24582] do_SYSENTER_32+0x73/0x90 [ 1356.118096][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.124462][T24582] [ 1356.126787][T24582] Uninit was stored to memory at: [ 1356.131800][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1356.137548][T24582] __msan_chain_origin+0x54/0xa0 [ 1356.142493][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1356.147619][T24582] get_compat_msghdr+0x108/0x2b0 [ 1356.152565][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1356.157078][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1356.161782][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.167879][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.174057][T24582] __do_fast_syscall_32+0x127/0x180 [ 1356.179290][T24582] do_fast_syscall_32+0x77/0xd0 [ 1356.184159][T24582] do_SYSENTER_32+0x73/0x90 [ 1356.188676][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.196772][T24582] [ 1356.199114][T24582] Uninit was stored to memory at: [ 1356.204127][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1356.209888][T24582] __msan_chain_origin+0x54/0xa0 [ 1356.214840][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1356.219968][T24582] get_compat_msghdr+0x108/0x2b0 [ 1356.224915][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1356.229438][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1356.234125][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.240237][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.246406][T24582] __do_fast_syscall_32+0x127/0x180 [ 1356.251636][T24582] do_fast_syscall_32+0x77/0xd0 [ 1356.256540][T24582] do_SYSENTER_32+0x73/0x90 [ 1356.261059][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.267406][T24582] [ 1356.269727][T24582] Uninit was stored to memory at: [ 1356.274744][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1356.280485][T24582] __msan_chain_origin+0x54/0xa0 [ 1356.285453][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1356.290581][T24582] get_compat_msghdr+0x108/0x2b0 [ 1356.295532][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1356.300064][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1356.304778][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.310861][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.317050][T24582] __do_fast_syscall_32+0x127/0x180 [ 1356.322266][T24582] do_fast_syscall_32+0x77/0xd0 [ 1356.327135][T24582] do_SYSENTER_32+0x73/0x90 [ 1356.331671][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.338033][T24582] [ 1356.340351][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1356.347105][T24582] do_recvmmsg+0xbf/0x22d0 [ 1356.351537][T24582] do_recvmmsg+0xbf/0x22d0 [ 1356.554145][T24598] not chained 1830000 origins [ 1356.558866][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1356.567644][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.577714][T24598] Call Trace: [ 1356.581005][T24598] dump_stack+0x24c/0x2e0 [ 1356.585368][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1356.591119][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1356.596523][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1356.602100][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1356.607320][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1356.612967][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.619050][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1356.624283][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.630116][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1356.636206][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1356.641425][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1356.647075][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.653161][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1356.658465][T24598] ? _copy_from_user+0x1fd/0x300 [ 1356.663423][T24598] __msan_chain_origin+0x54/0xa0 [ 1356.668379][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1356.673514][T24598] get_compat_msghdr+0x108/0x2b0 [ 1356.678474][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1356.683011][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1356.688587][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1356.693807][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.699639][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1356.704857][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1356.710513][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1356.715817][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1356.720608][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1356.725324][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.731430][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.737618][T24598] __do_fast_syscall_32+0x127/0x180 [ 1356.742849][T24598] do_fast_syscall_32+0x77/0xd0 [ 1356.747728][T24598] do_SYSENTER_32+0x73/0x90 [ 1356.752288][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.758633][T24598] RIP: 0023:0xf7f64549 [ 1356.762709][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1356.782339][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1356.790794][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1356.798801][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1356.806803][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.814806][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.822808][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.830813][T24598] Uninit was stored to memory at: [ 1356.835859][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1356.841614][T24598] __msan_chain_origin+0x54/0xa0 [ 1356.846662][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1356.851805][T24598] get_compat_msghdr+0x108/0x2b0 [ 1356.856772][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1356.861297][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1356.865994][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.872080][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.878255][T24598] __do_fast_syscall_32+0x127/0x180 [ 1356.883478][T24598] do_fast_syscall_32+0x77/0xd0 [ 1356.888350][T24598] do_SYSENTER_32+0x73/0x90 [ 1356.892869][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.899218][T24598] [ 1356.901540][T24598] Uninit was stored to memory at: [ 1356.906558][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1356.912317][T24598] __msan_chain_origin+0x54/0xa0 [ 1356.917279][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1356.922425][T24598] get_compat_msghdr+0x108/0x2b0 [ 1356.927386][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1356.931928][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1356.936630][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.942716][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.948897][T24598] __do_fast_syscall_32+0x127/0x180 [ 1356.954118][T24598] do_fast_syscall_32+0x77/0xd0 [ 1356.959011][T24598] do_SYSENTER_32+0x73/0x90 [ 1356.963565][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.969943][T24598] [ 1356.972267][T24598] Uninit was stored to memory at: [ 1356.977455][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1356.983194][T24598] __msan_chain_origin+0x54/0xa0 [ 1356.988171][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1356.993299][T24598] get_compat_msghdr+0x108/0x2b0 [ 1356.998269][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.002804][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.007497][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.013586][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.019763][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.024983][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.029856][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.034382][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.040725][T24598] [ 1357.043049][T24598] Uninit was stored to memory at: [ 1357.048061][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.053795][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.058748][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.063872][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.068828][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.073345][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.078034][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.084129][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.090316][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.095534][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.100402][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.104922][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.111472][T24598] [ 1357.113795][T24598] Uninit was stored to memory at: [ 1357.118811][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.124559][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.129517][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.134649][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.139611][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.144129][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.148836][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.154949][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.161127][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.166349][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.171221][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.175769][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.182129][T24598] [ 1357.184469][T24598] Uninit was stored to memory at: [ 1357.189504][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.195243][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.200208][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.205336][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.210319][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.214836][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.219530][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.225723][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.231905][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.237127][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.241990][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.246507][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.252875][T24598] [ 1357.255208][T24598] Uninit was stored to memory at: [ 1357.260232][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.265981][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.270952][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.276094][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.281070][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.285607][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.290366][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.296464][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.302650][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.307879][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.312764][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.317290][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.323654][T24598] [ 1357.325976][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1357.332638][T24598] do_recvmmsg+0xbf/0x22d0 [ 1357.337074][T24598] do_recvmmsg+0xbf/0x22d0 [ 1357.417328][T24598] not chained 1840000 origins [ 1357.422052][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1357.431119][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.441186][T24598] Call Trace: [ 1357.444477][T24598] dump_stack+0x24c/0x2e0 [ 1357.448848][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1357.454596][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1357.459995][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1357.465591][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1357.470808][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1357.476465][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1357.482561][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1357.487788][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1357.493673][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1357.499775][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1357.505003][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1357.510663][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1357.516755][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1357.522068][T24598] ? _copy_from_user+0x1fd/0x300 [ 1357.527026][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.531982][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.537118][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.542079][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.546604][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1357.552168][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1357.557383][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1357.563210][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1357.568428][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1357.574075][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1357.579372][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1357.584160][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.588880][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.594974][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.601161][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.606397][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.611279][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.615815][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.622167][T24598] RIP: 0023:0xf7f64549 [ 1357.626246][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1357.645870][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1357.654316][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1357.662301][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1357.670288][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.678301][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1357.686290][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.694301][T24598] Uninit was stored to memory at: [ 1357.699320][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.705056][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.710021][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.715142][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.720090][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.724608][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.729294][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.735372][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.741547][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.746764][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.751632][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.756151][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.762496][T24598] [ 1357.764817][T24598] Uninit was stored to memory at: [ 1357.769835][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.775572][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.780524][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.785651][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.790600][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.795117][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.799802][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.805893][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.812081][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.817295][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.822164][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.826691][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.833056][T24598] [ 1357.835376][T24598] Uninit was stored to memory at: [ 1357.840403][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.846154][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.851117][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.856242][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.861205][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.865726][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.870431][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.876819][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.883025][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.888254][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.893126][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.897645][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.903992][T24598] [ 1357.906335][T24598] Uninit was stored to memory at: [ 1357.911351][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.917095][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.922053][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.927199][T24598] get_compat_msghdr+0x108/0x2b0 [ 1357.932180][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1357.936707][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1357.941408][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.947501][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.953675][T24598] __do_fast_syscall_32+0x127/0x180 [ 1357.958901][T24598] do_fast_syscall_32+0x77/0xd0 [ 1357.963769][T24598] do_SYSENTER_32+0x73/0x90 [ 1357.968289][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.974633][T24598] [ 1357.976956][T24598] Uninit was stored to memory at: [ 1357.981971][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1357.987728][T24598] __msan_chain_origin+0x54/0xa0 [ 1357.992694][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1357.997832][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.002789][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.007332][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.012029][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.018124][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.024308][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.029543][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.034427][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.038975][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.045336][T24598] [ 1358.047661][T24598] Uninit was stored to memory at: [ 1358.052673][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.058420][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.063405][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.068567][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.073543][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.078068][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.082773][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.088856][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.095024][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.100239][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.105104][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.109669][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.116012][T24598] [ 1358.118330][T24598] Uninit was stored to memory at: [ 1358.123355][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.129109][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.134064][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.139188][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.144135][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.148654][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.153358][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.159441][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.165625][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.170864][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.175727][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.180256][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.186621][T24598] [ 1358.188939][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1358.195610][T24598] do_recvmmsg+0xbf/0x22d0 [ 1358.200075][T24598] do_recvmmsg+0xbf/0x22d0 [ 1358.399000][T24598] not chained 1850000 origins [ 1358.403748][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1358.412536][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.422611][T24598] Call Trace: [ 1358.425913][T24598] dump_stack+0x24c/0x2e0 [ 1358.430283][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1358.436060][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1358.441473][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1358.447047][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1358.452287][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1358.457952][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.464045][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1358.469265][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.475124][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1358.481250][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1358.486505][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1358.492168][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.498264][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1358.503578][T24598] ? _copy_from_user+0x1fd/0x300 [ 1358.508555][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.513552][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.518711][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.523679][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.528204][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1358.533769][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1358.539100][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.544942][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1358.550168][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1358.555825][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1358.561136][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1358.565929][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.570637][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.576741][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.582932][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.588167][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.593049][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.597667][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.604013][T24598] RIP: 0023:0xf7f64549 [ 1358.608109][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1358.627771][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1358.636236][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1358.644230][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1358.652259][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.660421][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1358.668411][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.676405][T24598] Uninit was stored to memory at: [ 1358.681431][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.687173][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.692135][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.697272][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.702255][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.706797][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.711501][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.717603][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.723795][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.729030][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.733917][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.738463][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.744824][T24598] [ 1358.747158][T24598] Uninit was stored to memory at: [ 1358.752178][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.757926][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.762898][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.768052][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.773021][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.777558][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.782265][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.788367][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.794558][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.799794][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.804678][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.809217][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.815582][T24598] [ 1358.817953][T24598] Uninit was stored to memory at: [ 1358.822977][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.828749][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.833795][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.838930][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.843978][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.848496][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.853183][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.859267][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.865446][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.870666][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.875535][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.880050][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.886396][T24598] [ 1358.888727][T24598] Uninit was stored to memory at: [ 1358.893740][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.899500][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.904454][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.909585][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.914535][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.919053][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.923826][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.929913][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.936080][T24598] __do_fast_syscall_32+0x127/0x180 [ 1358.941295][T24598] do_fast_syscall_32+0x77/0xd0 [ 1358.946158][T24598] do_SYSENTER_32+0x73/0x90 [ 1358.950674][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1358.957043][T24598] [ 1358.959362][T24598] Uninit was stored to memory at: [ 1358.964379][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1358.970115][T24598] __msan_chain_origin+0x54/0xa0 [ 1358.975062][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1358.980185][T24598] get_compat_msghdr+0x108/0x2b0 [ 1358.985138][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1358.989651][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1358.994340][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.000425][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.006605][T24598] __do_fast_syscall_32+0x127/0x180 [ 1359.011838][T24598] do_fast_syscall_32+0x77/0xd0 [ 1359.016718][T24598] do_SYSENTER_32+0x73/0x90 [ 1359.021246][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.027600][T24598] [ 1359.029928][T24598] Uninit was stored to memory at: [ 1359.034950][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1359.040716][T24598] __msan_chain_origin+0x54/0xa0 [ 1359.045673][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1359.050822][T24598] get_compat_msghdr+0x108/0x2b0 [ 1359.055783][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1359.060297][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1359.064986][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.071064][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.077232][T24598] __do_fast_syscall_32+0x127/0x180 [ 1359.082449][T24598] do_fast_syscall_32+0x77/0xd0 [ 1359.087405][T24598] do_SYSENTER_32+0x73/0x90 [ 1359.091958][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.098304][T24598] [ 1359.100626][T24598] Uninit was stored to memory at: [ 1359.105638][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1359.111401][T24598] __msan_chain_origin+0x54/0xa0 [ 1359.116352][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1359.121475][T24598] get_compat_msghdr+0x108/0x2b0 [ 1359.126434][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1359.130955][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1359.135742][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.141854][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.148024][T24598] __do_fast_syscall_32+0x127/0x180 [ 1359.153248][T24598] do_fast_syscall_32+0x77/0xd0 [ 1359.158118][T24598] do_SYSENTER_32+0x73/0x90 [ 1359.162634][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.168981][T24598] [ 1359.171310][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1359.177976][T24598] do_recvmmsg+0xbf/0x22d0 [ 1359.182453][T24598] do_recvmmsg+0xbf/0x22d0 [ 1359.365351][T24582] not chained 1860000 origins [ 1359.370070][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1359.378851][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.388925][T24582] Call Trace: [ 1359.392225][T24582] dump_stack+0x24c/0x2e0 [ 1359.396603][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1359.402343][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1359.407745][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1359.413316][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1359.418537][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1359.424191][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1359.430286][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1359.435503][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1359.441342][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1359.447434][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1359.452675][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1359.458326][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1359.464411][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1359.469715][T24582] ? _copy_from_user+0x1fd/0x300 [ 1359.474667][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.479630][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.484796][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.489763][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.494326][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1359.499550][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1359.505381][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1359.510601][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1359.516262][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1359.521566][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1359.526345][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.531041][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.537135][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.543326][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.548548][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.553417][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.557938][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.564284][T24582] RIP: 0023:0xf7f64549 [ 1359.568364][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1359.587992][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1359.596437][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1359.604420][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1359.612402][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.620383][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1359.628361][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.636352][T24582] Uninit was stored to memory at: [ 1359.641377][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1359.647113][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.652058][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.657224][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.662200][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.666711][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.671391][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.677467][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.683629][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.688855][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.693722][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.698235][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.704582][T24582] [ 1359.706908][T24582] Uninit was stored to memory at: [ 1359.711922][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1359.717661][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.722608][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.727760][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.732709][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.737229][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.741924][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.748012][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.754190][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.759415][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.764290][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.768831][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.775175][T24582] [ 1359.777496][T24582] Uninit was stored to memory at: [ 1359.782515][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1359.788264][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.793230][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.798367][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.803337][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.807876][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.812586][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.818687][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.824883][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.830119][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.835020][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.839572][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.845929][T24582] [ 1359.848255][T24582] Uninit was stored to memory at: [ 1359.853272][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1359.859022][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.864017][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.869151][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.874105][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.878635][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.883326][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.889417][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.895597][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.900815][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.905684][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.910227][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.916574][T24582] [ 1359.918889][T24582] Uninit was stored to memory at: [ 1359.923907][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1359.929644][T24582] __msan_chain_origin+0x54/0xa0 [ 1359.934595][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1359.939729][T24582] get_compat_msghdr+0x108/0x2b0 [ 1359.944691][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1359.949218][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1359.953904][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.959989][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.966163][T24582] __do_fast_syscall_32+0x127/0x180 [ 1359.971412][T24582] do_fast_syscall_32+0x77/0xd0 [ 1359.976286][T24582] do_SYSENTER_32+0x73/0x90 [ 1359.980800][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1359.987145][T24582] [ 1359.989473][T24582] Uninit was stored to memory at: [ 1359.994492][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.000229][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.005180][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.010310][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.015259][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.019777][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.024467][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.030547][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.036739][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.041961][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.046825][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.051343][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.057687][T24582] [ 1360.060007][T24582] Uninit was stored to memory at: [ 1360.065018][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.070764][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.075842][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.080987][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.085959][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.090493][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.095211][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.101312][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.107505][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.112741][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.117646][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.122178][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.128530][T24582] [ 1360.130854][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1360.137525][T24582] do_recvmmsg+0xbf/0x22d0 [ 1360.141965][T24582] do_recvmmsg+0xbf/0x22d0 [ 1360.261221][T24582] not chained 1870000 origins [ 1360.265947][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1360.274727][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.284804][T24582] Call Trace: [ 1360.288112][T24582] dump_stack+0x24c/0x2e0 [ 1360.292476][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1360.298251][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1360.303658][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1360.309234][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1360.314464][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1360.320117][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1360.326207][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1360.331435][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1360.337262][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1360.343347][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1360.348567][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1360.354217][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1360.360329][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1360.365629][T24582] ? _copy_from_user+0x1fd/0x300 [ 1360.370591][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.375559][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.380746][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.385747][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.390308][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1360.395583][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1360.401407][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1360.406646][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1360.412307][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1360.417599][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1360.422376][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.427101][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.433202][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.439380][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.444604][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.449469][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.453987][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.460332][T24582] RIP: 0023:0xf7f64549 [ 1360.464430][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1360.484055][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1360.492515][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1360.500503][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1360.508476][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1360.516452][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1360.524431][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.532445][T24582] Uninit was stored to memory at: [ 1360.537463][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.543218][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.548194][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.553341][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.558301][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.562813][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.567501][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.573601][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.579772][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.584995][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.589876][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.594397][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.600748][T24582] [ 1360.603073][T24582] Uninit was stored to memory at: [ 1360.608087][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.613830][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.618788][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.623961][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.628924][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.633446][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.638149][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.644256][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.650462][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.655796][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.660711][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.665241][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.671608][T24582] [ 1360.673932][T24582] Uninit was stored to memory at: [ 1360.678946][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.684714][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.689674][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.694813][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.699773][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.704290][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.708979][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.715063][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.721237][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.726462][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.731333][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.735851][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.748532][T24582] [ 1360.750875][T24582] Uninit was stored to memory at: [ 1360.755897][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.762168][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.767134][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.772274][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.777269][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.781795][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.786486][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.792574][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.798759][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.803989][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.808869][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.813402][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.819762][T24582] [ 1360.822113][T24582] Uninit was stored to memory at: [ 1360.827126][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.832863][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.837829][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.842954][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.847900][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.852414][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.857099][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.863179][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.869345][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.874557][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.879419][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.883954][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.890311][T24582] [ 1360.892629][T24582] Uninit was stored to memory at: [ 1360.897639][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.903372][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.908355][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.913597][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.918573][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.924223][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.928941][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.935033][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.941229][T24582] __do_fast_syscall_32+0x127/0x180 [ 1360.946477][T24582] do_fast_syscall_32+0x77/0xd0 [ 1360.951501][T24582] do_SYSENTER_32+0x73/0x90 [ 1360.956039][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1360.962383][T24582] [ 1360.964703][T24582] Uninit was stored to memory at: [ 1360.969717][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1360.975460][T24582] __msan_chain_origin+0x54/0xa0 [ 1360.980406][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1360.985537][T24582] get_compat_msghdr+0x108/0x2b0 [ 1360.990484][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1360.995005][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1360.999691][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.005789][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.011960][T24582] __do_fast_syscall_32+0x127/0x180 [ 1361.017173][T24582] do_fast_syscall_32+0x77/0xd0 [ 1361.022061][T24582] do_SYSENTER_32+0x73/0x90 [ 1361.027021][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.033374][T24582] [ 1361.035697][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1361.042364][T24582] do_recvmmsg+0xbf/0x22d0 [ 1361.046806][T24582] do_recvmmsg+0xbf/0x22d0 [ 1361.201131][T24598] not chained 1880000 origins [ 1361.205997][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1361.214777][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.224840][T24598] Call Trace: [ 1361.228124][T24598] dump_stack+0x24c/0x2e0 [ 1361.232477][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1361.238214][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1361.243609][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1361.249181][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1361.254426][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1361.260089][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1361.266213][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1361.271443][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1361.277273][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1361.283368][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1361.288585][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1361.294232][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1361.300322][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1361.305644][T24598] ? _copy_from_user+0x1fd/0x300 [ 1361.310694][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.315664][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.320806][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.325781][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.330330][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1361.335918][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1361.341146][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1361.347003][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1361.352225][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1361.357871][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1361.363265][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1361.368068][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.372776][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.378874][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.385053][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.390269][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.395142][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.399660][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.406009][T24598] RIP: 0023:0xf7f64549 [ 1361.410086][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1361.429813][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1361.438285][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1361.446268][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1361.454255][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.462237][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1361.470262][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.478268][T24598] Uninit was stored to memory at: [ 1361.483282][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.489021][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.493970][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.499098][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.504047][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.508566][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.513275][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.519445][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.525631][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.530848][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.535721][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.540236][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.546582][T24598] [ 1361.548900][T24598] Uninit was stored to memory at: [ 1361.553920][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.559658][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.564624][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.569765][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.574750][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.579265][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.583984][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.590073][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.596417][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.601644][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.606511][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.611029][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.617459][T24598] [ 1361.619777][T24598] Uninit was stored to memory at: [ 1361.624787][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.630566][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.635512][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.640633][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.645581][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.650095][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.654781][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.660863][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.667051][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.672303][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.677177][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.681691][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.688038][T24598] [ 1361.690365][T24598] Uninit was stored to memory at: [ 1361.695396][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.701144][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.706096][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.711240][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.716212][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.720739][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.725433][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.731517][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.737692][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.742919][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.747788][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.752300][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.758642][T24598] [ 1361.760965][T24598] Uninit was stored to memory at: [ 1361.765987][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.771735][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.776694][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.781819][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.786768][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.791376][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.796068][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.802177][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.808368][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.813595][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.818471][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.822988][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.829358][T24598] [ 1361.831678][T24598] Uninit was stored to memory at: [ 1361.836690][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.842423][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.847374][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.852494][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.857481][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.862000][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.866746][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.872844][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.879022][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.884242][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.889124][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.893658][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.900001][T24598] [ 1361.902317][T24598] Uninit was stored to memory at: [ 1361.907359][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1361.913105][T24598] __msan_chain_origin+0x54/0xa0 [ 1361.918051][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1361.923172][T24598] get_compat_msghdr+0x108/0x2b0 [ 1361.928121][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1361.932642][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1361.937355][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.943438][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.949620][T24598] __do_fast_syscall_32+0x127/0x180 [ 1361.954843][T24598] do_fast_syscall_32+0x77/0xd0 [ 1361.959725][T24598] do_SYSENTER_32+0x73/0x90 [ 1361.964262][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1361.970629][T24598] [ 1361.972971][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1361.979736][T24598] do_recvmmsg+0xbf/0x22d0 [ 1361.984187][T24598] do_recvmmsg+0xbf/0x22d0 [ 1362.072130][T24582] not chained 1890000 origins [ 1362.076940][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1362.085747][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.095831][T24582] Call Trace: [ 1362.099122][T24582] dump_stack+0x24c/0x2e0 [ 1362.103484][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1362.109238][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1362.114658][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1362.120237][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1362.125639][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1362.131306][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1362.137412][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1362.142905][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1362.148742][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1362.154832][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1362.160053][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1362.165716][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1362.171854][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1362.177173][T24582] ? _copy_from_user+0x1fd/0x300 [ 1362.182136][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.187098][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.192285][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.197257][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.201803][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1362.207022][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1362.212847][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1362.218060][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1362.223702][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1362.229035][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1362.233826][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.238522][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.244621][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.250793][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.256012][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.260894][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.265441][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.271798][T24582] RIP: 0023:0xf7f64549 [ 1362.275887][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1362.295508][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1362.303959][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1362.311982][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1362.319971][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.327953][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1362.335952][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.343970][T24582] Uninit was stored to memory at: [ 1362.348993][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.354754][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.359703][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.364840][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.369805][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.374335][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.379031][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.385137][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.391310][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.396524][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.401384][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.405904][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.412247][T24582] [ 1362.414570][T24582] Uninit was stored to memory at: [ 1362.419582][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.425317][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.430263][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.435391][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.440342][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.444863][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.449549][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.455660][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.461836][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.467069][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.471961][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.476489][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.482857][T24582] [ 1362.485184][T24582] Uninit was stored to memory at: [ 1362.490199][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.495941][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.500910][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.506050][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.511009][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.515531][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.520233][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.526318][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.532494][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.537731][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.542607][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.547120][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.553470][T24582] [ 1362.555786][T24582] Uninit was stored to memory at: [ 1362.560807][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.566555][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.571526][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.576672][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.581640][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.586159][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.590845][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.596927][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.603268][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.608503][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.613364][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.617880][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.624234][T24582] [ 1362.626589][T24582] Uninit was stored to memory at: [ 1362.631601][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.637337][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.642291][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.647429][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.652400][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.656934][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.661645][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.667752][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.673955][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.679193][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.684075][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.688602][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.694950][T24582] [ 1362.697276][T24582] Uninit was stored to memory at: [ 1362.702292][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.708041][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.713019][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.718168][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.723123][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.727642][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.732332][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.738438][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.744635][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.749867][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.754744][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.759278][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.765638][T24582] [ 1362.767979][T24582] Uninit was stored to memory at: [ 1362.773011][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1362.778765][T24582] __msan_chain_origin+0x54/0xa0 [ 1362.783748][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1362.788895][T24582] get_compat_msghdr+0x108/0x2b0 [ 1362.793860][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1362.798389][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1362.803092][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.809223][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.815416][T24582] __do_fast_syscall_32+0x127/0x180 [ 1362.820647][T24582] do_fast_syscall_32+0x77/0xd0 [ 1362.825554][T24582] do_SYSENTER_32+0x73/0x90 [ 1362.830091][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1362.836453][T24582] [ 1362.838812][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1362.845486][T24582] do_recvmmsg+0xbf/0x22d0 [ 1362.849935][T24582] do_recvmmsg+0xbf/0x22d0 [ 1363.028334][T24582] not chained 1900000 origins [ 1363.033055][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1363.041828][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.051899][T24582] Call Trace: [ 1363.055189][T24582] dump_stack+0x24c/0x2e0 [ 1363.059587][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1363.065334][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1363.070749][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1363.076333][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1363.081570][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1363.087221][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1363.093307][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1363.098547][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1363.104405][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1363.110506][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1363.115718][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1363.121370][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1363.127458][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1363.132754][T24582] ? _copy_from_user+0x1fd/0x300 [ 1363.137714][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.142676][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.147833][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.152791][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.157329][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1363.162602][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1363.168794][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1363.174031][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1363.179716][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1363.185019][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1363.189795][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.194519][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.200622][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.206835][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.212065][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.216931][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.221448][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.227796][T24582] RIP: 0023:0xf7f64549 [ 1363.231886][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1363.251530][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1363.259977][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1363.267979][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1363.275985][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1363.283977][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1363.291960][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1363.299948][T24582] Uninit was stored to memory at: [ 1363.304962][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.310698][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.315647][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.320788][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.325746][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.330267][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.334966][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.341048][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.347219][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.352443][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.357308][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.361827][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.368218][T24582] [ 1363.370563][T24582] Uninit was stored to memory at: [ 1363.375583][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.381323][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.386299][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.391426][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.396400][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.400929][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.405638][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.411718][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.417887][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.423101][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.427968][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.432497][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.438866][T24582] [ 1363.441189][T24582] Uninit was stored to memory at: [ 1363.446202][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.451939][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.456891][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.462026][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.466999][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.471531][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.476245][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.482338][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.488512][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.493723][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.498611][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.503124][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.509468][T24582] [ 1363.511787][T24582] Uninit was stored to memory at: [ 1363.516821][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.522577][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.527524][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.532673][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.537619][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.542134][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.546823][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.552903][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.559079][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.564322][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.569235][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.573774][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.580184][T24582] [ 1363.582508][T24582] Uninit was stored to memory at: [ 1363.587521][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.593260][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.598225][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.603347][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.608298][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.612816][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.617508][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.623611][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.629787][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.635016][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.639888][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.644424][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.650769][T24582] [ 1363.653090][T24582] Uninit was stored to memory at: [ 1363.658102][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.663862][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.668834][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.673978][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.678939][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.683466][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.688192][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.694272][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.700447][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.705668][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.710537][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.715059][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.721411][T24582] [ 1363.723742][T24582] Uninit was stored to memory at: [ 1363.728753][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1363.734497][T24582] __msan_chain_origin+0x54/0xa0 [ 1363.739453][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1363.744602][T24582] get_compat_msghdr+0x108/0x2b0 [ 1363.749559][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1363.754080][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1363.758773][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.764874][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.771070][T24582] __do_fast_syscall_32+0x127/0x180 [ 1363.776310][T24582] do_fast_syscall_32+0x77/0xd0 [ 1363.781201][T24582] do_SYSENTER_32+0x73/0x90 [ 1363.785740][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1363.792106][T24582] [ 1363.794439][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1363.801114][T24582] do_recvmmsg+0xbf/0x22d0 [ 1363.805588][T24582] do_recvmmsg+0xbf/0x22d0 [ 1364.065730][T24598] not chained 1910000 origins [ 1364.070476][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1364.079269][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.089345][T24598] Call Trace: [ 1364.092633][T24598] dump_stack+0x24c/0x2e0 [ 1364.096995][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1364.102726][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1364.108154][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1364.113712][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1364.118925][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1364.124565][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.130673][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1364.135887][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1364.141706][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1364.147792][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1364.153019][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1364.158674][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.164805][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1364.170132][T24598] ? _copy_from_user+0x1fd/0x300 [ 1364.175105][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.180068][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.185206][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.190167][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.194686][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1364.200250][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1364.205480][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1364.211416][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1364.216681][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1364.222323][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1364.227621][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1364.232399][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.237110][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.243217][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.249395][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.254617][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.259537][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.264096][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.270467][T24598] RIP: 0023:0xf7f64549 [ 1364.274582][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1364.294235][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1364.302686][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1364.310687][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1364.318690][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.326720][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1364.334721][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.342725][T24598] Uninit was stored to memory at: [ 1364.347757][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.353627][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.358584][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.363725][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.368703][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.373240][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.377940][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.384029][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.390235][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.395456][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.400329][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.404849][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.411192][T24598] [ 1364.413565][T24598] Uninit was stored to memory at: [ 1364.418589][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.424324][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.429292][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.434413][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.439363][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.443876][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.448564][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.454674][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.460852][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.466090][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.471005][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.475543][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.481897][T24598] [ 1364.484224][T24598] Uninit was stored to memory at: [ 1364.489254][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.495002][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.499962][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.505152][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.510116][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.514647][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.519351][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.525453][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.531641][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.536872][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.541759][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.546293][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.552652][T24598] [ 1364.554980][T24598] Uninit was stored to memory at: [ 1364.560000][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.565755][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.570739][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.575892][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.580858][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.585388][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.590093][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.596187][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.602373][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.607604][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.612498][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.617047][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.623411][T24598] [ 1364.625741][T24598] Uninit was stored to memory at: [ 1364.630756][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.636519][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.641484][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.646647][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.651612][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.656164][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.660876][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.666993][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.673200][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.678449][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.683348][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.687893][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.694260][T24598] [ 1364.696595][T24598] Uninit was stored to memory at: [ 1364.701624][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.707380][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.712352][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.717500][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.722472][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.727015][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.731726][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.737819][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.744125][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.749341][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.754207][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.758737][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.765094][T24598] [ 1364.767431][T24598] Uninit was stored to memory at: [ 1364.772448][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1364.778204][T24598] __msan_chain_origin+0x54/0xa0 [ 1364.783172][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1364.788310][T24598] get_compat_msghdr+0x108/0x2b0 [ 1364.793268][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1364.797788][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1364.802479][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.808569][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.814746][T24598] __do_fast_syscall_32+0x127/0x180 [ 1364.820001][T24598] do_fast_syscall_32+0x77/0xd0 [ 1364.824876][T24598] do_SYSENTER_32+0x73/0x90 [ 1364.829422][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1364.835775][T24598] [ 1364.838100][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1364.844773][T24598] do_recvmmsg+0xbf/0x22d0 [ 1364.849231][T24598] do_recvmmsg+0xbf/0x22d0 [ 1365.074732][T24582] not chained 1920000 origins [ 1365.079461][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1365.088276][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.098380][T24582] Call Trace: [ 1365.101679][T24582] dump_stack+0x24c/0x2e0 [ 1365.106040][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1365.111796][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1365.117202][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1365.122789][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1365.128019][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1365.133684][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1365.139792][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1365.145020][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1365.150859][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1365.156962][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1365.162195][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1365.167882][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1365.173992][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1365.179320][T24582] ? _copy_from_user+0x1fd/0x300 [ 1365.184297][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.189298][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.194453][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.199453][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.204011][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1365.209242][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1365.215096][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1365.220342][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1365.225989][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1365.231288][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1365.236083][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.240804][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.246899][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.253094][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.258347][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.263226][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.267768][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.274146][T24582] RIP: 0023:0xf7f64549 [ 1365.278239][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1365.297898][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1365.306348][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1365.314348][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1365.322348][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.330347][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1365.338346][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.346357][T24582] Uninit was stored to memory at: [ 1365.351420][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.357172][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.362138][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.367286][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.372264][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.376810][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.381618][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.387714][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.393880][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.399118][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.404010][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.408557][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.414896][T24582] [ 1365.417213][T24582] Uninit was stored to memory at: [ 1365.422222][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.427965][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.432912][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.438092][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.443041][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.447558][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.452241][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.458326][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.464506][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.469752][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.474666][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.479196][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.485546][T24582] [ 1365.487878][T24582] Uninit was stored to memory at: [ 1365.492901][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.498646][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.503602][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.508842][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.513885][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.518411][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.523102][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.529211][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.535388][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.540611][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.545480][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.550020][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.556363][T24582] [ 1365.558771][T24582] Uninit was stored to memory at: [ 1365.563801][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.569558][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.574544][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.579961][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.584928][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.589470][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.594178][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.600276][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.606459][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.611693][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.616571][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.621102][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.627458][T24582] [ 1365.629793][T24582] Uninit was stored to memory at: [ 1365.634811][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.640557][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.645512][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.650644][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.655601][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.660122][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.664824][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.670931][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.677127][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.682362][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.687240][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.691765][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.698321][T24582] [ 1365.700647][T24582] Uninit was stored to memory at: [ 1365.705658][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.711394][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.716390][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.721516][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.726468][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.730984][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.735676][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.741757][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.747943][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.753153][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.758017][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.762537][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.768901][T24582] [ 1365.771239][T24582] Uninit was stored to memory at: [ 1365.776268][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1365.782051][T24582] __msan_chain_origin+0x54/0xa0 [ 1365.787011][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1365.792183][T24582] get_compat_msghdr+0x108/0x2b0 [ 1365.797136][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1365.801740][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1365.806433][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.812526][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.818695][T24582] __do_fast_syscall_32+0x127/0x180 [ 1365.824183][T24582] do_fast_syscall_32+0x77/0xd0 [ 1365.829057][T24582] do_SYSENTER_32+0x73/0x90 [ 1365.833594][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1365.839934][T24582] [ 1365.842257][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1365.848920][T24582] do_recvmmsg+0xbf/0x22d0 [ 1365.853351][T24582] do_recvmmsg+0xbf/0x22d0 [ 1366.043584][T24582] not chained 1930000 origins [ 1366.048338][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1366.057120][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.067198][T24582] Call Trace: [ 1366.070504][T24582] dump_stack+0x24c/0x2e0 [ 1366.074875][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1366.080644][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1366.086047][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1366.091626][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.096847][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1366.102529][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.108620][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.113854][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1366.119690][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1366.125824][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.131054][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1366.136810][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.142934][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1366.148250][T24582] ? _copy_from_user+0x1fd/0x300 [ 1366.153217][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.158216][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.163371][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.168353][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.172907][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.178141][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1366.184089][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.189312][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1366.194966][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1366.200285][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1366.205063][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.209797][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.215897][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.222070][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.227297][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.232212][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.236735][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.243090][T24582] RIP: 0023:0xf7f64549 [ 1366.247170][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1366.266829][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1366.275302][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1366.283302][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1366.291314][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1366.299313][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1366.307315][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1366.315319][T24582] Uninit was stored to memory at: [ 1366.320350][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.326101][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.331061][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.336193][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.341146][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.345660][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.350446][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.356528][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.362728][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.367970][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.372863][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.377402][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.383855][T24582] [ 1366.386214][T24582] Uninit was stored to memory at: [ 1366.391247][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.397009][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.401960][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.407091][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.412057][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.416575][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.421265][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.427347][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.433528][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.438753][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.443618][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.448132][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.454488][T24582] [ 1366.456822][T24582] Uninit was stored to memory at: [ 1366.461836][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.467616][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.472710][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.477871][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.482834][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.487367][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.492063][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.498251][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.504446][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.509679][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.514555][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.519081][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.525436][T24582] [ 1366.527765][T24582] Uninit was stored to memory at: [ 1366.532795][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.538543][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.543508][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.548640][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.553603][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.558139][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.562875][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.568985][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.575198][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.580438][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.585326][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.589864][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.596228][T24582] [ 1366.598553][T24582] Uninit was stored to memory at: [ 1366.603567][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.609301][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.614259][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.619476][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.624455][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.628983][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.633669][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.639750][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.645956][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.651167][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.656032][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.660551][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.666916][T24582] [ 1366.669254][T24582] Uninit was stored to memory at: [ 1366.674286][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.680055][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.685017][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.690166][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.695128][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.699656][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.704359][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.710459][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.716739][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.721978][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.726863][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.731394][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.737751][T24582] [ 1366.740085][T24582] Uninit was stored to memory at: [ 1366.745109][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1366.750858][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.755821][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.760984][T24582] get_compat_msghdr+0x108/0x2b0 [ 1366.765959][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1366.770506][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1366.775226][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.781339][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.787525][T24582] __do_fast_syscall_32+0x127/0x180 [ 1366.792791][T24582] do_fast_syscall_32+0x77/0xd0 [ 1366.797663][T24582] do_SYSENTER_32+0x73/0x90 [ 1366.802187][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1366.808547][T24582] [ 1366.810886][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1366.817553][T24582] do_recvmmsg+0xbf/0x22d0 [ 1366.821991][T24582] do_recvmmsg+0xbf/0x22d0 [ 1366.878632][T24582] not chained 1940000 origins [ 1366.883417][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1366.892218][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.902390][T24582] Call Trace: [ 1366.905683][T24582] dump_stack+0x24c/0x2e0 [ 1366.910312][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1366.916134][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1366.921548][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1366.927121][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.932337][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1366.937989][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.944109][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.949364][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1366.955366][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1366.961458][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1366.966694][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1366.972374][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.978509][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1366.983825][T24582] ? _copy_from_user+0x1fd/0x300 [ 1366.988792][T24582] __msan_chain_origin+0x54/0xa0 [ 1366.993786][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1366.998935][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.003902][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.008446][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.013669][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1367.019527][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.024758][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1367.030453][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1367.035778][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1367.040586][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.045320][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.051417][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.057595][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.062820][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.067732][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.072282][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.078652][T24582] RIP: 0023:0xf7f64549 [ 1367.082740][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1367.102368][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1367.110815][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1367.118798][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1367.126778][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1367.134767][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1367.142749][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1367.150741][T24582] Uninit was stored to memory at: [ 1367.155765][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.161539][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.166538][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.171727][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.176707][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.181248][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.185969][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.192056][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.198436][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.203669][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.208567][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.213081][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.219427][T24582] [ 1367.221746][T24582] Uninit was stored to memory at: [ 1367.226759][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.232496][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.237438][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.242561][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.247515][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.252060][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.256753][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.262838][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.269045][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.274285][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.279180][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.283706][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.290051][T24582] [ 1367.292397][T24582] Uninit was stored to memory at: [ 1367.297417][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.303155][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.308108][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.313232][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.318179][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.322692][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.327376][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.333491][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.339677][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.344891][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.349766][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.354279][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.360620][T24582] [ 1367.362944][T24582] Uninit was stored to memory at: [ 1367.367963][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.373719][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.378681][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.383820][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.388773][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.393290][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.397976][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.404058][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.410229][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.415442][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.420312][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.424831][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.431174][T24582] [ 1367.433509][T24582] Uninit was stored to memory at: [ 1367.438518][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.444246][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.449208][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.454331][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.459297][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.463827][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.468554][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.474655][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.481007][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.486258][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.491213][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.495731][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.502077][T24582] [ 1367.504399][T24582] Uninit was stored to memory at: [ 1367.509416][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.515153][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.520120][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.525255][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.530216][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.534746][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.539439][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.545541][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.551719][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.556942][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.561814][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.566350][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.572709][T24582] [ 1367.575036][T24582] Uninit was stored to memory at: [ 1367.580051][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1367.585793][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.590755][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.595890][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.600868][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.605403][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.610098][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.616184][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.622361][T24582] __do_fast_syscall_32+0x127/0x180 [ 1367.627584][T24582] do_fast_syscall_32+0x77/0xd0 [ 1367.632452][T24582] do_SYSENTER_32+0x73/0x90 [ 1367.636974][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1367.643335][T24582] [ 1367.645660][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1367.652329][T24582] do_recvmmsg+0xbf/0x22d0 [ 1367.656775][T24582] do_recvmmsg+0xbf/0x22d0 [ 1367.830560][T24582] not chained 1950000 origins [ 1367.835283][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1367.844078][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.854158][T24582] Call Trace: [ 1367.857453][T24582] dump_stack+0x24c/0x2e0 [ 1367.861832][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1367.867589][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1367.873000][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1367.878589][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.883831][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1367.889497][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1367.895597][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.900816][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1367.906641][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1367.912726][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.917945][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1367.923591][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1367.929676][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1367.934978][T24582] ? _copy_from_user+0x1fd/0x300 [ 1367.939931][T24582] __msan_chain_origin+0x54/0xa0 [ 1367.944886][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1367.950039][T24582] get_compat_msghdr+0x108/0x2b0 [ 1367.955000][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1367.959527][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.964745][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1367.970583][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1367.975809][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1367.981463][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1367.986862][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1367.991655][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1367.996370][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.002482][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.008658][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.013876][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.018745][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.023265][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.029649][T24582] RIP: 0023:0xf7f64549 [ 1368.033724][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1368.053376][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1368.061932][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1368.069932][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1368.077930][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.085924][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1368.094002][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.102005][T24582] Uninit was stored to memory at: [ 1368.107048][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.112808][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.117759][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.122886][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.127835][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.132356][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.137053][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.143224][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.149397][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.154610][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.159474][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.164013][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.170373][T24582] [ 1368.172701][T24582] Uninit was stored to memory at: [ 1368.177714][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.183452][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.188405][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.193536][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.198486][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.203018][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.207711][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.213789][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.220061][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.225274][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.230139][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.234720][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.241067][T24582] [ 1368.243387][T24582] Uninit was stored to memory at: [ 1368.248399][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.254138][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.259092][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.264225][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.269211][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.273762][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.278495][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.284577][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.290776][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.295998][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.300881][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.305396][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.311737][T24582] [ 1368.314078][T24582] Uninit was stored to memory at: [ 1368.319101][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.324852][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.329835][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.335005][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.339952][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.344493][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.349182][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.355295][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.361478][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.366706][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.371582][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.376108][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.382453][T24582] [ 1368.384776][T24582] Uninit was stored to memory at: [ 1368.389788][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.395536][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.400499][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.405633][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.410585][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.415103][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.419786][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.425869][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.432039][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.437265][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.442157][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.446677][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.453020][T24582] [ 1368.455337][T24582] Uninit was stored to memory at: [ 1368.460357][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.466281][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.471240][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.476374][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.481353][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.485872][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.490571][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.496656][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.502827][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.508044][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.513080][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.517626][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.523993][T24582] [ 1368.526313][T24582] Uninit was stored to memory at: [ 1368.531345][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1368.537085][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.542032][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.547161][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.552120][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.556638][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1368.561328][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.567431][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.573625][T24582] __do_fast_syscall_32+0x127/0x180 [ 1368.578865][T24582] do_fast_syscall_32+0x77/0xd0 [ 1368.583731][T24582] do_SYSENTER_32+0x73/0x90 [ 1368.588265][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1368.594701][T24582] [ 1368.597025][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1368.603697][T24582] do_recvmmsg+0xbf/0x22d0 [ 1368.608138][T24582] do_recvmmsg+0xbf/0x22d0 [ 1368.843065][T24582] not chained 1960000 origins [ 1368.847802][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1368.856588][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.866669][T24582] Call Trace: [ 1368.869971][T24582] dump_stack+0x24c/0x2e0 [ 1368.874346][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1368.880118][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1368.885568][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1368.891154][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1368.896379][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1368.902032][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1368.908127][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1368.913349][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1368.919172][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1368.925260][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1368.930480][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1368.936168][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1368.942258][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1368.947576][T24582] ? _copy_from_user+0x1fd/0x300 [ 1368.952647][T24582] __msan_chain_origin+0x54/0xa0 [ 1368.957613][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1368.962785][T24582] get_compat_msghdr+0x108/0x2b0 [ 1368.967764][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1368.972364][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1368.977594][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1368.983432][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1368.988662][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1368.994321][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1368.999623][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1369.004408][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.009117][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.015218][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.021412][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.026637][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.031518][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.036044][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.042428][T24582] RIP: 0023:0xf7f64549 [ 1369.046510][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1369.066168][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1369.074637][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1369.082640][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1369.090637][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1369.098637][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1369.106640][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1369.114651][T24582] Uninit was stored to memory at: [ 1369.119690][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.125879][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.130848][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.135988][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.140984][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.145522][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.150262][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.156382][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.162662][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.167933][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.172828][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.177394][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.183768][T24582] [ 1369.186112][T24582] Uninit was stored to memory at: [ 1369.191137][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.196886][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.201855][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.206997][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.211956][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.216479][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.221195][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.227301][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.233487][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.238721][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.243611][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.248147][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.254511][T24582] [ 1369.256855][T24582] Uninit was stored to memory at: [ 1369.261883][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.267633][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.272632][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.277775][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.282744][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.287272][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.291988][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.298078][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.304257][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.309474][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.314348][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.318873][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.325346][T24582] [ 1369.327698][T24582] Uninit was stored to memory at: [ 1369.332901][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.338649][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.343613][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.348748][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.353704][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.358223][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.362948][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.369242][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.375440][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.380699][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.385579][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.390109][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.396460][T24582] [ 1369.398782][T24582] Uninit was stored to memory at: [ 1369.403793][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.409532][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.414483][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.419630][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.424581][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.429096][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.433783][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.439977][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.446149][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.451361][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.456226][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.460742][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.467097][T24582] [ 1369.469623][T24582] Uninit was stored to memory at: [ 1369.474639][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.480376][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.485344][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.490476][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.495436][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.499962][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.504654][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.510743][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.516918][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.522135][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.527012][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.531531][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.537886][T24582] [ 1369.540214][T24582] Uninit was stored to memory at: [ 1369.545233][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1369.550973][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.555932][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.561067][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.566037][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.570577][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.575284][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.581368][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.587545][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.592764][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.597641][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.602157][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.608508][T24582] [ 1369.610832][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1369.617519][T24582] do_recvmmsg+0xbf/0x22d0 [ 1369.621944][T24582] do_recvmmsg+0xbf/0x22d0 [ 1369.647371][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.654145][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.764084][T24582] not chained 1970000 origins [ 1369.768807][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1369.777607][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.787685][T24582] Call Trace: [ 1369.790992][T24582] dump_stack+0x24c/0x2e0 [ 1369.795354][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1369.801097][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1369.806528][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1369.812104][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1369.817329][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1369.822986][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1369.829074][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1369.834299][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1369.840128][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1369.846222][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1369.851445][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1369.857105][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1369.863195][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1369.868510][T24582] ? _copy_from_user+0x1fd/0x300 [ 1369.873472][T24582] __msan_chain_origin+0x54/0xa0 [ 1369.878459][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1369.883594][T24582] get_compat_msghdr+0x108/0x2b0 [ 1369.888654][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1369.893210][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1369.898427][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1369.904254][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1369.909475][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1369.915132][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1369.920429][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1369.925233][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1369.929946][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.936042][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.942213][T24582] __do_fast_syscall_32+0x127/0x180 [ 1369.947429][T24582] do_fast_syscall_32+0x77/0xd0 [ 1369.952297][T24582] do_SYSENTER_32+0x73/0x90 [ 1369.956842][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1369.963189][T24582] RIP: 0023:0xf7f64549 [ 1369.967298][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1369.986940][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1369.995394][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1370.003397][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1370.011399][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.019398][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1370.027396][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.035577][T24582] Uninit was stored to memory at: [ 1370.040607][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.046366][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.051335][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.056550][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.061618][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.066152][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.070947][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.077073][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.083285][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.088521][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.093409][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.097943][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.104303][T24582] [ 1370.106664][T24582] Uninit was stored to memory at: [ 1370.111683][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.117429][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.122387][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.127556][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.132521][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.137064][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.141774][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.147890][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.154077][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.159310][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.164198][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.168915][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.175283][T24582] [ 1370.177618][T24582] Uninit was stored to memory at: [ 1370.182645][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.188392][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.193348][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.198507][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.203458][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.208003][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.212691][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.218774][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.224946][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.230168][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.235045][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.239592][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.245931][T24582] [ 1370.248248][T24582] Uninit was stored to memory at: [ 1370.253270][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.259024][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.264005][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.269148][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.274116][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.278640][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.283333][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.289421][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.295593][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.300814][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.305698][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.310219][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.316566][T24582] [ 1370.318925][T24582] Uninit was stored to memory at: [ 1370.323943][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.329688][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.334652][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.339787][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.344744][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.349272][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.353981][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.360076][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.366460][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.371699][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.376583][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.381114][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.387466][T24582] [ 1370.389789][T24582] Uninit was stored to memory at: [ 1370.394904][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.400651][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.405603][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.410731][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.415680][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.420199][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.424895][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.430979][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.437239][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.442459][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.447328][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.451907][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.458253][T24582] [ 1370.460573][T24582] Uninit was stored to memory at: [ 1370.465591][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1370.471337][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.476316][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.481452][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.486407][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.490923][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.495617][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.501695][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.507886][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.513105][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.517981][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.522508][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.528854][T24582] [ 1370.531178][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1370.537850][T24582] do_recvmmsg+0xbf/0x22d0 [ 1370.542296][T24582] do_recvmmsg+0xbf/0x22d0 [ 1370.731949][T24582] not chained 1980000 origins [ 1370.736672][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1370.745666][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.755742][T24582] Call Trace: [ 1370.759042][T24582] dump_stack+0x24c/0x2e0 [ 1370.763572][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1370.769345][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1370.774759][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1370.780357][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1370.785575][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1370.791224][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1370.797315][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1370.802532][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1370.808358][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1370.814445][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1370.819668][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1370.825315][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1370.831403][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1370.836704][T24582] ? _copy_from_user+0x1fd/0x300 [ 1370.841658][T24582] __msan_chain_origin+0x54/0xa0 [ 1370.846619][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1370.851757][T24582] get_compat_msghdr+0x108/0x2b0 [ 1370.856802][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1370.861349][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1370.866579][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1370.872418][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1370.877654][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1370.883304][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1370.888612][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1370.893391][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1370.898086][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.904175][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.910351][T24582] __do_fast_syscall_32+0x127/0x180 [ 1370.915668][T24582] do_fast_syscall_32+0x77/0xd0 [ 1370.920554][T24582] do_SYSENTER_32+0x73/0x90 [ 1370.925077][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1370.931425][T24582] RIP: 0023:0xf7f64549 [ 1370.935502][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1370.955213][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1370.963668][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1370.971667][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1370.979663][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.987746][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1370.995951][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1371.004043][T24582] Uninit was stored to memory at: [ 1371.009071][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.014814][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.019779][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.024913][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.029864][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.034819][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.039524][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.045630][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.051820][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.057040][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.061909][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.066499][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.072879][T24582] [ 1371.075212][T24582] Uninit was stored to memory at: [ 1371.080222][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.085963][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.090941][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.096080][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.101034][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.105589][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.110286][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.116393][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.122573][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.127798][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.132680][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.137199][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.143555][T24582] [ 1371.145882][T24582] Uninit was stored to memory at: [ 1371.150893][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.156632][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.161592][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.166730][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.171718][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.176251][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.180947][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.187032][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.193202][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.198417][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.203274][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.207811][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.214167][T24582] [ 1371.216486][T24582] Uninit was stored to memory at: [ 1371.221496][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.227234][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.232175][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.237297][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.242250][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.246766][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.251454][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.257549][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.263726][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.268957][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.273835][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.278389][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.284729][T24582] [ 1371.287065][T24582] Uninit was stored to memory at: [ 1371.292076][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.297820][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.302774][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.307900][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.312849][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.317366][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.322056][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.328145][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.334323][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.339558][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.344434][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.348945][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.355275][T24582] [ 1371.357624][T24582] Uninit was stored to memory at: [ 1371.362667][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.368418][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.373390][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.378517][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.383491][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.388008][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.392693][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.398772][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.404935][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.410148][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.415036][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.419548][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.425893][T24582] [ 1371.428215][T24582] Uninit was stored to memory at: [ 1371.433222][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.438956][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.443933][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.449063][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.454028][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.458546][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.463253][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.469361][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.475541][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.480755][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.485619][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.490134][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.496472][T24582] [ 1371.498791][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1371.505476][T24582] do_recvmmsg+0xbf/0x22d0 [ 1371.509915][T24582] do_recvmmsg+0xbf/0x22d0 [ 1371.715265][T24582] not chained 1990000 origins [ 1371.719999][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1371.728811][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.738874][T24582] Call Trace: [ 1371.742188][T24582] dump_stack+0x24c/0x2e0 [ 1371.746571][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1371.752350][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1371.757748][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1371.763337][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1371.768571][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1371.774274][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.780376][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1371.785611][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1371.791456][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1371.797563][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1371.802800][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1371.808467][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.814577][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1371.819903][T24582] ? _copy_from_user+0x1fd/0x300 [ 1371.824875][T24582] __msan_chain_origin+0x54/0xa0 [ 1371.829847][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1371.834996][T24582] get_compat_msghdr+0x108/0x2b0 [ 1371.840001][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1371.844542][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1371.849775][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1371.855604][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1371.860853][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1371.866516][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1371.871836][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1371.876638][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1371.881383][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.887494][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.893689][T24582] __do_fast_syscall_32+0x127/0x180 [ 1371.899014][T24582] do_fast_syscall_32+0x77/0xd0 [ 1371.903893][T24582] do_SYSENTER_32+0x73/0x90 [ 1371.908417][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1371.914767][T24582] RIP: 0023:0xf7f64549 [ 1371.918847][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1371.938825][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1371.947283][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1371.955376][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1371.963371][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1371.971373][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1371.979374][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1371.987379][T24582] Uninit was stored to memory at: [ 1371.992400][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1371.998136][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.003080][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.008229][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.013192][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.017710][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.022402][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.028486][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.034658][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.039888][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.044757][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.049284][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.055637][T24582] [ 1372.057962][T24582] Uninit was stored to memory at: [ 1372.062978][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.068730][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.073698][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.078858][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.083820][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.088344][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.093032][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.099113][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.105282][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.110494][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.115356][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.119906][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.126249][T24582] [ 1372.128565][T24582] Uninit was stored to memory at: [ 1372.133579][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.139310][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.144254][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.149379][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.154325][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.158842][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.163543][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.169642][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.175841][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.181081][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.185973][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.190498][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.196843][T24582] [ 1372.199161][T24582] Uninit was stored to memory at: [ 1372.204174][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.209914][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.214906][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.220029][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.224976][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.229487][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.234221][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.240303][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.246478][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.251726][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.256591][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.261106][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.267553][T24582] [ 1372.269888][T24582] Uninit was stored to memory at: [ 1372.274903][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.280642][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.285590][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.290715][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.295693][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.300216][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.304908][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.310992][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.317223][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.322438][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.327310][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.331836][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.338181][T24582] [ 1372.340502][T24582] Uninit was stored to memory at: [ 1372.345511][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.351245][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.356210][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.361347][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.366314][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.370841][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.375545][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.381632][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.387806][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.393022][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.397885][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.402400][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.408742][T24582] [ 1372.411057][T24582] Uninit was stored to memory at: [ 1372.416069][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1372.421805][T24582] __msan_chain_origin+0x54/0xa0 [ 1372.426755][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1372.431880][T24582] get_compat_msghdr+0x108/0x2b0 [ 1372.436826][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1372.441340][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1372.446027][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.452111][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.458296][T24582] __do_fast_syscall_32+0x127/0x180 [ 1372.463515][T24582] do_fast_syscall_32+0x77/0xd0 [ 1372.468402][T24582] do_SYSENTER_32+0x73/0x90 [ 1372.473014][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.479361][T24582] [ 1372.481696][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1372.488363][T24582] do_recvmmsg+0xbf/0x22d0 [ 1372.492797][T24582] do_recvmmsg+0xbf/0x22d0 [ 1372.567704][T24598] not chained 2000000 origins [ 1372.572631][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1372.581450][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.591531][T24598] Call Trace: [ 1372.594830][T24598] dump_stack+0x24c/0x2e0 [ 1372.599209][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1372.604966][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1372.610399][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1372.616068][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1372.621302][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1372.626971][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1372.633067][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1372.638315][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1372.644151][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1372.650240][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1372.655457][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1372.661108][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1372.667209][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1372.672538][T24598] ? _copy_from_user+0x1fd/0x300 [ 1372.677516][T24598] __msan_chain_origin+0x54/0xa0 [ 1372.682484][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1372.687658][T24598] get_compat_msghdr+0x108/0x2b0 [ 1372.692617][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1372.697171][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1372.702749][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1372.707989][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1372.713882][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1372.719117][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1372.724832][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1372.730154][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1372.734932][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1372.739629][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.745719][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.751892][T24598] __do_fast_syscall_32+0x127/0x180 [ 1372.757107][T24598] do_fast_syscall_32+0x77/0xd0 [ 1372.761977][T24598] do_SYSENTER_32+0x73/0x90 [ 1372.766630][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.772986][T24598] RIP: 0023:0xf7f64549 [ 1372.777067][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1372.796698][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1372.805142][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1372.813125][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1372.821105][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1372.829081][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1372.837057][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1372.845128][T24598] Uninit was stored to memory at: [ 1372.850143][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1372.855902][T24598] __msan_chain_origin+0x54/0xa0 [ 1372.860861][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1372.866008][T24598] get_compat_msghdr+0x108/0x2b0 [ 1372.870978][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1372.875515][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1372.880230][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.886327][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.892590][T24598] __do_fast_syscall_32+0x127/0x180 [ 1372.897814][T24598] do_fast_syscall_32+0x77/0xd0 [ 1372.902678][T24598] do_SYSENTER_32+0x73/0x90 [ 1372.907194][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.913563][T24598] [ 1372.915889][T24598] Uninit was stored to memory at: [ 1372.920922][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1372.926689][T24598] __msan_chain_origin+0x54/0xa0 [ 1372.931637][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1372.936760][T24598] get_compat_msghdr+0x108/0x2b0 [ 1372.941706][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1372.946221][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1372.950910][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.957012][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.963273][T24598] __do_fast_syscall_32+0x127/0x180 [ 1372.968534][T24598] do_fast_syscall_32+0x77/0xd0 [ 1372.973417][T24598] do_SYSENTER_32+0x73/0x90 [ 1372.977947][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1372.984403][T24598] [ 1372.986729][T24598] Uninit was stored to memory at: [ 1372.991740][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1372.997477][T24598] __msan_chain_origin+0x54/0xa0 [ 1373.002426][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1373.007550][T24598] get_compat_msghdr+0x108/0x2b0 [ 1373.012518][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1373.017034][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1373.021727][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.027810][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.033989][T24598] __do_fast_syscall_32+0x127/0x180 [ 1373.039208][T24598] do_fast_syscall_32+0x77/0xd0 [ 1373.044075][T24598] do_SYSENTER_32+0x73/0x90 [ 1373.048588][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.054927][T24598] [ 1373.057246][T24598] Uninit was stored to memory at: [ 1373.062270][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1373.068030][T24598] __msan_chain_origin+0x54/0xa0 [ 1373.073013][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1373.078155][T24598] get_compat_msghdr+0x108/0x2b0 [ 1373.083104][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1373.087622][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1373.092313][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.098404][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.104578][T24598] __do_fast_syscall_32+0x127/0x180 [ 1373.109819][T24598] do_fast_syscall_32+0x77/0xd0 [ 1373.114694][T24598] do_SYSENTER_32+0x73/0x90 [ 1373.119209][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.125547][T24598] [ 1373.127869][T24598] Uninit was stored to memory at: [ 1373.132889][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1373.138622][T24598] __msan_chain_origin+0x54/0xa0 [ 1373.143569][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1373.148694][T24598] get_compat_msghdr+0x108/0x2b0 [ 1373.153647][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1373.158168][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1373.162865][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.168977][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.175606][T24598] __do_fast_syscall_32+0x127/0x180 [ 1373.180858][T24598] do_fast_syscall_32+0x77/0xd0 [ 1373.185746][T24598] do_SYSENTER_32+0x73/0x90 [ 1373.190280][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.196641][T24598] [ 1373.199050][T24598] Uninit was stored to memory at: [ 1373.204065][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1373.209810][T24598] __msan_chain_origin+0x54/0xa0 [ 1373.214764][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1373.219897][T24598] get_compat_msghdr+0x108/0x2b0 [ 1373.224853][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1373.229401][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1373.234093][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.240178][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.246349][T24598] __do_fast_syscall_32+0x127/0x180 [ 1373.251581][T24598] do_fast_syscall_32+0x77/0xd0 [ 1373.256446][T24598] do_SYSENTER_32+0x73/0x90 [ 1373.260967][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.267318][T24598] [ 1373.269656][T24598] Uninit was stored to memory at: [ 1373.274690][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1373.280454][T24598] __msan_chain_origin+0x54/0xa0 [ 1373.285420][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1373.290547][T24598] get_compat_msghdr+0x108/0x2b0 [ 1373.295501][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1373.300040][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1373.304735][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.310834][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.317028][T24598] __do_fast_syscall_32+0x127/0x180 [ 1373.322246][T24598] do_fast_syscall_32+0x77/0xd0 [ 1373.327110][T24598] do_SYSENTER_32+0x73/0x90 [ 1373.331626][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.338142][T24598] [ 1373.340465][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1373.347131][T24598] do_recvmmsg+0xbf/0x22d0 [ 1373.351565][T24598] do_recvmmsg+0xbf/0x22d0 [ 1373.610806][T24582] not chained 2010000 origins [ 1373.615530][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1373.624307][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.634376][T24582] Call Trace: [ 1373.637663][T24582] dump_stack+0x24c/0x2e0 [ 1373.642022][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1373.647760][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1373.653153][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1373.658720][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1373.663940][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1373.669610][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1373.675715][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1373.680949][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1373.686776][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1373.692865][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1373.698088][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1373.703742][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1373.709831][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1373.715134][T24582] ? _copy_from_user+0x1fd/0x300 [ 1373.720096][T24582] __msan_chain_origin+0x54/0xa0 [ 1373.725064][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1373.730221][T24582] get_compat_msghdr+0x108/0x2b0 [ 1373.735178][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1373.739749][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1373.744973][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1373.750819][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1373.756041][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1373.761698][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1373.767043][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1373.769348][T24598] not chained 2020000 origins [ 1373.771853][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1373.781192][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.787284][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.793492][T24582] __do_fast_syscall_32+0x127/0x180 [ 1373.798726][T24582] do_fast_syscall_32+0x77/0xd0 [ 1373.803604][T24582] do_SYSENTER_32+0x73/0x90 [ 1373.808145][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1373.814490][T24582] RIP: 0023:0xf7f64549 [ 1373.818580][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1373.838207][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1373.846673][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1373.854671][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1373.862661][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.870660][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1373.878664][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.886666][T24582] Uninit was stored to memory at: [ 1373.886667][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1373.891695][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1373.900474][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.906227][T24582] __msan_chain_origin+0x54/0xa0 [ 1373.916286][T24598] Call Trace: [ 1373.916312][T24598] dump_stack+0x24c/0x2e0 [ 1373.921214][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1373.924536][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1373.928869][T24582] get_compat_msghdr+0x108/0x2b0 [ 1373.933956][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1373.939654][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1373.944584][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1373.949928][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1373.954406][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1373.959944][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.964607][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1373.969790][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.975849][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1373.981470][T24582] __do_fast_syscall_32+0x127/0x180 [ 1373.987617][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1373.993698][T24582] do_fast_syscall_32+0x77/0xd0 [ 1373.998887][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1374.004068][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.008907][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1374.014690][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.019169][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1374.025211][T24582] [ 1374.025219][T24582] Uninit was stored to memory at: [ 1374.031516][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1374.036705][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.039009][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1374.044007][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.049616][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1374.055310][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.061362][T24598] ? _copy_from_user+0x1fd/0x300 [ 1374.066290][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.071577][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.076672][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.081590][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.086502][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.091421][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.095920][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.101012][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.105660][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.110575][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1374.116613][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.121098][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1374.127255][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.132800][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1374.137967][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.143144][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1374.147984][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.153780][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1374.158259][T24582] [ 1374.158268][T24582] Uninit was stored to memory at: [ 1374.163437][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1374.169757][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.175379][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1374.177690][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.182710][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.187976][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.193703][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.198468][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.203397][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.208058][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.213155][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.219198][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.224122][T24598] do_fast_syscall_32+0x77/0xd0 [ 1374.230269][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.234748][T24598] do_SYSENTER_32+0x73/0x90 [ 1374.239921][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.244577][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.249400][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.255441][T24598] RIP: 0023:0xf7f64549 [ 1374.259951][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.266095][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1374.272413][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.277601][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 [ 1374.281646][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.286467][T24598] ORIG_RAX: 0000000000000151 [ 1374.306073][T24582] [ 1374.306088][T24582] Uninit was stored to memory at: [ 1374.310567][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1374.316612][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.322914][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1374.327567][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.329870][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.334879][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.342825][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1374.348526][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.356478][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.361397][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.369374][T24598] Uninit was stored to memory at: [ 1374.374471][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.382436][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1374.387348][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.395305][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.399786][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.404789][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.409441][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.415132][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.421176][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.426096][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.432229][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.437327][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.442502][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.447440][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.452267][T24582] [ 1374.456762][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.461263][T24582] Uninit was stored to memory at: [ 1374.461281][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.465926][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.472236][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.478291][T24598] do_fast_syscall_32+0x77/0xd0 [ 1374.480602][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.486729][T24598] do_SYSENTER_32+0x73/0x90 [ 1374.491730][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.497425][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.502594][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.507504][T24598] [ 1374.507512][T24598] Uninit was stored to memory at: [ 1374.512328][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.517431][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1374.521906][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.526818][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.533133][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.537785][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.540092][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.545090][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.549742][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.555456][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.561520][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.566450][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.572590][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.577691][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.582862][T24582] [ 1374.582872][T24582] Uninit was stored to memory at: [ 1374.587773][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.592616][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.597091][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.601569][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.606219][T24598] do_fast_syscall_32+0x77/0xd0 [ 1374.612520][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.618590][T24598] do_SYSENTER_32+0x73/0x90 [ 1374.620896][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.625893][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.632021][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.637715][T24598] [ 1374.637724][T24598] Uninit was stored to memory at: [ 1374.642889][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.647804][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1374.652629][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.657716][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.662201][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.667129][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.673441][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.677962][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.680275][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.685281][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.689940][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.695644][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.701693][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.706615][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.712750][T24582] [ 1374.712761][T24582] Uninit was stored to memory at: [ 1374.712771][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1374.717857][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.723041][T24582] __msan_chain_origin+0x54/0xa0 [ 1374.727951][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.732776][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1374.737253][T24598] do_fast_syscall_32+0x77/0xd0 [ 1374.741728][T24582] get_compat_msghdr+0x108/0x2b0 [ 1374.746378][T24598] do_SYSENTER_32+0x73/0x90 [ 1374.752678][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1374.758719][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.761033][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1374.766034][T24598] [ 1374.766045][T24598] Uninit was stored to memory at: [ 1374.771810][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.777966][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1374.782895][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.788074][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.793174][T24582] __do_fast_syscall_32+0x127/0x180 [ 1374.798024][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.802944][T24582] do_fast_syscall_32+0x77/0xd0 [ 1374.807427][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.811933][T24582] do_SYSENTER_32+0x73/0x90 [ 1374.818235][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.822896][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.825203][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.830202][T24582] [ 1374.830210][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1374.836326][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.842017][T24582] do_recvmmsg+0xbf/0x22d0 [ 1374.848159][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.853082][T24582] do_recvmmsg+0xbf/0x22d0 [ 1374.858267][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.928342][T24598] do_fast_syscall_32+0x77/0xd0 [ 1374.933216][T24598] do_SYSENTER_32+0x73/0x90 [ 1374.937730][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1374.944076][T24598] [ 1374.946400][T24598] Uninit was stored to memory at: [ 1374.951507][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1374.957241][T24598] __msan_chain_origin+0x54/0xa0 [ 1374.962216][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1374.967387][T24598] get_compat_msghdr+0x108/0x2b0 [ 1374.972359][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1374.976885][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1374.981609][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.987699][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.993899][T24598] __do_fast_syscall_32+0x127/0x180 [ 1374.999124][T24598] do_fast_syscall_32+0x77/0xd0 [ 1375.003988][T24598] do_SYSENTER_32+0x73/0x90 [ 1375.008514][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1375.014864][T24598] [ 1375.017218][T24598] Uninit was stored to memory at: [ 1375.022238][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1375.027985][T24598] __msan_chain_origin+0x54/0xa0 [ 1375.032933][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1375.038091][T24598] get_compat_msghdr+0x108/0x2b0 [ 1375.043056][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1375.047577][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1375.052271][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.058361][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.064540][T24598] __do_fast_syscall_32+0x127/0x180 [ 1375.069778][T24598] do_fast_syscall_32+0x77/0xd0 [ 1375.074676][T24598] do_SYSENTER_32+0x73/0x90 [ 1375.079199][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1375.085544][T24598] [ 1375.087868][T24598] Uninit was stored to memory at: [ 1375.092882][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1375.098617][T24598] __msan_chain_origin+0x54/0xa0 [ 1375.103563][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1375.108687][T24598] get_compat_msghdr+0x108/0x2b0 [ 1375.113632][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1375.118147][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1375.122836][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.128918][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.135094][T24598] __do_fast_syscall_32+0x127/0x180 [ 1375.140325][T24598] do_fast_syscall_32+0x77/0xd0 [ 1375.145191][T24598] do_SYSENTER_32+0x73/0x90 [ 1375.149709][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1375.156315][T24598] [ 1375.158634][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1375.165305][T24598] do_recvmmsg+0xbf/0x22d0 [ 1375.169757][T24598] do_recvmmsg+0xbf/0x22d0 [ 1375.675569][T24582] not chained 2030000 origins [ 1375.680292][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1375.689081][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.699187][T24582] Call Trace: [ 1375.702479][T24582] dump_stack+0x24c/0x2e0 [ 1375.706832][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1375.712567][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1375.717961][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1375.723534][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1375.728758][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1375.734414][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1375.740542][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1375.745782][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1375.751604][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1375.757688][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1375.762931][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1375.768616][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1375.774721][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1375.780060][T24582] ? _copy_from_user+0x1fd/0x300 [ 1375.785019][T24582] __msan_chain_origin+0x54/0xa0 [ 1375.789974][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1375.795113][T24582] get_compat_msghdr+0x108/0x2b0 [ 1375.800248][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1375.804790][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1375.810009][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1375.815863][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1375.821081][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1375.826735][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1375.832038][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1375.836851][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1375.841559][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.847665][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.853854][T24582] __do_fast_syscall_32+0x127/0x180 [ 1375.859096][T24582] do_fast_syscall_32+0x77/0xd0 [ 1375.863993][T24582] do_SYSENTER_32+0x73/0x90 [ 1375.868544][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1375.874943][T24582] RIP: 0023:0xf7f64549 [ 1375.879040][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1375.898711][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1375.907170][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1375.915172][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1375.923169][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.931159][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1375.939148][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.947155][T24582] Uninit was stored to memory at: [ 1375.952364][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1375.958115][T24582] __msan_chain_origin+0x54/0xa0 [ 1375.963107][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1375.968309][T24582] get_compat_msghdr+0x108/0x2b0 [ 1375.973290][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1375.977826][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1375.982552][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.988661][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.994842][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.000064][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.004934][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.009451][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.015801][T24582] [ 1376.018121][T24582] Uninit was stored to memory at: [ 1376.023134][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.028884][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.033842][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.038973][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.043928][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.048449][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.053157][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.059258][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.065446][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.070684][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.075616][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.080139][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.086489][T24582] [ 1376.088810][T24582] Uninit was stored to memory at: [ 1376.093828][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.099566][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.104518][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.109645][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.114601][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.119122][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.123829][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.129918][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.136092][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.141312][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.146266][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.150795][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.157142][T24582] [ 1376.159466][T24582] Uninit was stored to memory at: [ 1376.164496][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.170247][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.175213][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.180346][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.185303][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.189825][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.194610][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.200702][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.206875][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.212098][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.216963][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.221500][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.227848][T24582] [ 1376.230169][T24582] Uninit was stored to memory at: [ 1376.235270][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.241006][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.245954][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.251082][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.256036][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.260555][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.265261][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.271366][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.277562][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.282798][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.287666][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.292183][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.298530][T24582] [ 1376.300852][T24582] Uninit was stored to memory at: [ 1376.305868][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.311612][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.316561][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.321723][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.326676][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.331194][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.335883][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.342060][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.348232][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.353020][T24598] not chained 2040000 origins [ 1376.353445][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.358112][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1376.362940][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.371706][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.376201][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.386248][T24598] Call Trace: [ 1376.386269][T24598] dump_stack+0x24c/0x2e0 [ 1376.392555][T24582] [ 1376.392567][T24582] Uninit was stored to memory at: [ 1376.395832][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1376.400135][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1376.402443][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1376.407439][T24582] __msan_chain_origin+0x54/0xa0 [ 1376.413140][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1376.418868][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1376.424223][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1376.429138][T24582] get_compat_msghdr+0x108/0x2b0 [ 1376.434659][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1376.439744][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1376.444920][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1376.449834][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1376.455440][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1376.459920][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.465971][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1376.470639][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.475822][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1376.481864][T24582] __do_fast_syscall_32+0x127/0x180 [ 1376.487641][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1376.493792][T24582] do_fast_syscall_32+0x77/0xd0 [ 1376.499840][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1376.505015][T24582] do_SYSENTER_32+0x73/0x90 [ 1376.510192][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1376.515020][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.520636][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1376.525115][T24582] [ 1376.525123][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1376.531158][T24598] ? _copy_from_user+0x1fd/0x300 [ 1376.537459][T24582] do_recvmmsg+0xbf/0x22d0 [ 1376.542725][T24598] __msan_chain_origin+0x54/0xa0 [ 1376.545031][T24582] do_recvmmsg+0xbf/0x22d0 [ 1376.551683][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1376.575513][T24598] get_compat_msghdr+0x108/0x2b0 [ 1376.580548][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1376.585143][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1376.590718][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1376.595946][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1376.601776][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1376.606995][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1376.612641][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1376.618044][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1376.622825][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1376.627522][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.633640][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.639821][T24598] __do_fast_syscall_32+0x127/0x180 [ 1376.645038][T24598] do_fast_syscall_32+0x77/0xd0 [ 1376.649993][T24598] do_SYSENTER_32+0x73/0x90 [ 1376.654519][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.660868][T24598] RIP: 0023:0xf7f64549 [ 1376.664982][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1376.684612][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1376.693069][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1376.701073][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1376.709104][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.717089][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1376.725075][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.733070][T24598] Uninit was stored to memory at: [ 1376.738094][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1376.743838][T24598] __msan_chain_origin+0x54/0xa0 [ 1376.748798][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1376.753944][T24598] get_compat_msghdr+0x108/0x2b0 [ 1376.758909][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1376.763450][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1376.768159][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.774263][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.780444][T24598] __do_fast_syscall_32+0x127/0x180 [ 1376.785659][T24598] do_fast_syscall_32+0x77/0xd0 [ 1376.790526][T24598] do_SYSENTER_32+0x73/0x90 [ 1376.795044][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.801383][T24598] [ 1376.803830][T24598] Uninit was stored to memory at: [ 1376.808847][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1376.814670][T24598] __msan_chain_origin+0x54/0xa0 [ 1376.819618][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1376.824916][T24598] get_compat_msghdr+0x108/0x2b0 [ 1376.829891][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1376.834449][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1376.839138][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.845221][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.851407][T24598] __do_fast_syscall_32+0x127/0x180 [ 1376.856629][T24598] do_fast_syscall_32+0x77/0xd0 [ 1376.861497][T24598] do_SYSENTER_32+0x73/0x90 [ 1376.866026][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.872405][T24598] [ 1376.874739][T24598] Uninit was stored to memory at: [ 1376.879752][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1376.885587][T24598] __msan_chain_origin+0x54/0xa0 [ 1376.890554][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1376.895726][T24598] get_compat_msghdr+0x108/0x2b0 [ 1376.900773][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1376.905294][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1376.909989][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.916080][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.922278][T24598] __do_fast_syscall_32+0x127/0x180 [ 1376.927514][T24598] do_fast_syscall_32+0x77/0xd0 [ 1376.932388][T24598] do_SYSENTER_32+0x73/0x90 [ 1376.936922][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1376.943264][T24598] [ 1376.945585][T24598] Uninit was stored to memory at: [ 1376.950600][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1376.956339][T24598] __msan_chain_origin+0x54/0xa0 [ 1376.961288][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1376.966424][T24598] get_compat_msghdr+0x108/0x2b0 [ 1376.971413][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1376.975962][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1376.980656][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.986767][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.992959][T24598] __do_fast_syscall_32+0x127/0x180 [ 1376.998185][T24598] do_fast_syscall_32+0x77/0xd0 [ 1377.003051][T24598] do_SYSENTER_32+0x73/0x90 [ 1377.007567][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.013923][T24598] [ 1377.016241][T24598] Uninit was stored to memory at: [ 1377.021251][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1377.027071][T24598] __msan_chain_origin+0x54/0xa0 [ 1377.032017][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1377.037137][T24598] get_compat_msghdr+0x108/0x2b0 [ 1377.042083][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1377.046598][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1377.051284][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.057364][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.063536][T24598] __do_fast_syscall_32+0x127/0x180 [ 1377.068779][T24598] do_fast_syscall_32+0x77/0xd0 [ 1377.073670][T24598] do_SYSENTER_32+0x73/0x90 [ 1377.078209][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.084570][T24598] [ 1377.086904][T24598] Uninit was stored to memory at: [ 1377.091918][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1377.097657][T24598] __msan_chain_origin+0x54/0xa0 [ 1377.102607][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1377.107738][T24598] get_compat_msghdr+0x108/0x2b0 [ 1377.112710][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1377.117231][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1377.121915][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.127998][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.134184][T24598] __do_fast_syscall_32+0x127/0x180 [ 1377.139397][T24598] do_fast_syscall_32+0x77/0xd0 [ 1377.144262][T24598] do_SYSENTER_32+0x73/0x90 [ 1377.148779][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.155118][T24598] [ 1377.157526][T24598] Uninit was stored to memory at: [ 1377.162542][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1377.168296][T24598] __msan_chain_origin+0x54/0xa0 [ 1377.173270][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1377.178414][T24598] get_compat_msghdr+0x108/0x2b0 [ 1377.183377][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1377.187899][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1377.192610][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.198696][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.204905][T24598] __do_fast_syscall_32+0x127/0x180 [ 1377.210141][T24598] do_fast_syscall_32+0x77/0xd0 [ 1377.215018][T24598] do_SYSENTER_32+0x73/0x90 [ 1377.219559][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.225914][T24598] [ 1377.228241][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1377.234907][T24598] do_recvmmsg+0xbf/0x22d0 [ 1377.239352][T24598] do_recvmmsg+0xbf/0x22d0 [ 1377.478340][T24582] not chained 2050000 origins [ 1377.483094][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1377.491914][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.501989][T24582] Call Trace: [ 1377.505284][T24582] dump_stack+0x24c/0x2e0 [ 1377.509650][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1377.515401][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1377.521155][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1377.526730][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1377.531955][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1377.537608][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.543695][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1377.548988][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1377.554824][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1377.561037][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1377.566265][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1377.571931][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.578067][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1377.583389][T24582] ? _copy_from_user+0x1fd/0x300 [ 1377.588360][T24582] __msan_chain_origin+0x54/0xa0 [ 1377.593327][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1377.598469][T24582] get_compat_msghdr+0x108/0x2b0 [ 1377.603429][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1377.607963][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1377.613192][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1377.619021][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1377.624233][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1377.629883][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1377.635184][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1377.639970][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1377.644674][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.650863][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.657080][T24582] __do_fast_syscall_32+0x127/0x180 [ 1377.662321][T24582] do_fast_syscall_32+0x77/0xd0 [ 1377.667212][T24582] do_SYSENTER_32+0x73/0x90 [ 1377.671754][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.678130][T24582] RIP: 0023:0xf7f64549 [ 1377.682229][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1377.693944][T24598] not chained 2060000 origins [ 1377.701890][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1377.715005][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1377.723015][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1377.731008][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.739000][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1377.747005][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.754997][T24582] Uninit was stored to memory at: [ 1377.754998][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1377.760126][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1377.768893][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.774602][T24582] __msan_chain_origin+0x54/0xa0 [ 1377.784663][T24598] Call Trace: [ 1377.784686][T24598] dump_stack+0x24c/0x2e0 [ 1377.789620][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1377.792883][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1377.797201][T24582] get_compat_msghdr+0x108/0x2b0 [ 1377.802287][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1377.807983][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1377.812901][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1377.818246][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1377.822724][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1377.828268][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.832917][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1377.838115][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.844220][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.849821][T24582] __do_fast_syscall_32+0x127/0x180 [ 1377.855963][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1377.862021][T24582] do_fast_syscall_32+0x77/0xd0 [ 1377.867209][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1377.872395][T24582] do_SYSENTER_32+0x73/0x90 [ 1377.877225][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1377.883004][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1377.887511][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1377.893563][T24582] [ 1377.893571][T24582] Uninit was stored to memory at: [ 1377.899892][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1377.905082][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1377.907395][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.912402][T24582] __msan_chain_origin+0x54/0xa0 [ 1377.918011][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1377.923704][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1377.929750][T24598] ? _copy_from_user+0x1fd/0x300 [ 1377.934665][T24582] get_compat_msghdr+0x108/0x2b0 [ 1377.939929][T24598] __msan_chain_origin+0x54/0xa0 [ 1377.945017][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1377.950019][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1377.954927][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1377.959852][T24598] get_compat_msghdr+0x108/0x2b0 [ 1377.964330][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.969432][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1377.974092][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.979118][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1377.985160][T24582] __do_fast_syscall_32+0x127/0x180 [ 1377.989644][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1377.995785][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.001314][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1378.006488][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.011662][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1378.016500][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.022298][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1378.026787][T24582] [ 1378.026796][T24582] Uninit was stored to memory at: [ 1378.031964][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1378.038273][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1378.043892][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1378.046203][T24582] __msan_chain_origin+0x54/0xa0 [ 1378.051202][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.056475][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1378.062178][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.066923][T24582] get_compat_msghdr+0x108/0x2b0 [ 1378.071847][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.076506][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1378.081767][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.087803][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1378.092727][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.098851][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.103335][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.108522][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.113354][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.118172][T24582] __do_fast_syscall_32+0x127/0x180 [ 1378.124563][T24598] RIP: 0023:0xf7f64549 [ 1378.129047][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.135176][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1378.141474][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.146645][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 [ 1378.150687][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.155513][T24598] ORIG_RAX: 0000000000000151 [ 1378.175185][T24582] [ 1378.175201][T24582] Uninit was stored to memory at: [ 1378.175211][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1378.179685][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1378.185722][T24582] __msan_chain_origin+0x54/0xa0 [ 1378.192021][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1378.196671][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1378.198979][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1378.203991][T24582] get_compat_msghdr+0x108/0x2b0 [ 1378.209690][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1378.217648][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1378.222825][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1378.230779][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1378.235876][T24598] Uninit was stored to memory at: [ 1378.243837][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.248755][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.256710][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.261208][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.269167][T24582] __do_fast_syscall_32+0x127/0x180 [ 1378.273919][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.278924][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.284964][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.290669][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.296828][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.301754][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.306933][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.312040][T24582] [ 1378.312052][T24582] Uninit was stored to memory at: [ 1378.316878][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.321799][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1378.326290][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.330802][T24582] __msan_chain_origin+0x54/0xa0 [ 1378.337113][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.341793][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1378.344121][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.349123][T24582] get_compat_msghdr+0x108/0x2b0 [ 1378.355166][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.360873][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1378.367010][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.371940][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1378.377120][T24598] [ 1378.377128][T24598] Uninit was stored to memory at: [ 1378.377138][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.382213][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.387038][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.392036][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.396531][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.401033][T24582] __do_fast_syscall_32+0x127/0x180 [ 1378.407342][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.412016][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.414433][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.419430][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.425126][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.431259][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.436175][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.442332][T24582] [ 1378.442342][T24582] Uninit was stored to memory at: [ 1378.447421][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.452595][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1378.457520][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.462356][T24582] __msan_chain_origin+0x54/0xa0 [ 1378.466843][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.471332][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1378.475987][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.482327][T24582] get_compat_msghdr+0x108/0x2b0 [ 1378.488371][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.490688][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1378.495690][T24598] [ 1378.495701][T24598] Uninit was stored to memory at: [ 1378.495709][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.501848][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1378.507549][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.512730][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.517650][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.522493][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.527581][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.532068][T24582] __do_fast_syscall_32+0x127/0x180 [ 1378.536985][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.543299][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.547815][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.550130][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.555130][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.560830][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.565487][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.570411][T24582] [ 1378.570425][T24582] Uninit was stored to memory at: [ 1378.576466][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.581579][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1378.587797][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.592723][T24582] __msan_chain_origin+0x54/0xa0 [ 1378.597898][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.602391][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1378.607220][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.611874][T24582] get_compat_msghdr+0x108/0x2b0 [ 1378.616354][T24598] [ 1378.616363][T24598] Uninit was stored to memory at: [ 1378.616372][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.622417][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1378.628725][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.634884][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1378.637214][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.642226][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.647398][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.653091][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.657914][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.662832][T24582] __do_fast_syscall_32+0x127/0x180 [ 1378.667319][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.672429][T24582] do_fast_syscall_32+0x77/0xd0 [ 1378.678767][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.683693][T24582] do_SYSENTER_32+0x73/0x90 [ 1378.686015][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.691011][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.696726][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.701207][T24582] [ 1378.701214][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1378.706118][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.710771][T24582] do_recvmmsg+0xbf/0x22d0 [ 1378.715861][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.721908][T24582] do_recvmmsg+0xbf/0x22d0 [ 1378.726824][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.813907][T24598] [ 1378.816242][T24598] Uninit was stored to memory at: [ 1378.821251][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.826987][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.831933][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.837055][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.842003][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.846536][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.851221][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.857302][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.863476][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.868707][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.873582][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.878113][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.884489][T24598] [ 1378.886899][T24598] Uninit was stored to memory at: [ 1378.891910][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.897648][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.902593][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.907719][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.912675][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.917202][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.921887][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.927986][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.934152][T24598] __do_fast_syscall_32+0x127/0x180 [ 1378.939376][T24598] do_fast_syscall_32+0x77/0xd0 [ 1378.944257][T24598] do_SYSENTER_32+0x73/0x90 [ 1378.948774][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1378.955115][T24598] [ 1378.957435][T24598] Uninit was stored to memory at: [ 1378.962549][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1378.968298][T24598] __msan_chain_origin+0x54/0xa0 [ 1378.973284][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1378.978431][T24598] get_compat_msghdr+0x108/0x2b0 [ 1378.983380][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1378.987899][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1378.992589][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.998690][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.004859][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.010076][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.014937][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.019463][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.025857][T24598] [ 1379.028195][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1379.034867][T24598] do_recvmmsg+0xbf/0x22d0 [ 1379.039302][T24598] do_recvmmsg+0xbf/0x22d0 [ 1379.236582][T24598] not chained 2070000 origins [ 1379.241298][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1379.250083][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.260197][T24598] Call Trace: [ 1379.263502][T24598] dump_stack+0x24c/0x2e0 [ 1379.267872][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1379.273627][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1379.279043][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1379.284785][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1379.290030][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1379.295686][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1379.301783][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1379.307007][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1379.312839][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1379.318932][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1379.324153][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1379.329810][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1379.335904][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1379.341286][T24598] ? _copy_from_user+0x1fd/0x300 [ 1379.346290][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.351353][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.356509][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.361513][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.366045][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1379.371627][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1379.376865][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1379.382705][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1379.387925][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1379.393586][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1379.398894][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1379.403679][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.408384][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.414477][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.420651][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.425871][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.430739][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.435258][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.441621][T24598] RIP: 0023:0xf7f64549 [ 1379.445726][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1379.465562][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1379.474113][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1379.482106][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1379.490091][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1379.498077][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1379.506058][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1379.514247][T24598] Uninit was stored to memory at: [ 1379.519269][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.525013][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.529975][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.535153][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.540106][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.544653][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.549348][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.555427][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.561608][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.566843][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.571775][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.576306][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.582648][T24598] [ 1379.584976][T24598] Uninit was stored to memory at: [ 1379.589993][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.595735][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.600681][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.605809][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.610756][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.615274][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.619967][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.626052][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.632251][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.637469][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.642345][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.646881][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.653222][T24598] [ 1379.655544][T24598] Uninit was stored to memory at: [ 1379.660574][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.666329][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.671295][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.676449][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.681395][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.685950][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.690641][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.696755][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.702927][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.708150][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.713043][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.717564][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.723931][T24598] [ 1379.726309][T24598] Uninit was stored to memory at: [ 1379.731327][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.737065][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.742011][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.747139][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.752088][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.756615][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.761318][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.767506][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.773700][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.778930][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.783796][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.788320][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.794712][T24598] [ 1379.797035][T24598] Uninit was stored to memory at: [ 1379.802048][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.807786][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.812736][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.817901][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.822921][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.827440][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.832134][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.838308][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.844515][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.849750][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.854620][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.859139][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.865486][T24598] [ 1379.867819][T24598] Uninit was stored to memory at: [ 1379.872835][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.878574][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.883523][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.888685][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.893641][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.898167][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.902860][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.908951][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.915126][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.920367][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.925239][T24598] do_SYSENTER_32+0x73/0x90 [ 1379.929760][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1379.936103][T24598] [ 1379.938430][T24598] Uninit was stored to memory at: [ 1379.943459][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1379.949207][T24598] __msan_chain_origin+0x54/0xa0 [ 1379.954161][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1379.959306][T24598] get_compat_msghdr+0x108/0x2b0 [ 1379.964279][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1379.968813][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1379.973510][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.979608][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.985797][T24598] __do_fast_syscall_32+0x127/0x180 [ 1379.991036][T24598] do_fast_syscall_32+0x77/0xd0 [ 1379.995914][T24598] do_SYSENTER_32+0x73/0x90 [ 1380.000437][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.006836][T24598] [ 1380.009168][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1380.015841][T24598] do_recvmmsg+0xbf/0x22d0 [ 1380.020296][T24598] do_recvmmsg+0xbf/0x22d0 [ 1380.212797][T24582] not chained 2080000 origins [ 1380.217568][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1380.226446][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.236536][T24582] Call Trace: [ 1380.239831][T24582] dump_stack+0x24c/0x2e0 [ 1380.244253][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1380.250039][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1380.255450][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1380.261040][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1380.266278][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1380.271951][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1380.278056][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1380.283285][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1380.289118][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1380.295228][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1380.300453][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1380.306111][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1380.312205][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1380.317516][T24582] ? _copy_from_user+0x1fd/0x300 [ 1380.322481][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.327444][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.332591][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.337562][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.342100][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1380.347328][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1380.353168][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1380.358397][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1380.364064][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1380.369396][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1380.374217][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.378942][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.385063][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.391266][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.396498][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.401377][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.405935][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.412285][T24582] RIP: 0023:0xf7f64549 [ 1380.416464][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1380.436128][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1380.444577][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1380.452577][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1380.460578][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.468583][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1380.476591][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.484775][T24582] Uninit was stored to memory at: [ 1380.489813][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.495751][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.500750][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.505880][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.510845][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.515391][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.520092][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.526310][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.532499][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.537728][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.542604][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.547124][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.553583][T24582] [ 1380.555908][T24582] Uninit was stored to memory at: [ 1380.560923][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.566677][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.571652][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.576800][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.582647][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.587228][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.591948][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.598062][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.604264][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.609501][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.614382][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.618907][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.625664][T24582] [ 1380.627999][T24582] Uninit was stored to memory at: [ 1380.633022][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.638774][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.643761][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.648923][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.653920][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.658487][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.663197][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.669345][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.675556][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.680796][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.685691][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.690237][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.696604][T24582] [ 1380.698944][T24582] Uninit was stored to memory at: [ 1380.703994][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.709747][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.714711][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.719933][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.724897][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.729440][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.734134][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.740225][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.746437][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.751704][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.756606][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.761131][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.767527][T24582] [ 1380.769871][T24582] Uninit was stored to memory at: [ 1380.774898][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.780657][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.785673][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.790848][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.795872][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.800475][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.805192][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.811299][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.817494][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.822735][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.827623][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.832156][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.838515][T24582] [ 1380.840853][T24582] Uninit was stored to memory at: [ 1380.845873][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.851738][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.856707][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.861852][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.866828][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.871372][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.876112][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.882217][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.888410][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.893644][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.898638][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.903167][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.909607][T24582] [ 1380.911933][T24582] Uninit was stored to memory at: [ 1380.916948][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1380.922690][T24582] __msan_chain_origin+0x54/0xa0 [ 1380.927641][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1380.932767][T24582] get_compat_msghdr+0x108/0x2b0 [ 1380.937820][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1380.942380][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1380.947076][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.953189][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.959409][T24582] __do_fast_syscall_32+0x127/0x180 [ 1380.964820][T24582] do_fast_syscall_32+0x77/0xd0 [ 1380.969719][T24582] do_SYSENTER_32+0x73/0x90 [ 1380.974265][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1380.980792][T24582] [ 1380.983134][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1380.989805][T24582] do_recvmmsg+0xbf/0x22d0 [ 1380.994257][T24582] do_recvmmsg+0xbf/0x22d0 [ 1381.129155][T24582] not chained 2090000 origins [ 1381.134055][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1381.142969][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.153075][T24582] Call Trace: [ 1381.156367][T24582] dump_stack+0x24c/0x2e0 [ 1381.160775][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1381.166524][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1381.171962][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1381.177546][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1381.182774][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1381.188425][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1381.194507][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1381.199731][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1381.205559][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1381.211661][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1381.216967][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1381.222636][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1381.228735][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1381.234058][T24582] ? _copy_from_user+0x1fd/0x300 [ 1381.239014][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.243969][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.249144][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.254125][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.258659][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1381.263885][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1381.269735][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1381.274965][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1381.280622][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1381.285939][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1381.290730][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.295443][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.301556][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.307732][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.312959][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.317833][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.322359][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.328710][T24582] RIP: 0023:0xf7f64549 [ 1381.332791][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1381.353557][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1381.362015][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1381.370025][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1381.378028][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1381.386017][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1381.394011][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.402007][T24582] Uninit was stored to memory at: [ 1381.407031][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.412770][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.417722][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.422846][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.427802][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.432360][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.437144][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.443231][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.449409][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.454627][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.459499][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.464031][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.470386][T24582] [ 1381.472723][T24582] Uninit was stored to memory at: [ 1381.477741][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.483500][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.488551][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.493688][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.498729][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.503269][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.508017][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.514101][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.520455][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.525673][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.530588][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.535105][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.541449][T24582] [ 1381.543802][T24582] Uninit was stored to memory at: [ 1381.548846][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.554584][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.559535][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.564670][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.569630][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.574157][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.578856][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.585113][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.591314][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.596531][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.601424][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.606057][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.612399][T24582] [ 1381.614719][T24582] Uninit was stored to memory at: [ 1381.619734][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.625475][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.630520][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.635702][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.640658][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.645183][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.649882][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.655967][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.662183][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.667419][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.672298][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.676852][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.683245][T24582] [ 1381.685570][T24582] Uninit was stored to memory at: [ 1381.690632][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.696374][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.701333][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.706459][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.711420][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.715979][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.720674][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.726760][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.732929][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.738173][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.743056][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.747674][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.754018][T24582] [ 1381.756341][T24582] Uninit was stored to memory at: [ 1381.761361][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.767133][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.772122][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.777516][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.782466][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.787402][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.792128][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.798235][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.804421][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.809655][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.814583][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.819112][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.825460][T24582] [ 1381.827792][T24582] Uninit was stored to memory at: [ 1381.832809][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1381.838548][T24582] __msan_chain_origin+0x54/0xa0 [ 1381.843497][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1381.848627][T24582] get_compat_msghdr+0x108/0x2b0 [ 1381.853575][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1381.858091][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1381.862786][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.868885][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.875071][T24582] __do_fast_syscall_32+0x127/0x180 [ 1381.880298][T24582] do_fast_syscall_32+0x77/0xd0 [ 1381.885213][T24582] do_SYSENTER_32+0x73/0x90 [ 1381.889745][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1381.896098][T24582] [ 1381.898428][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1381.905097][T24582] do_recvmmsg+0xbf/0x22d0 [ 1381.909651][T24582] do_recvmmsg+0xbf/0x22d0 [ 1382.095635][T24582] not chained 2100000 origins [ 1382.100369][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1382.109164][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.119340][T24582] Call Trace: [ 1382.122674][T24582] dump_stack+0x24c/0x2e0 [ 1382.127054][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1382.132933][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1382.138391][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1382.144030][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1382.149275][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1382.154955][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1382.161062][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1382.166307][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1382.172166][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1382.178280][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1382.183527][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1382.189200][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1382.195307][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1382.200639][T24582] ? _copy_from_user+0x1fd/0x300 [ 1382.205659][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.210643][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.216022][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.221055][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.225614][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1382.230959][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1382.236843][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1382.242110][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1382.247870][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1382.253195][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1382.258001][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.263252][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.269410][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.275623][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.280869][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.285790][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.290336][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.296694][T24582] RIP: 0023:0xf7f64549 [ 1382.300774][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1382.320604][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1382.329068][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1382.337107][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1382.345134][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1382.353295][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1382.361327][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1382.369334][T24582] Uninit was stored to memory at: [ 1382.374376][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.380129][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.385087][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.390229][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.395192][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.399720][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.404417][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.410509][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.416697][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.421916][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.426788][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.431346][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.437694][T24582] [ 1382.440104][T24582] Uninit was stored to memory at: [ 1382.445125][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.450879][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.455845][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.460978][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.465943][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.470468][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.475241][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.481430][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.487626][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.492871][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.497979][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.502545][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.508903][T24582] [ 1382.511252][T24582] Uninit was stored to memory at: [ 1382.516269][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.522008][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.526962][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.532090][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.537043][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.541565][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.546260][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.552346][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.558531][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.563770][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.568677][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.573212][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.579574][T24582] [ 1382.581930][T24582] Uninit was stored to memory at: [ 1382.586952][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.592699][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.597661][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.602789][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.607741][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.612266][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.616957][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.623046][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.629305][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.634523][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.639390][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.643938][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.650284][T24582] [ 1382.652605][T24582] Uninit was stored to memory at: [ 1382.657623][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.663385][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.668364][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.673549][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.678520][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.683042][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.687826][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.694035][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.700211][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.705431][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.710395][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.715014][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.721407][T24582] [ 1382.723739][T24582] Uninit was stored to memory at: [ 1382.728760][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.734526][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.739493][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.744654][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.749648][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.754217][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.758973][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.765086][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.771286][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.776681][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.781575][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.786098][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.792448][T24582] [ 1382.794772][T24582] Uninit was stored to memory at: [ 1382.799792][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1382.805534][T24582] __msan_chain_origin+0x54/0xa0 [ 1382.810485][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1382.815614][T24582] get_compat_msghdr+0x108/0x2b0 [ 1382.820825][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1382.825343][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1382.830033][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.836124][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.842318][T24582] __do_fast_syscall_32+0x127/0x180 [ 1382.847613][T24582] do_fast_syscall_32+0x77/0xd0 [ 1382.852476][T24582] do_SYSENTER_32+0x73/0x90 [ 1382.856997][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1382.863385][T24582] [ 1382.865717][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1382.872390][T24582] do_recvmmsg+0xbf/0x22d0 [ 1382.876835][T24582] do_recvmmsg+0xbf/0x22d0 [ 1383.097832][T24582] not chained 2110000 origins [ 1383.102573][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1383.111407][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.121482][T24582] Call Trace: [ 1383.124824][T24582] dump_stack+0x24c/0x2e0 [ 1383.129182][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1383.134942][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1383.140341][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1383.145911][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1383.151127][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1383.156777][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1383.162868][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1383.168091][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1383.173922][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1383.180105][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1383.185381][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1383.191049][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1383.197147][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1383.202464][T24582] ? _copy_from_user+0x1fd/0x300 [ 1383.207431][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.212396][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.217545][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.222514][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.227061][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1383.232287][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1383.238119][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1383.243344][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1383.249002][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1383.254315][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1383.259112][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.263834][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.269940][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.276131][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.281368][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.286289][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.290832][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.297194][T24582] RIP: 0023:0xf7f64549 [ 1383.301291][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1383.321098][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1383.329552][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1383.337555][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1383.345606][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1383.353909][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1383.361940][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1383.370067][T24582] Uninit was stored to memory at: [ 1383.375105][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.380859][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.385835][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.390975][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.395939][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.400468][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.405195][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.411286][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.417548][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.422765][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.427642][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.432163][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.438507][T24582] [ 1383.440835][T24582] Uninit was stored to memory at: [ 1383.445888][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.451669][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.456623][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.461755][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.466714][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.471231][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.475983][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.482075][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.488245][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.493472][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.498342][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.502873][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.509223][T24582] [ 1383.511595][T24582] Uninit was stored to memory at: [ 1383.516645][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.522386][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.527606][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.532736][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.537731][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.542254][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.547037][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.553123][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.559295][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.564514][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.569383][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.573901][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.580254][T24582] [ 1383.582655][T24582] Uninit was stored to memory at: [ 1383.587693][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.593485][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.598451][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.603589][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.608547][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.613079][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.617788][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.623885][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.630059][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.635276][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.640157][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.644676][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.651019][T24582] [ 1383.653337][T24582] Uninit was stored to memory at: [ 1383.658348][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.664089][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.669048][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.674176][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.679130][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.683649][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.688356][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.694444][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.700621][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.705843][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.710709][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.715228][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.721577][T24582] [ 1383.723898][T24582] Uninit was stored to memory at: [ 1383.728929][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.734665][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.739616][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.744742][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.749693][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.754218][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.758911][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.764996][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.771177][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.776407][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.781276][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.785799][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.792182][T24582] [ 1383.794595][T24582] Uninit was stored to memory at: [ 1383.799616][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1383.805361][T24582] __msan_chain_origin+0x54/0xa0 [ 1383.810324][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1383.815467][T24582] get_compat_msghdr+0x108/0x2b0 [ 1383.820432][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1383.824964][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1383.829666][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.835764][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.841985][T24582] __do_fast_syscall_32+0x127/0x180 [ 1383.847222][T24582] do_fast_syscall_32+0x77/0xd0 [ 1383.852100][T24582] do_SYSENTER_32+0x73/0x90 [ 1383.856635][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1383.863098][T24582] [ 1383.865437][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1383.872117][T24582] do_recvmmsg+0xbf/0x22d0 [ 1383.876585][T24582] do_recvmmsg+0xbf/0x22d0 [ 1384.083715][T24582] not chained 2120000 origins [ 1384.088437][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1384.097224][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.107362][T24582] Call Trace: [ 1384.110677][T24582] dump_stack+0x24c/0x2e0 [ 1384.115131][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1384.121014][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1384.126519][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1384.132146][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1384.137422][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1384.143291][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1384.149743][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1384.154997][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1384.160850][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1384.167008][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1384.172237][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1384.177897][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1384.184029][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1384.189386][T24582] ? _copy_from_user+0x1fd/0x300 [ 1384.194556][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.199657][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.204801][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.209789][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.214326][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1384.219551][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1384.225381][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1384.230703][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1384.236566][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1384.241908][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1384.246697][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.251495][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.257606][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.263787][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.269016][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.273915][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.278440][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.284796][T24582] RIP: 0023:0xf7f64549 [ 1384.288880][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1384.308510][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1384.316962][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1384.324982][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1384.332972][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.340962][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1384.349050][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.357084][T24582] Uninit was stored to memory at: [ 1384.362137][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.367985][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.372935][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.378101][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.383101][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.387625][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.392314][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.398426][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.404632][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.409854][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.414723][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.419240][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.425934][T24582] [ 1384.428284][T24582] Uninit was stored to memory at: [ 1384.433300][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.439052][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.444016][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.449156][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.454139][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.458658][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.463349][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.469439][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.475610][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.480830][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.485704][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.490228][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.496588][T24582] [ 1384.498914][T24582] Uninit was stored to memory at: [ 1384.503934][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.509670][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.514624][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.519844][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.524797][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.529317][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.534017][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.540104][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.546364][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.551596][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.556463][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.561012][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.567496][T24582] [ 1384.569826][T24582] Uninit was stored to memory at: [ 1384.574876][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.580730][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.585716][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.590895][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.595849][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.600397][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.605217][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.611356][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.617556][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.622774][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.627643][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.632213][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.638585][T24582] [ 1384.640910][T24582] Uninit was stored to memory at: [ 1384.645932][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.651673][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.656628][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.661783][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.666822][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.671338][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.676056][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.682164][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.688345][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.693581][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.698490][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.703013][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.709365][T24582] [ 1384.711696][T24582] Uninit was stored to memory at: [ 1384.716717][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.722459][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.727414][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.732543][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.737501][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.742025][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.746719][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.752805][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.758985][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.764213][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.769080][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.773592][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.779945][T24582] [ 1384.782264][T24582] Uninit was stored to memory at: [ 1384.787301][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1384.793038][T24582] __msan_chain_origin+0x54/0xa0 [ 1384.797988][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1384.803115][T24582] get_compat_msghdr+0x108/0x2b0 [ 1384.808157][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1384.812675][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1384.817372][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.823459][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.829633][T24582] __do_fast_syscall_32+0x127/0x180 [ 1384.834901][T24582] do_fast_syscall_32+0x77/0xd0 [ 1384.839774][T24582] do_SYSENTER_32+0x73/0x90 [ 1384.844323][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1384.850667][T24582] [ 1384.852994][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1384.859674][T24582] do_recvmmsg+0xbf/0x22d0 [ 1384.864106][T24582] do_recvmmsg+0xbf/0x22d0 [ 1385.011578][T24582] not chained 2130000 origins [ 1385.016308][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1385.025098][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.035176][T24582] Call Trace: [ 1385.038484][T24582] dump_stack+0x24c/0x2e0 [ 1385.042905][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1385.048695][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1385.054099][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1385.059679][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1385.064900][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1385.070555][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.076639][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1385.081859][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1385.087700][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1385.093791][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1385.099014][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1385.104668][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.110757][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1385.116065][T24582] ? _copy_from_user+0x1fd/0x300 [ 1385.121030][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.125992][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.131135][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.136098][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.140631][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1385.145897][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1385.151727][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1385.156946][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1385.162601][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1385.167949][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1385.172738][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.177444][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.183630][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.189819][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.195136][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.200015][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.204604][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.211035][T24582] RIP: 0023:0xf7f64549 [ 1385.215135][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1385.234772][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1385.243229][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1385.251230][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1385.259224][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.267233][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1385.275232][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.283225][T24582] Uninit was stored to memory at: [ 1385.288245][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.294034][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.298984][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.304112][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.309072][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.313594][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.318285][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.324718][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.330890][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.336110][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.341012][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.345555][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.351899][T24582] [ 1385.354220][T24582] Uninit was stored to memory at: [ 1385.359238][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.365024][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.370025][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.375201][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.380167][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.384700][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.389417][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.395531][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.401709][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.407023][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.411890][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.416409][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.423017][T24582] [ 1385.425394][T24582] Uninit was stored to memory at: [ 1385.430407][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.436159][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.441122][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.446257][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.451213][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.455731][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.460423][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.466517][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.472705][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.477953][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.482848][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.487367][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.493713][T24582] [ 1385.496041][T24582] Uninit was stored to memory at: [ 1385.501055][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.507346][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.512300][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.517442][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.522399][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.526915][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.531623][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.537707][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.543897][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.549157][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.554025][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.558545][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.564925][T24582] [ 1385.567265][T24582] Uninit was stored to memory at: [ 1385.572288][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.578042][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.582992][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.588128][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.593089][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.597611][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.602302][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.608392][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.614561][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.619785][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.624652][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.629170][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.635519][T24582] [ 1385.637840][T24582] Uninit was stored to memory at: [ 1385.642855][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.648598][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.653546][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.658797][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.663759][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.668289][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.673116][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.679262][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.685450][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.690788][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.695652][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.700165][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.706541][T24582] [ 1385.708863][T24582] Uninit was stored to memory at: [ 1385.713905][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1385.719820][T24582] __msan_chain_origin+0x54/0xa0 [ 1385.724797][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1385.729948][T24582] get_compat_msghdr+0x108/0x2b0 [ 1385.734936][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1385.739472][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1385.744208][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.750315][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.756513][T24582] __do_fast_syscall_32+0x127/0x180 [ 1385.761749][T24582] do_fast_syscall_32+0x77/0xd0 [ 1385.766636][T24582] do_SYSENTER_32+0x73/0x90 [ 1385.771170][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1385.777531][T24582] [ 1385.779888][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1385.786565][T24582] do_recvmmsg+0xbf/0x22d0 [ 1385.791008][T24582] do_recvmmsg+0xbf/0x22d0 [ 1385.882651][T24598] not chained 2140000 origins [ 1385.887377][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1385.896627][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.906696][T24598] Call Trace: [ 1385.909989][T24598] dump_stack+0x24c/0x2e0 [ 1385.914358][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1385.920105][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1385.925509][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1385.931084][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1385.936308][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1385.942014][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.948104][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1385.953455][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1385.959285][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1385.965386][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1385.970624][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1385.976394][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.982485][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1385.987789][T24598] ? _copy_from_user+0x1fd/0x300 [ 1385.992742][T24598] __msan_chain_origin+0x54/0xa0 [ 1385.997694][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.002845][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.007810][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.012335][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1386.017904][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1386.023165][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1386.029003][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1386.034216][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1386.039871][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1386.045173][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1386.049952][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.054676][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.060769][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.066965][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.072197][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.077067][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.081588][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.087935][T24598] RIP: 0023:0xf7f64549 [ 1386.092009][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1386.111637][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1386.120088][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1386.128262][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1386.136306][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1386.144291][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1386.152279][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1386.160277][T24598] Uninit was stored to memory at: [ 1386.165321][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.171074][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.176039][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.181163][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.186115][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.190633][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.195407][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.201505][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.207674][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.212883][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.217762][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.222294][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.228646][T24598] [ 1386.230974][T24598] Uninit was stored to memory at: [ 1386.235992][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.241732][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.246684][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.251809][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.256763][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.261288][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.265997][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.272095][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.278280][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.283509][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.288378][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.292895][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.299241][T24598] [ 1386.301577][T24598] Uninit was stored to memory at: [ 1386.306618][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.312355][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.317304][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.322824][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.327776][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.332298][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.337018][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.343101][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.349353][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.354683][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.359546][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.364072][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.370431][T24598] [ 1386.372775][T24598] Uninit was stored to memory at: [ 1386.377791][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.383573][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.388544][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.393694][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.398651][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.403212][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.407909][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.413992][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.420166][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.425397][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.430292][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.434825][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.441172][T24598] [ 1386.443498][T24598] Uninit was stored to memory at: [ 1386.448563][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.454301][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.459259][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.464431][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.469397][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.473928][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.478629][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.484742][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.490918][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.496140][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.501018][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.505544][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.511907][T24598] [ 1386.514241][T24598] Uninit was stored to memory at: [ 1386.519261][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.525015][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.529983][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.535122][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.540103][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.544639][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.549361][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.555549][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.561737][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.567061][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.571990][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.576531][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.582893][T24598] [ 1386.585276][T24598] Uninit was stored to memory at: [ 1386.590347][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1386.596127][T24598] __msan_chain_origin+0x54/0xa0 [ 1386.601126][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1386.606277][T24598] get_compat_msghdr+0x108/0x2b0 [ 1386.611240][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1386.615765][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1386.620462][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.626563][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.632797][T24598] __do_fast_syscall_32+0x127/0x180 [ 1386.638026][T24598] do_fast_syscall_32+0x77/0xd0 [ 1386.642894][T24598] do_SYSENTER_32+0x73/0x90 [ 1386.647444][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1386.653797][T24598] [ 1386.656123][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1386.662860][T24598] do_recvmmsg+0xbf/0x22d0 [ 1386.667319][T24598] do_recvmmsg+0xbf/0x22d0 [ 1386.855415][T24582] not chained 2150000 origins [ 1386.860235][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1386.869029][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.879117][T24582] Call Trace: [ 1386.882426][T24582] dump_stack+0x24c/0x2e0 [ 1386.886814][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1386.892593][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1386.898024][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1386.903628][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1386.908874][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1386.914543][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1386.920647][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1386.925880][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1386.931713][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1386.937804][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1386.943031][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1386.948687][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1386.954776][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1386.960089][T24582] ? _copy_from_user+0x1fd/0x300 [ 1386.965059][T24582] __msan_chain_origin+0x54/0xa0 [ 1386.970032][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1386.975189][T24582] get_compat_msghdr+0x108/0x2b0 [ 1386.980224][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1386.984777][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1386.990021][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1386.995860][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.001081][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1387.006738][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1387.012049][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1387.016835][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.021582][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.027683][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.033886][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.039121][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.044005][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.048575][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.055364][T24582] RIP: 0023:0xf7f64549 [ 1387.059447][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1387.079120][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1387.087612][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1387.095622][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1387.103645][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1387.111646][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1387.119649][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1387.127652][T24582] Uninit was stored to memory at: [ 1387.132690][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.138437][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.143417][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.148634][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.153590][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.158111][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.162853][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.169082][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.175348][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.180597][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.185496][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.190018][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.196372][T24582] [ 1387.198700][T24582] Uninit was stored to memory at: [ 1387.203725][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.209479][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.214434][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.219686][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.224648][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.229178][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.233873][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.239965][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.246153][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.251376][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.256247][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.260771][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.267147][T24582] [ 1387.269493][T24582] Uninit was stored to memory at: [ 1387.274532][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.280297][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.285278][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.290525][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.295504][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.300060][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.304777][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.310903][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.317100][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.322353][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.327376][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.331899][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.338291][T24582] [ 1387.340619][T24582] Uninit was stored to memory at: [ 1387.345760][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.351508][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.356470][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.361611][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.366591][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.371141][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.375859][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.381973][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.388177][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.393427][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.398329][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.402872][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.409272][T24582] [ 1387.411607][T24582] Uninit was stored to memory at: [ 1387.416641][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.422383][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.427386][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.432520][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.437462][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.441980][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.446674][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.452758][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.458968][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.464274][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.469168][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.473715][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.480089][T24582] [ 1387.482432][T24582] Uninit was stored to memory at: [ 1387.487469][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.493229][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.498204][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.503346][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.508310][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.512849][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.517547][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.523637][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.529826][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.535052][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.539941][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.544474][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.550833][T24582] [ 1387.553171][T24582] Uninit was stored to memory at: [ 1387.558197][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1387.563962][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.568951][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.574115][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.579103][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.583656][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.588388][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.594511][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.600725][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.605973][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.610866][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.615404][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.621765][T24582] [ 1387.624118][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1387.630795][T24582] do_recvmmsg+0xbf/0x22d0 [ 1387.635244][T24582] do_recvmmsg+0xbf/0x22d0 [ 1387.661726][ T4703] Bluetooth: hci2: command 0x0406 tx timeout [ 1387.730944][T24582] not chained 2160000 origins [ 1387.735673][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1387.744469][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.754549][T24582] Call Trace: [ 1387.757847][T24582] dump_stack+0x24c/0x2e0 [ 1387.762223][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1387.768129][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1387.773560][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1387.779165][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.784404][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1387.790069][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1387.796163][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.801388][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1387.807265][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1387.813364][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.818602][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1387.824281][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1387.830423][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1387.835733][T24582] ? _copy_from_user+0x1fd/0x300 [ 1387.840704][T24582] __msan_chain_origin+0x54/0xa0 [ 1387.845670][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1387.850927][T24582] get_compat_msghdr+0x108/0x2b0 [ 1387.855894][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1387.860437][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.865680][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1387.871532][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1387.876776][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1387.882461][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1387.887790][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1387.892717][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1387.897541][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.903645][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.909833][T24582] __do_fast_syscall_32+0x127/0x180 [ 1387.915126][T24582] do_fast_syscall_32+0x77/0xd0 [ 1387.920046][T24582] do_SYSENTER_32+0x73/0x90 [ 1387.924600][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1387.930959][T24582] RIP: 0023:0xf7f64549 [ 1387.935049][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1387.954689][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1387.963227][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1387.971244][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1387.979252][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1387.987263][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1387.995265][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.003275][T24582] Uninit was stored to memory at: [ 1388.008309][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.014058][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.019019][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.024156][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.029113][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.033641][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.038334][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.044424][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.050605][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.055828][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.060702][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.065246][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.071628][T24582] [ 1388.073979][T24582] Uninit was stored to memory at: [ 1388.079017][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.084784][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.089760][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.094899][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.099858][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.104381][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.109072][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.115166][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.121365][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.126629][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.131502][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.136024][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.142375][T24582] [ 1388.144697][T24582] Uninit was stored to memory at: [ 1388.149726][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.155462][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.160425][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.165583][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.170564][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.175110][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.179838][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.185953][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.192251][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.197501][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.202401][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.206945][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.213304][T24582] [ 1388.215638][T24582] Uninit was stored to memory at: [ 1388.220653][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.226407][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.231364][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.236497][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.241574][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.246110][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.250818][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.256911][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.263098][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.268538][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.273438][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.277986][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.284364][T24582] [ 1388.286711][T24582] Uninit was stored to memory at: [ 1388.291737][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.297487][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.302445][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.307587][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.312553][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.317087][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.321789][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.327891][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.334109][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.339334][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.344201][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.348724][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.355097][T24582] [ 1388.357428][T24582] Uninit was stored to memory at: [ 1388.362449][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.368201][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.373183][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.378388][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.383408][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.387953][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.392671][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.398779][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.405035][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.410267][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.415143][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.419671][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.426108][T24582] [ 1388.428438][T24582] Uninit was stored to memory at: [ 1388.433460][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1388.439247][T24582] __msan_chain_origin+0x54/0xa0 [ 1388.444206][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1388.449337][T24582] get_compat_msghdr+0x108/0x2b0 [ 1388.454292][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1388.458818][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1388.463573][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.469692][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.475921][T24582] __do_fast_syscall_32+0x127/0x180 [ 1388.481170][T24582] do_fast_syscall_32+0x77/0xd0 [ 1388.486064][T24582] do_SYSENTER_32+0x73/0x90 [ 1388.490603][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.496990][T24582] [ 1388.499325][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1388.505995][T24582] do_recvmmsg+0xbf/0x22d0 [ 1388.510433][T24582] do_recvmmsg+0xbf/0x22d0 [ 1388.694388][T24598] not chained 2170000 origins [ 1388.699109][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1388.707889][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.718047][T24598] Call Trace: [ 1388.721344][T24598] dump_stack+0x24c/0x2e0 [ 1388.725769][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1388.731544][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1388.736946][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1388.742519][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1388.747743][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1388.753410][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1388.759933][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1388.765391][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1388.771375][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1388.777496][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1388.782743][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1388.788410][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1388.794497][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1388.799812][T24598] ? _copy_from_user+0x1fd/0x300 [ 1388.804771][T24598] __msan_chain_origin+0x54/0xa0 [ 1388.809728][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1388.814906][T24598] get_compat_msghdr+0x108/0x2b0 [ 1388.819890][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1388.824415][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1388.829981][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1388.835211][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1388.841041][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1388.846257][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1388.852051][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1388.857354][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1388.862146][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1388.866873][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.872988][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.879196][T24598] __do_fast_syscall_32+0x127/0x180 [ 1388.884454][T24598] do_fast_syscall_32+0x77/0xd0 [ 1388.889334][T24598] do_SYSENTER_32+0x73/0x90 [ 1388.893870][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1388.900219][T24598] RIP: 0023:0xf7f64549 [ 1388.904299][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1388.923969][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1388.932425][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1388.940417][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1388.948403][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1388.956390][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1388.964384][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.972399][T24598] Uninit was stored to memory at: [ 1388.977444][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1388.983210][T24598] __msan_chain_origin+0x54/0xa0 [ 1388.988188][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1388.993319][T24598] get_compat_msghdr+0x108/0x2b0 [ 1388.998364][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.002889][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.007588][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.013686][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.019923][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.025162][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.030047][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.034589][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.040946][T24598] [ 1389.043319][T24598] Uninit was stored to memory at: [ 1389.048361][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.054114][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.059072][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.064218][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.069195][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.073743][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.078511][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.084621][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.090814][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.096037][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.100920][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.105473][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.111910][T24598] [ 1389.114237][T24598] Uninit was stored to memory at: [ 1389.119335][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.125080][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.130119][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.135251][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.140206][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.144733][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.149538][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.155663][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.161860][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.167165][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.172066][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.176654][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.183084][T24598] [ 1389.185424][T24598] Uninit was stored to memory at: [ 1389.190443][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.196193][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.201154][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.206302][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.211265][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.215806][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.220588][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.226681][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.233198][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.238526][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.243528][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.248185][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.254785][T24598] [ 1389.257152][T24598] Uninit was stored to memory at: [ 1389.262223][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.268003][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.272993][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.278156][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.283355][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.287936][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.292655][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.298765][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.304974][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.310213][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.315095][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.319624][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.325985][T24598] [ 1389.328343][T24598] Uninit was stored to memory at: [ 1389.333473][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.339228][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.344201][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.349357][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.354447][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.358976][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.363723][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.369929][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.376146][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.381446][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.386352][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.390904][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.397282][T24598] [ 1389.399737][T24598] Uninit was stored to memory at: [ 1389.404790][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.410706][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.415661][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.420792][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.425749][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.430318][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.435022][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.441229][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.447471][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.452817][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.457780][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.462315][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.468823][T24598] [ 1389.471224][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1389.478127][T24598] do_recvmmsg+0xbf/0x22d0 [ 1389.482681][T24598] do_recvmmsg+0xbf/0x22d0 [ 1389.590409][T24598] not chained 2180000 origins [ 1389.595183][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1389.603972][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.614052][T24598] Call Trace: [ 1389.617393][T24598] dump_stack+0x24c/0x2e0 [ 1389.621771][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1389.627529][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.632783][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.638014][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1389.643857][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1389.649965][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.655196][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1389.661035][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.666280][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1389.672145][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1389.678280][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.683581][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1389.689255][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1389.695366][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1389.700678][T24598] ? _copy_from_user+0x1fd/0x300 [ 1389.705748][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.710711][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.715850][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.720816][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.725348][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1389.730915][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.736137][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1389.741966][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1389.747304][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1389.752982][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1389.758298][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1389.763097][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.767868][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.773999][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.780221][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.785486][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.790375][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.794905][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.801260][T24598] RIP: 0023:0xf7f64549 [ 1389.805408][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1389.825050][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1389.833527][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1389.841622][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1389.849654][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.857675][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1389.865679][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.873698][T24598] Uninit was stored to memory at: [ 1389.878749][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.884511][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.889476][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.894608][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.899572][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.904102][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.908794][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.914877][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.921054][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.926273][T24598] do_fast_syscall_32+0x77/0xd0 [ 1389.931187][T24598] do_SYSENTER_32+0x73/0x90 [ 1389.935708][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1389.942056][T24598] [ 1389.944382][T24598] Uninit was stored to memory at: [ 1389.949422][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1389.955344][T24598] __msan_chain_origin+0x54/0xa0 [ 1389.960304][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1389.965459][T24598] get_compat_msghdr+0x108/0x2b0 [ 1389.970443][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1389.974992][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1389.979710][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.985830][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.992067][T24598] __do_fast_syscall_32+0x127/0x180 [ 1389.997341][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.002238][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.006803][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.013194][T24598] [ 1390.015523][T24598] Uninit was stored to memory at: [ 1390.020545][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1390.026331][T24598] __msan_chain_origin+0x54/0xa0 [ 1390.031289][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1390.036427][T24598] get_compat_msghdr+0x108/0x2b0 [ 1390.041470][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1390.045995][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1390.050716][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.056832][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.063073][T24598] __do_fast_syscall_32+0x127/0x180 [ 1390.068332][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.073239][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.077824][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.084205][T24598] [ 1390.086550][T24598] Uninit was stored to memory at: [ 1390.091612][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1390.097451][T24598] __msan_chain_origin+0x54/0xa0 [ 1390.102412][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1390.107544][T24598] get_compat_msghdr+0x108/0x2b0 [ 1390.112538][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1390.117060][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1390.121762][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.127879][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.134078][T24598] __do_fast_syscall_32+0x127/0x180 [ 1390.139302][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.144186][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.148713][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.155065][T24598] [ 1390.157394][T24598] Uninit was stored to memory at: [ 1390.162427][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1390.168191][T24598] __msan_chain_origin+0x54/0xa0 [ 1390.173180][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1390.178344][T24598] get_compat_msghdr+0x108/0x2b0 [ 1390.183339][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1390.187885][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1390.192680][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.198777][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.204959][T24598] __do_fast_syscall_32+0x127/0x180 [ 1390.210186][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.215059][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.219582][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.225939][T24598] [ 1390.228265][T24598] Uninit was stored to memory at: [ 1390.233285][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1390.239041][T24598] __msan_chain_origin+0x54/0xa0 [ 1390.244011][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1390.249180][T24598] get_compat_msghdr+0x108/0x2b0 [ 1390.254152][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1390.258693][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1390.263409][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.269525][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.275737][T24598] __do_fast_syscall_32+0x127/0x180 [ 1390.280991][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.285893][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.290440][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.296807][T24598] [ 1390.299145][T24598] Uninit was stored to memory at: [ 1390.304196][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1390.309955][T24598] __msan_chain_origin+0x54/0xa0 [ 1390.314949][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1390.320092][T24598] get_compat_msghdr+0x108/0x2b0 [ 1390.325064][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1390.329601][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1390.334310][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.340425][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.346617][T24598] __do_fast_syscall_32+0x127/0x180 [ 1390.351854][T24598] do_fast_syscall_32+0x77/0xd0 [ 1390.356761][T24598] do_SYSENTER_32+0x73/0x90 [ 1390.361298][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.367679][T24598] [ 1390.370029][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1390.376760][T24598] do_recvmmsg+0xbf/0x22d0 [ 1390.381224][T24598] do_recvmmsg+0xbf/0x22d0 [ 1390.613610][T24582] not chained 2190000 origins [ 1390.618346][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1390.627231][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.637326][T24582] Call Trace: [ 1390.640626][T24582] dump_stack+0x24c/0x2e0 [ 1390.644994][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1390.650753][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1390.656161][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1390.661749][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1390.666984][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1390.672672][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1390.678793][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1390.684085][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1390.689940][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1390.696048][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1390.701291][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1390.706971][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1390.713189][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1390.718503][T24582] ? _copy_from_user+0x1fd/0x300 [ 1390.723472][T24582] __msan_chain_origin+0x54/0xa0 [ 1390.728573][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1390.733719][T24582] get_compat_msghdr+0x108/0x2b0 [ 1390.738684][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1390.743253][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1390.748518][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1390.754346][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1390.759610][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1390.765365][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1390.770734][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1390.775552][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1390.780286][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.786429][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.792650][T24582] __do_fast_syscall_32+0x127/0x180 [ 1390.797901][T24582] do_fast_syscall_32+0x77/0xd0 [ 1390.802783][T24582] do_SYSENTER_32+0x73/0x90 [ 1390.807324][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.813693][T24582] RIP: 0023:0xf7f64549 [ 1390.817784][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1390.837420][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1390.846050][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1390.854091][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1390.862099][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1390.870626][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1390.878669][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.886688][T24582] Uninit was stored to memory at: [ 1390.891734][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1390.897484][T24582] __msan_chain_origin+0x54/0xa0 [ 1390.902445][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1390.907593][T24582] get_compat_msghdr+0x108/0x2b0 [ 1390.912579][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1390.917121][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1390.921811][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.927894][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.934063][T24582] __do_fast_syscall_32+0x127/0x180 [ 1390.939299][T24582] do_fast_syscall_32+0x77/0xd0 [ 1390.944167][T24582] do_SYSENTER_32+0x73/0x90 [ 1390.948691][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1390.955036][T24582] [ 1390.957357][T24582] Uninit was stored to memory at: [ 1390.962378][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1390.968143][T24582] __msan_chain_origin+0x54/0xa0 [ 1390.973126][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1390.978313][T24582] get_compat_msghdr+0x108/0x2b0 [ 1390.983326][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1390.987867][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1390.992564][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.998658][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.004829][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.010050][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.015006][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.019538][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.025888][T24582] [ 1391.028212][T24582] Uninit was stored to memory at: [ 1391.033229][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1391.038968][T24582] __msan_chain_origin+0x54/0xa0 [ 1391.043918][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1391.049045][T24582] get_compat_msghdr+0x108/0x2b0 [ 1391.054209][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1391.058742][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1391.063545][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.069689][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.075897][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.081177][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.086161][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.090704][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.097059][T24582] [ 1391.099434][T24582] Uninit was stored to memory at: [ 1391.104450][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1391.110188][T24582] __msan_chain_origin+0x54/0xa0 [ 1391.115142][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1391.120272][T24582] get_compat_msghdr+0x108/0x2b0 [ 1391.125231][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1391.129755][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1391.134458][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.140721][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.146906][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.152138][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.157011][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.161535][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.167911][T24582] [ 1391.170260][T24582] Uninit was stored to memory at: [ 1391.175305][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1391.181084][T24582] __msan_chain_origin+0x54/0xa0 [ 1391.186068][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1391.191217][T24582] get_compat_msghdr+0x108/0x2b0 [ 1391.196181][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1391.200714][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1391.205415][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.211511][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.217694][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.222914][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.227804][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.232327][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.238677][T24582] [ 1391.241009][T24582] Uninit was stored to memory at: [ 1391.246026][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1391.252112][T24582] __msan_chain_origin+0x54/0xa0 [ 1391.257068][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1391.262230][T24582] get_compat_msghdr+0x108/0x2b0 [ 1391.267211][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1391.271762][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1391.276483][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.282599][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.288801][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.294036][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.298938][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.303548][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.309900][T24582] [ 1391.312224][T24582] Uninit was stored to memory at: [ 1391.317240][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1391.323007][T24582] __msan_chain_origin+0x54/0xa0 [ 1391.327962][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1391.333092][T24582] get_compat_msghdr+0x108/0x2b0 [ 1391.338084][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1391.342632][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1391.347360][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.353483][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.359665][T24582] __do_fast_syscall_32+0x127/0x180 [ 1391.364936][T24582] do_fast_syscall_32+0x77/0xd0 [ 1391.369837][T24582] do_SYSENTER_32+0x73/0x90 [ 1391.374502][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.380976][T24582] [ 1391.383323][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1391.389998][T24582] do_recvmmsg+0xbf/0x22d0 [ 1391.394453][T24582] do_recvmmsg+0xbf/0x22d0 [ 1391.537819][T24598] not chained 2200000 origins [ 1391.542547][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1391.551330][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.561493][T24598] Call Trace: [ 1391.564822][T24598] dump_stack+0x24c/0x2e0 [ 1391.569195][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1391.574953][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1391.580375][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1391.585971][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1391.591205][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1391.596865][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1391.602995][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1391.608323][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1391.614158][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1391.620253][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1391.625522][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1391.631179][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1391.637277][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1391.642603][T24598] ? _copy_from_user+0x1fd/0x300 [ 1391.647571][T24598] __msan_chain_origin+0x54/0xa0 [ 1391.652536][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1391.657680][T24598] get_compat_msghdr+0x108/0x2b0 [ 1391.662649][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1391.667201][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1391.672879][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1391.678159][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1391.684005][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1391.689232][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1391.694889][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1391.700195][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1391.705011][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1391.709715][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.715811][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.721996][T24598] __do_fast_syscall_32+0x127/0x180 [ 1391.727224][T24598] do_fast_syscall_32+0x77/0xd0 [ 1391.732106][T24598] do_SYSENTER_32+0x73/0x90 [ 1391.736686][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.743040][T24598] RIP: 0023:0xf7f64549 [ 1391.747120][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1391.766755][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1391.775216][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1391.783223][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1391.791238][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1391.799328][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1391.807336][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1391.815341][T24598] Uninit was stored to memory at: [ 1391.820372][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1391.826116][T24598] __msan_chain_origin+0x54/0xa0 [ 1391.831074][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1391.836203][T24598] get_compat_msghdr+0x108/0x2b0 [ 1391.841156][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1391.845691][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1391.850392][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.856479][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.862775][T24598] __do_fast_syscall_32+0x127/0x180 [ 1391.868050][T24598] do_fast_syscall_32+0x77/0xd0 [ 1391.872942][T24598] do_SYSENTER_32+0x73/0x90 [ 1391.877485][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.883860][T24598] [ 1391.886197][T24598] Uninit was stored to memory at: [ 1391.891228][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1391.896990][T24598] __msan_chain_origin+0x54/0xa0 [ 1391.901964][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1391.907102][T24598] get_compat_msghdr+0x108/0x2b0 [ 1391.912152][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1391.916685][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1391.921384][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.927478][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.933688][T24598] __do_fast_syscall_32+0x127/0x180 [ 1391.938924][T24598] do_fast_syscall_32+0x77/0xd0 [ 1391.943791][T24598] do_SYSENTER_32+0x73/0x90 [ 1391.948320][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1391.954676][T24598] [ 1391.957005][T24598] Uninit was stored to memory at: [ 1391.962023][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1391.967774][T24598] __msan_chain_origin+0x54/0xa0 [ 1391.972784][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1391.977939][T24598] get_compat_msghdr+0x108/0x2b0 [ 1391.982913][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1391.987446][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1391.992141][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.998228][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.004405][T24598] __do_fast_syscall_32+0x127/0x180 [ 1392.009657][T24598] do_fast_syscall_32+0x77/0xd0 [ 1392.014552][T24598] do_SYSENTER_32+0x73/0x90 [ 1392.019099][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.025479][T24598] [ 1392.027801][T24598] Uninit was stored to memory at: [ 1392.032822][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1392.038594][T24598] __msan_chain_origin+0x54/0xa0 [ 1392.043654][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1392.048806][T24598] get_compat_msghdr+0x108/0x2b0 [ 1392.053761][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1392.058285][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1392.062984][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.069093][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.075301][T24598] __do_fast_syscall_32+0x127/0x180 [ 1392.080569][T24598] do_fast_syscall_32+0x77/0xd0 [ 1392.085543][T24598] do_SYSENTER_32+0x73/0x90 [ 1392.090066][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.096414][T24598] [ 1392.098738][T24598] Uninit was stored to memory at: [ 1392.103777][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1392.109515][T24598] __msan_chain_origin+0x54/0xa0 [ 1392.114474][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1392.119619][T24598] get_compat_msghdr+0x108/0x2b0 [ 1392.124573][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1392.129120][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1392.133834][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.140273][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.146470][T24598] __do_fast_syscall_32+0x127/0x180 [ 1392.151711][T24598] do_fast_syscall_32+0x77/0xd0 [ 1392.156582][T24598] do_SYSENTER_32+0x73/0x90 [ 1392.161103][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.167465][T24598] [ 1392.169798][T24598] Uninit was stored to memory at: [ 1392.174916][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1392.180690][T24598] __msan_chain_origin+0x54/0xa0 [ 1392.185751][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1392.190897][T24598] get_compat_msghdr+0x108/0x2b0 [ 1392.195867][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1392.200438][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1392.205150][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.211245][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.217449][T24598] __do_fast_syscall_32+0x127/0x180 [ 1392.222675][T24598] do_fast_syscall_32+0x77/0xd0 [ 1392.227552][T24598] do_SYSENTER_32+0x73/0x90 [ 1392.232123][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.238483][T24598] [ 1392.240817][T24598] Uninit was stored to memory at: [ 1392.245852][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1392.251614][T24598] __msan_chain_origin+0x54/0xa0 [ 1392.256616][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1392.261769][T24598] get_compat_msghdr+0x108/0x2b0 [ 1392.266754][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1392.271540][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1392.276295][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.282458][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.288672][T24598] __do_fast_syscall_32+0x127/0x180 [ 1392.293978][T24598] do_fast_syscall_32+0x77/0xd0 [ 1392.298888][T24598] do_SYSENTER_32+0x73/0x90 [ 1392.303440][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.309808][T24598] [ 1392.312149][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1392.318821][T24598] do_recvmmsg+0xbf/0x22d0 [ 1392.323266][T24598] do_recvmmsg+0xbf/0x22d0 [ 1392.409290][T24582] not chained 2210000 origins [ 1392.414305][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1392.423180][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.433342][T24582] Call Trace: [ 1392.436633][T24582] dump_stack+0x24c/0x2e0 [ 1392.440995][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1392.446790][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1392.452311][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1392.458273][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1392.463500][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1392.469201][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1392.475309][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1392.480757][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1392.486608][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1392.492714][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1392.497941][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1392.503600][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1392.509697][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1392.515091][T24582] ? _copy_from_user+0x1fd/0x300 [ 1392.520047][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.525033][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.530176][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.535148][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.539676][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1392.544904][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1392.550736][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1392.555957][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1392.561891][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1392.567328][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1392.572128][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1392.576866][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.582996][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.589192][T24582] __do_fast_syscall_32+0x127/0x180 [ 1392.594424][T24582] do_fast_syscall_32+0x77/0xd0 [ 1392.599385][T24582] do_SYSENTER_32+0x73/0x90 [ 1392.603907][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.610253][T24582] RIP: 0023:0xf7f64549 [ 1392.614325][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1392.634556][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1392.643015][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1392.650998][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1392.658979][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1392.667232][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1392.675250][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.683259][T24582] Uninit was stored to memory at: [ 1392.688292][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1392.694210][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.699195][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.704322][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.709271][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.713798][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1392.718488][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.724569][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.730736][T24582] __do_fast_syscall_32+0x127/0x180 [ 1392.735975][T24582] do_fast_syscall_32+0x77/0xd0 [ 1392.740837][T24582] do_SYSENTER_32+0x73/0x90 [ 1392.745355][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.751698][T24582] [ 1392.754017][T24582] Uninit was stored to memory at: [ 1392.759033][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1392.764779][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.769740][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.774875][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.779840][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.784372][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1392.789066][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.795149][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.801320][T24582] __do_fast_syscall_32+0x127/0x180 [ 1392.806536][T24582] do_fast_syscall_32+0x77/0xd0 [ 1392.811400][T24582] do_SYSENTER_32+0x73/0x90 [ 1392.815917][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.822259][T24582] [ 1392.824582][T24582] Uninit was stored to memory at: [ 1392.829614][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1392.835347][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.840294][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.845417][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.850368][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.854885][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1392.859572][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.865668][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.871850][T24582] __do_fast_syscall_32+0x127/0x180 [ 1392.877079][T24582] do_fast_syscall_32+0x77/0xd0 [ 1392.881959][T24582] do_SYSENTER_32+0x73/0x90 [ 1392.886496][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.892845][T24582] [ 1392.895173][T24582] Uninit was stored to memory at: [ 1392.900186][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1392.905919][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.910865][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.915987][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.920933][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.925465][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1392.930152][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.936240][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.942417][T24582] __do_fast_syscall_32+0x127/0x180 [ 1392.947730][T24582] do_fast_syscall_32+0x77/0xd0 [ 1392.952629][T24582] do_SYSENTER_32+0x73/0x90 [ 1392.957156][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1392.963591][T24582] [ 1392.965921][T24582] Uninit was stored to memory at: [ 1392.970960][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1392.976729][T24582] __msan_chain_origin+0x54/0xa0 [ 1392.981778][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1392.986922][T24582] get_compat_msghdr+0x108/0x2b0 [ 1392.991884][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1392.996410][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.001106][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.007195][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.013370][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.018591][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.023453][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.027965][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.034303][T24582] [ 1393.036623][T24582] Uninit was stored to memory at: [ 1393.041632][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.047366][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.052315][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.057439][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.062390][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.066930][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.071643][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.077750][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.083956][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.089203][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.094097][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.098635][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.104992][T24582] [ 1393.107314][T24582] Uninit was stored to memory at: [ 1393.112328][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.118070][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.123023][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.128155][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.133106][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.137627][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.142339][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.148422][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.154599][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.160256][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.165135][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.169668][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.176056][T24582] [ 1393.178392][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1393.185072][T24582] do_recvmmsg+0xbf/0x22d0 [ 1393.189526][T24582] do_recvmmsg+0xbf/0x22d0 [ 1393.327911][T24582] not chained 2220000 origins [ 1393.332639][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1393.341417][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.351487][T24582] Call Trace: [ 1393.354774][T24582] dump_stack+0x24c/0x2e0 [ 1393.359190][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1393.364940][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1393.370350][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1393.375970][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1393.381202][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1393.386868][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.392959][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1393.398177][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1393.404056][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1393.410143][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1393.415386][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1393.421037][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.427121][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1393.432436][T24582] ? _copy_from_user+0x1fd/0x300 [ 1393.437394][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.442350][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.447489][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.452483][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.457031][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1393.462268][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1393.468142][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1393.473572][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1393.479255][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1393.484591][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1393.489402][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.494119][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.500214][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.506415][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.511647][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.516517][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.521038][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.527386][T24582] RIP: 0023:0xf7f64549 [ 1393.531478][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1393.551117][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1393.559652][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1393.567673][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1393.575765][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.583770][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1393.591790][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.599784][T24582] Uninit was stored to memory at: [ 1393.604808][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.610548][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.615498][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.620620][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.625603][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.630123][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.634820][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.640907][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.647081][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.652305][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.657171][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.661691][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.668140][T24582] [ 1393.670474][T24582] Uninit was stored to memory at: [ 1393.675489][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.681248][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.686222][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.691361][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.696334][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.701382][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.706072][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.712161][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.718350][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.723584][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.728460][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.732991][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.739435][T24582] [ 1393.741788][T24582] Uninit was stored to memory at: [ 1393.746803][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.752540][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.757502][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.762657][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.767623][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.772151][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.776876][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.782972][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.789161][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.794381][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.799252][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.803769][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.810114][T24582] [ 1393.812435][T24582] Uninit was stored to memory at: [ 1393.817445][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.823206][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.828155][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.833277][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.838228][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.842746][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.847435][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.853519][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.859691][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.864921][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.869806][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.874333][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.880687][T24582] [ 1393.883019][T24582] Uninit was stored to memory at: [ 1393.888037][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.893788][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.898758][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.903893][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.909062][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.913587][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.918282][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.924369][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.930542][T24582] __do_fast_syscall_32+0x127/0x180 [ 1393.935759][T24582] do_fast_syscall_32+0x77/0xd0 [ 1393.940626][T24582] do_SYSENTER_32+0x73/0x90 [ 1393.945231][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1393.951584][T24582] [ 1393.953914][T24582] Uninit was stored to memory at: [ 1393.958929][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1393.964693][T24582] __msan_chain_origin+0x54/0xa0 [ 1393.969659][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1393.974822][T24582] get_compat_msghdr+0x108/0x2b0 [ 1393.979793][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1393.984323][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1393.989035][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.995133][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.001314][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.006530][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.011393][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.015912][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.022254][T24582] [ 1394.024570][T24582] Uninit was stored to memory at: [ 1394.029586][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.035320][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.040265][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.045417][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.050369][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.054885][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.059576][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.065680][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.072006][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.077250][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.082226][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.086853][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.093209][T24582] [ 1394.095535][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1394.102202][T24582] do_recvmmsg+0xbf/0x22d0 [ 1394.106642][T24582] do_recvmmsg+0xbf/0x22d0 [ 1394.216909][T24582] not chained 2230000 origins [ 1394.221685][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1394.230555][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.240644][T24582] Call Trace: [ 1394.243933][T24582] dump_stack+0x24c/0x2e0 [ 1394.248298][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1394.254043][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1394.259472][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1394.265068][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1394.270303][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1394.275972][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1394.282075][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1394.287315][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1394.293150][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1394.299238][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1394.304455][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1394.310108][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1394.316223][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1394.321528][T24582] ? _copy_from_user+0x1fd/0x300 [ 1394.326487][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.331529][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.336669][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.341626][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.346173][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1394.351389][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1394.357211][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1394.362425][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1394.368090][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1394.373407][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1394.378208][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.382936][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.389043][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.395225][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.400455][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.405335][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.409859][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.416211][T24582] RIP: 0023:0xf7f64549 [ 1394.420290][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1394.439921][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1394.448545][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1394.456546][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1394.464572][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1394.472595][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1394.480594][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.488613][T24582] Uninit was stored to memory at: [ 1394.493653][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.499492][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.504477][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.509616][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.514579][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.519103][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.523791][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.529880][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.536050][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.541277][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.546138][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.550662][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.557003][T24582] [ 1394.559320][T24582] Uninit was stored to memory at: [ 1394.564354][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.570126][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.575098][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.580243][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.585215][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.589756][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.594462][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.600564][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.606770][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.611990][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.616855][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.621383][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.627727][T24582] [ 1394.630053][T24582] Uninit was stored to memory at: [ 1394.635071][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.640814][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.645766][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.650895][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.655849][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.660366][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.665076][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.671174][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.677366][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.682605][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.687501][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.692067][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.698432][T24582] [ 1394.700769][T24582] Uninit was stored to memory at: [ 1394.705795][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.711548][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.716513][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.721651][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.726608][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.731134][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.735835][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.741923][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.748107][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.753326][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.758194][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.762714][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.769071][T24582] [ 1394.771399][T24582] Uninit was stored to memory at: [ 1394.776502][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.782249][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.787205][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.792332][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.797286][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.801804][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.806581][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.812681][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.818848][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.824061][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.828931][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.833445][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.839783][T24582] [ 1394.842100][T24582] Uninit was stored to memory at: [ 1394.847111][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.852840][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.857801][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.862926][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.868037][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.872615][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.877310][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.883425][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.889624][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.894861][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.899725][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.904265][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.910612][T24582] [ 1394.912931][T24582] Uninit was stored to memory at: [ 1394.917943][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1394.923679][T24582] __msan_chain_origin+0x54/0xa0 [ 1394.928633][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1394.934215][T24582] get_compat_msghdr+0x108/0x2b0 [ 1394.939174][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1394.943695][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1394.948388][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.954487][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.960669][T24582] __do_fast_syscall_32+0x127/0x180 [ 1394.965900][T24582] do_fast_syscall_32+0x77/0xd0 [ 1394.970780][T24582] do_SYSENTER_32+0x73/0x90 [ 1394.975317][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1394.981761][T24582] [ 1394.984109][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1394.990803][T24582] do_recvmmsg+0xbf/0x22d0 [ 1394.995251][T24582] do_recvmmsg+0xbf/0x22d0 [ 1395.155496][T24582] not chained 2240000 origins [ 1395.160241][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1395.169031][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.179217][T24582] Call Trace: [ 1395.182511][T24582] dump_stack+0x24c/0x2e0 [ 1395.186873][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1395.192630][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1395.198021][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1395.203590][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1395.208796][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1395.214459][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1395.220554][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1395.225774][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1395.231600][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1395.237680][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1395.242894][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1395.248564][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1395.254650][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1395.259952][T24582] ? _copy_from_user+0x1fd/0x300 [ 1395.264935][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.269907][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.275063][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.280076][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.284706][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1395.289943][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1395.295775][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1395.300998][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1395.306655][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1395.311972][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1395.316773][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.321481][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.327601][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.333775][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.338989][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.343881][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.348409][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.354748][T24582] RIP: 0023:0xf7f64549 [ 1395.358818][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1395.378465][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1395.386924][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1395.394910][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1395.402906][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1395.411070][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1395.419052][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1395.427084][T24582] Uninit was stored to memory at: [ 1395.432104][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.437840][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.442788][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.447914][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.452886][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.457404][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.462094][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.468207][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.474434][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.479664][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.484531][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.489046][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.495400][T24582] [ 1395.497725][T24582] Uninit was stored to memory at: [ 1395.502735][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.508473][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.513423][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.518552][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.523499][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.528038][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.532725][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.538803][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.544967][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.550180][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.555043][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.559559][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.565919][T24582] [ 1395.568254][T24582] Uninit was stored to memory at: [ 1395.573272][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.579023][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.583976][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.589111][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.594054][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.598568][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.603254][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.609340][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.615507][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.620723][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.625619][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.630149][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.636491][T24582] [ 1395.638811][T24582] Uninit was stored to memory at: [ 1395.643825][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.649559][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.654503][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.659647][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.664599][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.669123][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.673825][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.679920][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.686108][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.691346][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.696216][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.700741][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.707083][T24582] [ 1395.709424][T24582] Uninit was stored to memory at: [ 1395.714458][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.720187][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.725137][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.730263][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.735241][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.739758][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.744463][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.750547][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.756719][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.761941][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.766819][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.771354][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.777707][T24582] [ 1395.780034][T24582] Uninit was stored to memory at: [ 1395.785053][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.790803][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.795770][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.800897][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.805854][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.810365][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.815055][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.821141][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.827313][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.832530][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.837426][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.841954][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.848297][T24582] [ 1395.850614][T24582] Uninit was stored to memory at: [ 1395.855624][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1395.861357][T24582] __msan_chain_origin+0x54/0xa0 [ 1395.866312][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1395.871443][T24582] get_compat_msghdr+0x108/0x2b0 [ 1395.876401][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1395.880930][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1395.885633][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1395.891878][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1395.898062][T24582] __do_fast_syscall_32+0x127/0x180 [ 1395.903282][T24582] do_fast_syscall_32+0x77/0xd0 [ 1395.908153][T24582] do_SYSENTER_32+0x73/0x90 [ 1395.912669][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1395.919012][T24582] [ 1395.921330][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1395.927995][T24582] do_recvmmsg+0xbf/0x22d0 [ 1395.932426][T24582] do_recvmmsg+0xbf/0x22d0 [ 1396.068950][T24582] not chained 2250000 origins [ 1396.073677][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1396.082482][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.092560][T24582] Call Trace: [ 1396.095863][T24582] dump_stack+0x24c/0x2e0 [ 1396.100228][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1396.105972][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1396.111376][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1396.116951][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1396.122173][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1396.127830][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1396.133917][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1396.139138][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1396.144998][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1396.151264][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1396.156542][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1396.162200][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1396.168301][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1396.173625][T24582] ? _copy_from_user+0x1fd/0x300 [ 1396.178594][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.183560][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.188757][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.193721][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.198253][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1396.203532][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1396.209380][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1396.214593][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1396.220295][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1396.225603][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1396.230383][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.235106][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.241199][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.247396][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.252622][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.257494][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.262024][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.268392][T24582] RIP: 0023:0xf7f64549 [ 1396.272480][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1396.292112][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1396.300560][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1396.308538][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1396.316538][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1396.324532][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1396.332519][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.340533][T24582] Uninit was stored to memory at: [ 1396.345560][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.351302][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.356255][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.361382][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.366351][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.370871][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.375566][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.381654][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.387835][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.393053][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.397931][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.402553][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.408912][T24582] [ 1396.411229][T24582] Uninit was stored to memory at: [ 1396.416306][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.422038][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.427031][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.432199][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.437176][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.441693][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.446408][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.452566][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.458731][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.463950][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.468847][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.473372][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.479725][T24582] [ 1396.482051][T24582] Uninit was stored to memory at: [ 1396.487066][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.492918][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.497874][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.503000][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.507960][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.512475][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.517172][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.523254][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.529434][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.534648][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.539515][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.544053][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.550393][T24582] [ 1396.552735][T24582] Uninit was stored to memory at: [ 1396.557762][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.563506][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.568512][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.573649][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.578619][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.583148][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.587850][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.593945][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.600116][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.605356][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.610218][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.614732][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.621160][T24582] [ 1396.623486][T24582] Uninit was stored to memory at: [ 1396.628496][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.634250][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.639198][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.644355][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.649303][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.653834][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.658526][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.664610][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.670807][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.676114][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.680985][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.685506][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.691855][T24582] [ 1396.694203][T24582] Uninit was stored to memory at: [ 1396.699215][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.704948][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.709896][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.715016][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.719963][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.724487][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.729189][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.735305][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.741472][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.746743][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.751627][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.756142][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.762501][T24582] [ 1396.764829][T24582] Uninit was stored to memory at: [ 1396.769861][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1396.775618][T24582] __msan_chain_origin+0x54/0xa0 [ 1396.780606][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1396.785764][T24582] get_compat_msghdr+0x108/0x2b0 [ 1396.790762][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1396.795326][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1396.800030][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1396.806157][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1396.812335][T24582] __do_fast_syscall_32+0x127/0x180 [ 1396.817548][T24582] do_fast_syscall_32+0x77/0xd0 [ 1396.822408][T24582] do_SYSENTER_32+0x73/0x90 [ 1396.826930][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1396.833274][T24582] [ 1396.835597][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1396.842352][T24582] do_recvmmsg+0xbf/0x22d0 [ 1396.846791][T24582] do_recvmmsg+0xbf/0x22d0 [ 1396.964050][T24598] not chained 2260000 origins [ 1396.968777][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1396.977578][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.987706][T24598] Call Trace: [ 1396.991003][T24598] dump_stack+0x24c/0x2e0 [ 1396.995373][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1397.001127][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1397.006551][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1397.012131][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1397.017360][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1397.023052][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1397.029467][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1397.034691][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1397.040526][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1397.046628][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1397.051853][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1397.057511][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1397.063600][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1397.068916][T24598] ? _copy_from_user+0x1fd/0x300 [ 1397.073884][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.078878][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.084046][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.089205][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.093744][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1397.099318][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1397.104539][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1397.110369][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1397.115587][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1397.121419][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1397.126719][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1397.131505][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.136381][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.142493][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.148673][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.153895][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.158774][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.163308][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.169758][T24598] RIP: 0023:0xf7f64549 [ 1397.173855][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1397.193516][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1397.201984][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1397.209981][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1397.217974][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1397.225961][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1397.234041][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1397.242055][T24598] Uninit was stored to memory at: [ 1397.247080][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.252820][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.257781][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.262914][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.267881][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.272415][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.277206][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.283305][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.289512][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.294750][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.299639][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.304161][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.310508][T24598] [ 1397.312831][T24598] Uninit was stored to memory at: [ 1397.317854][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.323596][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.328556][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.333685][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.338653][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.343172][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.347862][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.353947][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.360120][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.365344][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.370220][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.374743][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.381087][T24598] [ 1397.383411][T24598] Uninit was stored to memory at: [ 1397.388422][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.394157][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.399135][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.404263][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.409217][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.413732][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.418420][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.424502][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.430670][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.435907][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.440769][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.445285][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.451640][T24598] [ 1397.453955][T24598] Uninit was stored to memory at: [ 1397.458964][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.464705][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.469666][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.474802][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.479767][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.484287][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.488970][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.495052][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.501223][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.506435][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.511302][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.515829][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.522172][T24598] [ 1397.524489][T24598] Uninit was stored to memory at: [ 1397.529499][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.535233][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.540174][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.545297][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.550242][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.554749][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.559435][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.565518][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.571725][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.576958][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.581839][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.586457][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.592803][T24598] [ 1397.595128][T24598] Uninit was stored to memory at: [ 1397.600226][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.605963][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.610913][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.616042][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.620991][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.625507][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.630195][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.636272][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.642526][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.647743][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.652604][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.657118][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.663476][T24598] [ 1397.665804][T24598] Uninit was stored to memory at: [ 1397.670831][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1397.676584][T24598] __msan_chain_origin+0x54/0xa0 [ 1397.681646][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1397.686785][T24598] get_compat_msghdr+0x108/0x2b0 [ 1397.691756][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1397.696280][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1397.700997][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1397.707101][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1397.713286][T24598] __do_fast_syscall_32+0x127/0x180 [ 1397.718525][T24598] do_fast_syscall_32+0x77/0xd0 [ 1397.723395][T24598] do_SYSENTER_32+0x73/0x90 [ 1397.727912][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1397.734251][T24598] [ 1397.736568][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1397.743232][T24598] do_recvmmsg+0xbf/0x22d0 [ 1397.747669][T24598] do_recvmmsg+0xbf/0x22d0 [ 1397.851029][T24582] not chained 2270000 origins [ 1397.855745][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1397.864530][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.874657][T24582] Call Trace: [ 1397.877956][T24582] dump_stack+0x24c/0x2e0 [ 1397.882329][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1397.888083][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1397.893535][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1397.899136][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1397.904361][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1397.910021][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1397.916116][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1397.921339][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1397.927187][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1397.933278][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1397.938507][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1397.944286][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1397.950386][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1397.955700][T24582] ? _copy_from_user+0x1fd/0x300 [ 1397.961048][T24582] __msan_chain_origin+0x54/0xa0 [ 1397.966104][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1397.971524][T24582] get_compat_msghdr+0x108/0x2b0 [ 1397.976500][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1397.981063][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1397.986291][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1397.992132][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1397.997360][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1398.003006][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1398.008309][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1398.013087][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.017782][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.023872][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.030064][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.035284][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.040148][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.044668][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.051022][T24582] RIP: 0023:0xf7f64549 [ 1398.055098][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1398.074733][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1398.083178][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1398.091185][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1398.099173][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.107165][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1398.115157][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.123161][T24582] Uninit was stored to memory at: [ 1398.128191][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.133966][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.138935][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.144072][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.149031][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.153551][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.158240][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.164340][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.170519][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.175746][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.180614][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.185130][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.191507][T24582] [ 1398.193835][T24582] Uninit was stored to memory at: [ 1398.198844][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.204579][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.209526][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.214650][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.219594][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.224109][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.228792][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.234874][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.241040][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.246254][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.251114][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.255656][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.261997][T24582] [ 1398.264320][T24582] Uninit was stored to memory at: [ 1398.269340][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.275086][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.280044][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.285280][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.290232][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.294778][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.299466][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.305555][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.311723][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.316949][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.321818][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.326335][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.332688][T24582] [ 1398.334999][T24582] Uninit was stored to memory at: [ 1398.340008][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.345735][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.350692][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.355809][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.360768][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.365289][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.369989][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.376070][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.382237][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.387449][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.392310][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.396822][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.403165][T24582] [ 1398.405482][T24582] Uninit was stored to memory at: [ 1398.410491][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.416220][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.421175][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.426297][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.431246][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.435762][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.440454][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.446541][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.452758][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.457994][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.462864][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.467416][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.473780][T24582] [ 1398.476120][T24582] Uninit was stored to memory at: [ 1398.481133][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.486871][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.491828][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.496958][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.501910][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.506426][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.511112][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.517206][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.523391][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.528605][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.533466][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.537979][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.544334][T24582] [ 1398.546668][T24582] Uninit was stored to memory at: [ 1398.551680][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1398.557416][T24582] __msan_chain_origin+0x54/0xa0 [ 1398.562384][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1398.567581][T24582] get_compat_msghdr+0x108/0x2b0 [ 1398.572530][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1398.577044][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1398.581731][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.587811][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.593983][T24582] __do_fast_syscall_32+0x127/0x180 [ 1398.599198][T24582] do_fast_syscall_32+0x77/0xd0 [ 1398.604058][T24582] do_SYSENTER_32+0x73/0x90 [ 1398.608573][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.614913][T24582] [ 1398.617230][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1398.623892][T24582] do_recvmmsg+0xbf/0x22d0 [ 1398.628324][T24582] do_recvmmsg+0xbf/0x22d0 [ 1398.772248][T24598] not chained 2280000 origins [ 1398.777027][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1398.785849][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.795920][T24598] Call Trace: [ 1398.799211][T24598] dump_stack+0x24c/0x2e0 [ 1398.803576][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1398.809324][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1398.814730][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1398.820309][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1398.825561][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1398.831219][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1398.837310][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1398.842531][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1398.848361][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1398.854447][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1398.859666][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1398.865318][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1398.871405][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1398.876713][T24598] ? _copy_from_user+0x1fd/0x300 [ 1398.881687][T24598] __msan_chain_origin+0x54/0xa0 [ 1398.886643][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1398.891780][T24598] get_compat_msghdr+0x108/0x2b0 [ 1398.896744][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1398.901268][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1398.906844][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1398.912066][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1398.917899][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1398.923112][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1398.928784][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1398.934087][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1398.938904][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1398.943618][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1398.949797][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1398.956007][T24598] __do_fast_syscall_32+0x127/0x180 [ 1398.961231][T24598] do_fast_syscall_32+0x77/0xd0 [ 1398.966103][T24598] do_SYSENTER_32+0x73/0x90 [ 1398.970625][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1398.976970][T24598] RIP: 0023:0xf7f64549 [ 1398.981047][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1399.000672][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1399.009117][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1399.017108][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1399.025117][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1399.033098][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1399.041090][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1399.049128][T24598] Uninit was stored to memory at: [ 1399.054141][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.059896][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.064871][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.070102][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.075050][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.079583][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.084272][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.090359][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.096540][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.101761][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.106629][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.111144][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.117485][T24598] [ 1399.119803][T24598] Uninit was stored to memory at: [ 1399.124906][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.130652][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.135599][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.140719][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.145668][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.150182][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.154868][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.160949][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.167120][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.172769][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.177637][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.182176][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.188514][T24598] [ 1399.190834][T24598] Uninit was stored to memory at: [ 1399.195848][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.201584][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.206528][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.211679][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.216628][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.221148][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.225847][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.231941][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.238121][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.243346][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.248227][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.252749][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.259134][T24598] [ 1399.261465][T24598] Uninit was stored to memory at: [ 1399.266484][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.272225][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.277182][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.282318][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.287270][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.291795][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.296497][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.302595][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.308775][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.314008][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.318891][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.323422][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.329775][T24598] [ 1399.332126][T24598] Uninit was stored to memory at: [ 1399.337141][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.342884][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.347848][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.352980][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.357935][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.362452][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.367140][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.373259][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.379431][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.384646][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.389542][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.394061][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.400403][T24598] [ 1399.402721][T24598] Uninit was stored to memory at: [ 1399.407731][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.413460][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.418421][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.423541][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.428490][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.433034][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.437778][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.443868][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.450042][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.455256][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.460121][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.464640][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.471009][T24598] [ 1399.473328][T24598] Uninit was stored to memory at: [ 1399.478353][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.484087][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.489035][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.494170][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.499131][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.503731][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.508443][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.514535][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.520729][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.525939][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.530823][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.535453][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.541797][T24598] [ 1399.544121][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1399.550803][T24598] do_recvmmsg+0xbf/0x22d0 [ 1399.555240][T24598] do_recvmmsg+0xbf/0x22d0 [ 1399.698221][T24598] not chained 2290000 origins [ 1399.702956][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1399.711754][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.721931][T24598] Call Trace: [ 1399.725219][T24598] dump_stack+0x24c/0x2e0 [ 1399.729774][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1399.735625][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1399.741110][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1399.746790][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1399.752016][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1399.757673][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1399.763765][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1399.769092][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1399.774923][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1399.781134][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1399.786366][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1399.792487][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1399.798676][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1399.804067][T24598] ? _copy_from_user+0x1fd/0x300 [ 1399.809036][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.814004][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.819136][T24598] get_compat_msghdr+0x108/0x2b0 [ 1399.824107][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1399.828666][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1399.834270][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1399.839516][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1399.845342][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1399.850550][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1399.856193][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1399.861494][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1399.866296][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1399.871000][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1399.877089][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1399.883262][T24598] __do_fast_syscall_32+0x127/0x180 [ 1399.888481][T24598] do_fast_syscall_32+0x77/0xd0 [ 1399.893348][T24598] do_SYSENTER_32+0x73/0x90 [ 1399.897871][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1399.904220][T24598] RIP: 0023:0xf7f64549 [ 1399.908305][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1399.928020][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1399.936492][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1399.944476][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1399.952491][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1399.960476][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1399.968465][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1399.976485][T24598] Uninit was stored to memory at: [ 1399.981505][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1399.987240][T24598] __msan_chain_origin+0x54/0xa0 [ 1399.992191][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1399.997332][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.002281][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.006807][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.011520][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.017613][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.023902][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.029232][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.034136][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.038689][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.045064][T24598] [ 1400.047391][T24598] Uninit was stored to memory at: [ 1400.052408][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.058423][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.063563][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.068709][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.073750][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.078366][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.083070][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.089177][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.095360][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.100585][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.105455][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.110254][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.116611][T24598] [ 1400.118984][T24598] Uninit was stored to memory at: [ 1400.123996][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.129748][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.134696][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.139853][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.144809][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.149505][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.154216][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.160307][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.166490][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.171737][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.176692][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.181227][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.187571][T24598] [ 1400.189981][T24598] Uninit was stored to memory at: [ 1400.195252][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.200989][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.205966][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.211119][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.216078][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.220613][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.225307][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.231426][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.237611][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.242857][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.247756][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.252273][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.258639][T24598] [ 1400.261075][T24598] Uninit was stored to memory at: [ 1400.266114][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.271959][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.276937][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.282236][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.287195][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.291732][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.296538][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.302626][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.308903][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.314156][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.319025][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.323562][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.330014][T24598] [ 1400.332351][T24598] Uninit was stored to memory at: [ 1400.337376][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.343146][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.348109][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.353365][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.358421][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.362957][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.367751][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.373861][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.380234][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.385743][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.390831][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.395368][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.401816][T24598] [ 1400.404322][T24598] Uninit was stored to memory at: [ 1400.409444][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1400.415224][T24598] __msan_chain_origin+0x54/0xa0 [ 1400.420371][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1400.425527][T24598] get_compat_msghdr+0x108/0x2b0 [ 1400.430481][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1400.435025][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1400.439734][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.445820][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.452249][T24598] __do_fast_syscall_32+0x127/0x180 [ 1400.457487][T24598] do_fast_syscall_32+0x77/0xd0 [ 1400.462377][T24598] do_SYSENTER_32+0x73/0x90 [ 1400.466937][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.473300][T24598] [ 1400.475628][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1400.482292][T24598] do_recvmmsg+0xbf/0x22d0 [ 1400.486730][T24598] do_recvmmsg+0xbf/0x22d0 [ 1400.658577][T24582] not chained 2300000 origins [ 1400.663299][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1400.672087][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.682160][T24582] Call Trace: [ 1400.685466][T24582] dump_stack+0x24c/0x2e0 [ 1400.689853][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1400.695596][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1400.701001][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1400.706614][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1400.711838][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1400.717485][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1400.723574][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1400.728897][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1400.735003][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1400.741198][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1400.746441][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1400.752201][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1400.758403][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1400.763751][T24582] ? _copy_from_user+0x1fd/0x300 [ 1400.768746][T24582] __msan_chain_origin+0x54/0xa0 [ 1400.773737][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1400.778895][T24582] get_compat_msghdr+0x108/0x2b0 [ 1400.783906][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1400.788446][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1400.793762][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1400.799620][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1400.805390][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1400.811219][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1400.816526][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1400.821408][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1400.826111][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.832199][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.838373][T24582] __do_fast_syscall_32+0x127/0x180 [ 1400.843699][T24582] do_fast_syscall_32+0x77/0xd0 [ 1400.848607][T24582] do_SYSENTER_32+0x73/0x90 [ 1400.853129][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1400.859511][T24582] RIP: 0023:0xf7f64549 [ 1400.863701][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1400.883716][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1400.892215][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1400.900566][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1400.908686][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1400.916681][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1400.924695][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1400.932694][T24582] Uninit was stored to memory at: [ 1400.938094][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1400.943929][T24582] __msan_chain_origin+0x54/0xa0 [ 1400.948900][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1400.954056][T24582] get_compat_msghdr+0x108/0x2b0 [ 1400.959014][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1400.963533][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1400.968231][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1400.974339][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1400.980510][T24582] __do_fast_syscall_32+0x127/0x180 [ 1400.985734][T24582] do_fast_syscall_32+0x77/0xd0 [ 1400.990617][T24582] do_SYSENTER_32+0x73/0x90 [ 1400.995136][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.001757][T24582] [ 1401.004082][T24582] Uninit was stored to memory at: [ 1401.009271][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.015013][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.019969][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.025099][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.030084][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.034600][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.039287][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.045382][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.051572][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.056809][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.061678][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.066211][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.072656][T24582] [ 1401.075000][T24582] Uninit was stored to memory at: [ 1401.080013][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.086005][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.090948][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.096071][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.101028][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.105547][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.110238][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.116340][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.122569][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.127805][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.132704][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.137243][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.143583][T24582] [ 1401.145909][T24582] Uninit was stored to memory at: [ 1401.151025][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.156759][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.161705][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.166833][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.171781][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.176303][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.181020][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.187125][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.193321][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.198543][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.203414][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.208317][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.214727][T24582] [ 1401.217051][T24582] Uninit was stored to memory at: [ 1401.222065][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.227815][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.232767][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.237899][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.242945][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.247459][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.252149][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.258251][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.264420][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.269643][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.274506][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.279047][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.285403][T24582] [ 1401.287727][T24582] Uninit was stored to memory at: [ 1401.292741][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.298490][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.303475][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.308715][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.313670][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.318190][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.322899][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.329009][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.335201][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.340437][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.345301][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.349820][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.356183][T24582] [ 1401.358516][T24582] Uninit was stored to memory at: [ 1401.363530][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.369281][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.374241][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.379384][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.384359][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.388917][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.393603][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.399688][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.405863][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.411102][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.415973][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.420494][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.426839][T24582] [ 1401.429174][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1401.435839][T24582] do_recvmmsg+0xbf/0x22d0 [ 1401.440271][T24582] do_recvmmsg+0xbf/0x22d0 [ 1401.525894][T24582] not chained 2310000 origins [ 1401.530640][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1401.539483][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1401.549563][T24582] Call Trace: [ 1401.552852][T24582] dump_stack+0x24c/0x2e0 [ 1401.557323][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1401.563080][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1401.568536][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1401.574110][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1401.579337][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1401.584994][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1401.591084][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1401.596308][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1401.602137][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1401.608237][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1401.613454][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1401.619115][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1401.625203][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1401.630511][T24582] ? _copy_from_user+0x1fd/0x300 [ 1401.635466][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.640422][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.645564][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.650525][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.655060][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1401.660283][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1401.666117][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1401.671426][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1401.677960][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1401.683269][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1401.688062][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.692772][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.698909][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.705102][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.710338][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.715227][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.719758][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.726121][T24582] RIP: 0023:0xf7f64549 [ 1401.730205][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1401.749833][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1401.758281][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1401.766279][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1401.774270][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.782294][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1401.790291][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.798280][T24582] Uninit was stored to memory at: [ 1401.803301][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.809041][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.813991][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.819120][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.824098][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.828623][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.833315][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.839412][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.845589][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.850845][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.855717][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.860242][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.866604][T24582] [ 1401.868953][T24582] Uninit was stored to memory at: [ 1401.873981][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.879749][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.884702][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.889843][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.894795][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.899328][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.904021][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.910111][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.916285][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.921533][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.926411][T24582] do_SYSENTER_32+0x73/0x90 [ 1401.931062][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1401.937570][T24582] [ 1401.940092][T24582] Uninit was stored to memory at: [ 1401.945218][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1401.950971][T24582] __msan_chain_origin+0x54/0xa0 [ 1401.955929][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1401.961057][T24582] get_compat_msghdr+0x108/0x2b0 [ 1401.966108][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1401.970656][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1401.975365][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1401.981451][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1401.987630][T24582] __do_fast_syscall_32+0x127/0x180 [ 1401.992865][T24582] do_fast_syscall_32+0x77/0xd0 [ 1401.997731][T24582] do_SYSENTER_32+0x73/0x90 [ 1402.002253][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.008611][T24582] [ 1402.010935][T24582] Uninit was stored to memory at: [ 1402.015956][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1402.021699][T24582] __msan_chain_origin+0x54/0xa0 [ 1402.026654][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1402.031784][T24582] get_compat_msghdr+0x108/0x2b0 [ 1402.036744][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1402.041274][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1402.045970][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.052061][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.058578][T24582] __do_fast_syscall_32+0x127/0x180 [ 1402.063992][T24582] do_fast_syscall_32+0x77/0xd0 [ 1402.068879][T24582] do_SYSENTER_32+0x73/0x90 [ 1402.073395][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.079738][T24582] [ 1402.082060][T24582] Uninit was stored to memory at: [ 1402.087074][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1402.092813][T24582] __msan_chain_origin+0x54/0xa0 [ 1402.097762][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1402.102887][T24582] get_compat_msghdr+0x108/0x2b0 [ 1402.107837][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1402.112351][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1402.117041][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.123121][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.129298][T24582] __do_fast_syscall_32+0x127/0x180 [ 1402.134522][T24582] do_fast_syscall_32+0x77/0xd0 [ 1402.139389][T24582] do_SYSENTER_32+0x73/0x90 [ 1402.143909][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.150250][T24582] [ 1402.152569][T24582] Uninit was stored to memory at: [ 1402.157582][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1402.163524][T24582] __msan_chain_origin+0x54/0xa0 [ 1402.168583][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1402.173711][T24582] get_compat_msghdr+0x108/0x2b0 [ 1402.178663][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1402.183205][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1402.187896][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.194000][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.200171][T24582] __do_fast_syscall_32+0x127/0x180 [ 1402.205404][T24582] do_fast_syscall_32+0x77/0xd0 [ 1402.210282][T24582] do_SYSENTER_32+0x73/0x90 [ 1402.214806][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.221149][T24582] [ 1402.223488][T24582] Uninit was stored to memory at: [ 1402.228503][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1402.234239][T24582] __msan_chain_origin+0x54/0xa0 [ 1402.239203][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1402.244325][T24582] get_compat_msghdr+0x108/0x2b0 [ 1402.249273][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1402.253800][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1402.258488][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.264569][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.270744][T24582] __do_fast_syscall_32+0x127/0x180 [ 1402.275959][T24582] do_fast_syscall_32+0x77/0xd0 [ 1402.280827][T24582] do_SYSENTER_32+0x73/0x90 [ 1402.285367][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.291729][T24582] [ 1402.294060][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1402.300728][T24582] do_recvmmsg+0xbf/0x22d0 [ 1402.305188][T24582] do_recvmmsg+0xbf/0x22d0 [ 1402.487841][T24598] not chained 2320000 origins [ 1402.492596][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1402.501380][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.511713][T24598] Call Trace: [ 1402.515001][T24598] dump_stack+0x24c/0x2e0 [ 1402.519354][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1402.525089][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1402.530489][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1402.536053][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1402.541271][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1402.546941][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1402.553107][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1402.558318][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1402.564147][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1402.570253][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1402.575470][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1402.581117][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1402.587204][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1402.592513][T24598] ? _copy_from_user+0x1fd/0x300 [ 1402.597474][T24598] __msan_chain_origin+0x54/0xa0 [ 1402.602428][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1402.607560][T24598] get_compat_msghdr+0x108/0x2b0 [ 1402.612514][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1402.617036][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1402.622598][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1402.627818][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1402.633657][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1402.638874][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1402.644517][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1402.649817][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1402.654595][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1402.659297][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.665391][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.671569][T24598] __do_fast_syscall_32+0x127/0x180 [ 1402.676836][T24598] do_fast_syscall_32+0x77/0xd0 [ 1402.681703][T24598] do_SYSENTER_32+0x73/0x90 [ 1402.686322][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.692674][T24598] RIP: 0023:0xf7f64549 [ 1402.696792][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1402.716607][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1402.725089][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1402.733344][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1402.741335][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.749416][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1402.757430][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.765509][T24598] Uninit was stored to memory at: [ 1402.770532][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1402.776278][T24598] __msan_chain_origin+0x54/0xa0 [ 1402.781248][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1402.786397][T24598] get_compat_msghdr+0x108/0x2b0 [ 1402.791367][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1402.795906][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1402.800621][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.806813][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.813007][T24598] __do_fast_syscall_32+0x127/0x180 [ 1402.818235][T24598] do_fast_syscall_32+0x77/0xd0 [ 1402.823110][T24598] do_SYSENTER_32+0x73/0x90 [ 1402.827630][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.833974][T24598] [ 1402.836293][T24598] Uninit was stored to memory at: [ 1402.841307][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1402.847056][T24598] __msan_chain_origin+0x54/0xa0 [ 1402.852005][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1402.857128][T24598] get_compat_msghdr+0x108/0x2b0 [ 1402.862077][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1402.866607][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1402.871334][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.877435][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.883614][T24598] __do_fast_syscall_32+0x127/0x180 [ 1402.888839][T24598] do_fast_syscall_32+0x77/0xd0 [ 1402.893713][T24598] do_SYSENTER_32+0x73/0x90 [ 1402.898235][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.904586][T24598] [ 1402.906935][T24598] Uninit was stored to memory at: [ 1402.911950][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1402.917691][T24598] __msan_chain_origin+0x54/0xa0 [ 1402.922643][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1402.927775][T24598] get_compat_msghdr+0x108/0x2b0 [ 1402.932731][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1402.937252][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1402.941946][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1402.948032][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1402.954236][T24598] __do_fast_syscall_32+0x127/0x180 [ 1402.959450][T24598] do_fast_syscall_32+0x77/0xd0 [ 1402.964325][T24598] do_SYSENTER_32+0x73/0x90 [ 1402.968844][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1402.975184][T24598] [ 1402.977503][T24598] Uninit was stored to memory at: [ 1402.982514][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1402.988252][T24598] __msan_chain_origin+0x54/0xa0 [ 1402.993204][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1402.998329][T24598] get_compat_msghdr+0x108/0x2b0 [ 1403.003276][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1403.007792][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1403.012510][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.018622][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.024809][T24598] __do_fast_syscall_32+0x127/0x180 [ 1403.030047][T24598] do_fast_syscall_32+0x77/0xd0 [ 1403.034932][T24598] do_SYSENTER_32+0x73/0x90 [ 1403.039464][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.045838][T24598] [ 1403.048173][T24598] Uninit was stored to memory at: [ 1403.053196][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1403.058948][T24598] __msan_chain_origin+0x54/0xa0 [ 1403.063915][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1403.069049][T24598] get_compat_msghdr+0x108/0x2b0 [ 1403.074002][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1403.078535][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1403.083241][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.089359][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.095550][T24598] __do_fast_syscall_32+0x127/0x180 [ 1403.100783][T24598] do_fast_syscall_32+0x77/0xd0 [ 1403.105667][T24598] do_SYSENTER_32+0x73/0x90 [ 1403.110197][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.116555][T24598] [ 1403.118899][T24598] Uninit was stored to memory at: [ 1403.123915][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1403.129662][T24598] __msan_chain_origin+0x54/0xa0 [ 1403.134629][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1403.139762][T24598] get_compat_msghdr+0x108/0x2b0 [ 1403.144725][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1403.149506][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1403.154226][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.160318][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.166490][T24598] __do_fast_syscall_32+0x127/0x180 [ 1403.171712][T24598] do_fast_syscall_32+0x77/0xd0 [ 1403.176597][T24598] do_SYSENTER_32+0x73/0x90 [ 1403.181126][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.187487][T24598] [ 1403.189823][T24598] Uninit was stored to memory at: [ 1403.194847][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1403.200596][T24598] __msan_chain_origin+0x54/0xa0 [ 1403.205579][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1403.210738][T24598] get_compat_msghdr+0x108/0x2b0 [ 1403.215701][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1403.220236][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1403.224938][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.231038][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.237251][T24598] __do_fast_syscall_32+0x127/0x180 [ 1403.242503][T24598] do_fast_syscall_32+0x77/0xd0 [ 1403.247387][T24598] do_SYSENTER_32+0x73/0x90 [ 1403.251955][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.258327][T24598] [ 1403.260657][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1403.267330][T24598] do_recvmmsg+0xbf/0x22d0 [ 1403.271778][T24598] do_recvmmsg+0xbf/0x22d0 [ 1403.477082][T24582] not chained 2330000 origins [ 1403.481809][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1403.490601][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.500675][T24582] Call Trace: [ 1403.503970][T24582] dump_stack+0x24c/0x2e0 [ 1403.508322][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1403.514058][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1403.519456][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1403.525040][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1403.530256][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1403.535904][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1403.541996][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1403.547230][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1403.553066][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1403.559185][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1403.564420][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1403.570080][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1403.576171][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1403.581482][T24582] ? _copy_from_user+0x1fd/0x300 [ 1403.586461][T24582] __msan_chain_origin+0x54/0xa0 [ 1403.591430][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1403.596574][T24582] get_compat_msghdr+0x108/0x2b0 [ 1403.601537][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1403.606069][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1403.611289][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1403.617114][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1403.622345][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1403.628008][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1403.633316][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1403.638099][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1403.642827][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.648977][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.655150][T24582] __do_fast_syscall_32+0x127/0x180 [ 1403.660370][T24582] do_fast_syscall_32+0x77/0xd0 [ 1403.665238][T24582] do_SYSENTER_32+0x73/0x90 [ 1403.669760][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.676113][T24582] RIP: 0023:0xf7f64549 [ 1403.680193][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1403.699825][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1403.708304][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1403.716305][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1403.724305][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1403.732330][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1403.741026][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1403.749034][T24582] Uninit was stored to memory at: [ 1403.754071][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1403.759845][T24582] __msan_chain_origin+0x54/0xa0 [ 1403.764907][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1403.770071][T24582] get_compat_msghdr+0x108/0x2b0 [ 1403.775028][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1403.779555][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1403.784295][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.790408][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.796580][T24582] __do_fast_syscall_32+0x127/0x180 [ 1403.801803][T24582] do_fast_syscall_32+0x77/0xd0 [ 1403.806674][T24582] do_SYSENTER_32+0x73/0x90 [ 1403.811190][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.817533][T24582] [ 1403.819874][T24582] Uninit was stored to memory at: [ 1403.824897][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1403.830632][T24582] __msan_chain_origin+0x54/0xa0 [ 1403.835587][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1403.840711][T24582] get_compat_msghdr+0x108/0x2b0 [ 1403.845664][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1403.850181][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1403.854872][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.860980][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.867162][T24582] __do_fast_syscall_32+0x127/0x180 [ 1403.872376][T24582] do_fast_syscall_32+0x77/0xd0 [ 1403.877242][T24582] do_SYSENTER_32+0x73/0x90 [ 1403.881761][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.888113][T24582] [ 1403.890437][T24582] Uninit was stored to memory at: [ 1403.895545][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1403.901292][T24582] __msan_chain_origin+0x54/0xa0 [ 1403.906246][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1403.911382][T24582] get_compat_msghdr+0x108/0x2b0 [ 1403.916331][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1403.920851][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1403.925543][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1403.931627][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1403.938062][T24582] __do_fast_syscall_32+0x127/0x180 [ 1403.943279][T24582] do_fast_syscall_32+0x77/0xd0 [ 1403.948157][T24582] do_SYSENTER_32+0x73/0x90 [ 1403.952679][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1403.959163][T24582] [ 1403.961493][T24582] Uninit was stored to memory at: [ 1403.966507][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1403.972244][T24582] __msan_chain_origin+0x54/0xa0 [ 1403.977192][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1403.982314][T24582] get_compat_msghdr+0x108/0x2b0 [ 1403.987271][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1403.991787][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1403.996480][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.002584][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.008764][T24582] __do_fast_syscall_32+0x127/0x180 [ 1404.013979][T24582] do_fast_syscall_32+0x77/0xd0 [ 1404.018866][T24582] do_SYSENTER_32+0x73/0x90 [ 1404.023381][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.029721][T24582] [ 1404.032049][T24582] Uninit was stored to memory at: [ 1404.037242][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1404.042975][T24582] __msan_chain_origin+0x54/0xa0 [ 1404.047940][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1404.053184][T24582] get_compat_msghdr+0x108/0x2b0 [ 1404.058136][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1404.062719][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1404.067429][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.073519][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.079696][T24582] __do_fast_syscall_32+0x127/0x180 [ 1404.084915][T24582] do_fast_syscall_32+0x77/0xd0 [ 1404.089789][T24582] do_SYSENTER_32+0x73/0x90 [ 1404.094308][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.100693][T24582] [ 1404.103028][T24582] Uninit was stored to memory at: [ 1404.108130][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1404.113894][T24582] __msan_chain_origin+0x54/0xa0 [ 1404.118937][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1404.124165][T24582] get_compat_msghdr+0x108/0x2b0 [ 1404.129121][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1404.133736][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1404.138445][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.144619][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.151343][T24582] __do_fast_syscall_32+0x127/0x180 [ 1404.156672][T24582] do_fast_syscall_32+0x77/0xd0 [ 1404.161544][T24582] do_SYSENTER_32+0x73/0x90 [ 1404.166281][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.172719][T24582] [ 1404.175038][T24582] Uninit was stored to memory at: [ 1404.180081][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1404.185932][T24582] __msan_chain_origin+0x54/0xa0 [ 1404.190881][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1404.196008][T24582] get_compat_msghdr+0x108/0x2b0 [ 1404.201058][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1404.205682][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1404.210741][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.216825][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.223089][T24582] __do_fast_syscall_32+0x127/0x180 [ 1404.228322][T24582] do_fast_syscall_32+0x77/0xd0 [ 1404.233202][T24582] do_SYSENTER_32+0x73/0x90 [ 1404.237731][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.244072][T24582] [ 1404.246393][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1404.253055][T24582] do_recvmmsg+0xbf/0x22d0 [ 1404.257485][T24582] do_recvmmsg+0xbf/0x22d0 [ 1404.464974][T24598] not chained 2340000 origins [ 1404.469711][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1404.478484][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.488568][T24598] Call Trace: [ 1404.491868][T24598] dump_stack+0x24c/0x2e0 [ 1404.496221][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1404.501955][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1404.507435][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1404.513001][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1404.518241][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1404.523888][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1404.529988][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1404.535202][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1404.541038][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1404.547127][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1404.552365][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1404.558012][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1404.564090][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1404.569392][T24598] ? _copy_from_user+0x1fd/0x300 [ 1404.574341][T24598] __msan_chain_origin+0x54/0xa0 [ 1404.579295][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1404.584429][T24598] get_compat_msghdr+0x108/0x2b0 [ 1404.589381][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1404.593907][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1404.599470][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1404.604695][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1404.610513][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1404.615735][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1404.621375][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1404.626676][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1404.631546][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1404.636246][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.642332][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.648521][T24598] __do_fast_syscall_32+0x127/0x180 [ 1404.653746][T24598] do_fast_syscall_32+0x77/0xd0 [ 1404.658615][T24598] do_SYSENTER_32+0x73/0x90 [ 1404.663132][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.669480][T24598] RIP: 0023:0xf7f64549 [ 1404.673561][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1404.693186][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1404.701635][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1404.709626][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1404.717613][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.725619][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1404.733693][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1404.741688][T24598] Uninit was stored to memory at: [ 1404.746794][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1404.752728][T24598] __msan_chain_origin+0x54/0xa0 [ 1404.757684][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1404.762829][T24598] get_compat_msghdr+0x108/0x2b0 [ 1404.767794][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1404.772420][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1404.777131][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.783221][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.789399][T24598] __do_fast_syscall_32+0x127/0x180 [ 1404.794619][T24598] do_fast_syscall_32+0x77/0xd0 [ 1404.799490][T24598] do_SYSENTER_32+0x73/0x90 [ 1404.804033][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.810473][T24598] [ 1404.812795][T24598] Uninit was stored to memory at: [ 1404.817893][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1404.823629][T24598] __msan_chain_origin+0x54/0xa0 [ 1404.828577][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1404.833702][T24598] get_compat_msghdr+0x108/0x2b0 [ 1404.838651][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1404.843165][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1404.847937][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.854021][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.860199][T24598] __do_fast_syscall_32+0x127/0x180 [ 1404.865412][T24598] do_fast_syscall_32+0x77/0xd0 [ 1404.870274][T24598] do_SYSENTER_32+0x73/0x90 [ 1404.874792][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.881135][T24598] [ 1404.883471][T24598] Uninit was stored to memory at: [ 1404.888485][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1404.894220][T24598] __msan_chain_origin+0x54/0xa0 [ 1404.899169][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1404.904383][T24598] get_compat_msghdr+0x108/0x2b0 [ 1404.909337][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1404.913851][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1404.918547][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.924636][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1404.930805][T24598] __do_fast_syscall_32+0x127/0x180 [ 1404.936018][T24598] do_fast_syscall_32+0x77/0xd0 [ 1404.940889][T24598] do_SYSENTER_32+0x73/0x90 [ 1404.945411][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1404.951760][T24598] [ 1404.954111][T24598] Uninit was stored to memory at: [ 1404.959133][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1404.964893][T24598] __msan_chain_origin+0x54/0xa0 [ 1404.969881][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1404.975037][T24598] get_compat_msghdr+0x108/0x2b0 [ 1404.980004][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1404.984644][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1404.989361][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1404.995627][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.001814][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.007044][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.011911][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.016433][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.022869][T24598] [ 1405.025189][T24598] Uninit was stored to memory at: [ 1405.030201][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.035936][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.040902][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.046201][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.051170][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.055705][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.060393][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.066564][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.072740][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.078088][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.082956][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.087471][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.093906][T24598] [ 1405.096236][T24598] Uninit was stored to memory at: [ 1405.101248][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.107132][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.112091][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.117303][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.122255][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.126783][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.131480][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.137566][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.143753][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.149062][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.154032][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.158555][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.164906][T24598] [ 1405.167261][T24598] Uninit was stored to memory at: [ 1405.172290][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.178058][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.183017][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.188153][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.193116][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.197676][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.202405][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.208682][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.214879][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.220122][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.225012][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.229552][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.236188][T24598] [ 1405.238535][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1405.245224][T24598] do_recvmmsg+0xbf/0x22d0 [ 1405.249711][T24598] do_recvmmsg+0xbf/0x22d0 [ 1405.449161][T24598] not chained 2350000 origins [ 1405.454239][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1405.463026][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.473194][T24598] Call Trace: [ 1405.476502][T24598] dump_stack+0x24c/0x2e0 [ 1405.480881][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1405.486638][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1405.492135][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1405.497719][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1405.502939][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1405.508583][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1405.514675][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1405.519891][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1405.525731][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1405.531814][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1405.537035][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1405.542686][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1405.548778][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1405.554184][T24598] ? _copy_from_user+0x1fd/0x300 [ 1405.559152][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.564113][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.569251][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.574212][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.578738][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1405.584307][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1405.589534][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1405.595375][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1405.600588][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1405.606236][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1405.611538][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1405.616336][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.621045][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.627139][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.633313][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.638535][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.643407][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.648016][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.654363][T24598] RIP: 0023:0xf7f64549 [ 1405.658444][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1405.678072][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1405.686522][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1405.694524][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1405.702525][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1405.710522][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1405.718519][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1405.726525][T24598] Uninit was stored to memory at: [ 1405.731686][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.737475][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.742475][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.747624][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.752602][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.757145][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.761862][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.768001][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.774196][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.779437][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.784327][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.788865][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.795231][T24598] [ 1405.797568][T24598] Uninit was stored to memory at: [ 1405.802594][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.808352][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.813344][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.818491][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.823461][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.828023][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.832735][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.838844][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.845035][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.850265][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.855434][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.859960][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.866397][T24598] [ 1405.868722][T24598] Uninit was stored to memory at: [ 1405.873735][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.879478][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.884503][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.889629][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.894579][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.899095][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.903782][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.909864][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.916029][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.921242][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.926108][T24598] do_SYSENTER_32+0x73/0x90 [ 1405.930622][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1405.936973][T24598] [ 1405.939298][T24598] Uninit was stored to memory at: [ 1405.944317][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1405.950051][T24598] __msan_chain_origin+0x54/0xa0 [ 1405.955207][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1405.960342][T24598] get_compat_msghdr+0x108/0x2b0 [ 1405.965299][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1405.969903][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1405.974626][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1405.980732][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1405.986991][T24598] __do_fast_syscall_32+0x127/0x180 [ 1405.992212][T24598] do_fast_syscall_32+0x77/0xd0 [ 1405.997085][T24598] do_SYSENTER_32+0x73/0x90 [ 1406.001605][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.007957][T24598] [ 1406.010285][T24598] Uninit was stored to memory at: [ 1406.015299][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1406.021040][T24598] __msan_chain_origin+0x54/0xa0 [ 1406.025998][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1406.031153][T24598] get_compat_msghdr+0x108/0x2b0 [ 1406.036115][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1406.040656][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1406.045378][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.051488][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.057705][T24598] __do_fast_syscall_32+0x127/0x180 [ 1406.062951][T24598] do_fast_syscall_32+0x77/0xd0 [ 1406.067840][T24598] do_SYSENTER_32+0x73/0x90 [ 1406.072381][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.078748][T24598] [ 1406.081080][T24598] Uninit was stored to memory at: [ 1406.086273][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1406.092037][T24598] __msan_chain_origin+0x54/0xa0 [ 1406.097003][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1406.102129][T24598] get_compat_msghdr+0x108/0x2b0 [ 1406.107079][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1406.111636][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1406.116334][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.122426][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.128603][T24598] __do_fast_syscall_32+0x127/0x180 [ 1406.133815][T24598] do_fast_syscall_32+0x77/0xd0 [ 1406.138768][T24598] do_SYSENTER_32+0x73/0x90 [ 1406.143284][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.149630][T24598] [ 1406.151950][T24598] Uninit was stored to memory at: [ 1406.156964][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1406.162699][T24598] __msan_chain_origin+0x54/0xa0 [ 1406.167647][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1406.172857][T24598] get_compat_msghdr+0x108/0x2b0 [ 1406.177806][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1406.182320][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1406.187031][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.193135][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.199308][T24598] __do_fast_syscall_32+0x127/0x180 [ 1406.204519][T24598] do_fast_syscall_32+0x77/0xd0 [ 1406.209384][T24598] do_SYSENTER_32+0x73/0x90 [ 1406.213905][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.220246][T24598] [ 1406.222580][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1406.229260][T24598] do_recvmmsg+0xbf/0x22d0 [ 1406.233778][T24598] do_recvmmsg+0xbf/0x22d0 [ 1406.436833][T24582] not chained 2360000 origins [ 1406.441562][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1406.450342][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.460408][T24582] Call Trace: [ 1406.463694][T24582] dump_stack+0x24c/0x2e0 [ 1406.468053][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1406.473787][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1406.479187][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1406.484772][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1406.489991][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1406.495642][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1406.501772][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1406.506991][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1406.512822][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1406.518935][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1406.524165][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1406.529823][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1406.535916][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1406.541257][T24582] ? _copy_from_user+0x1fd/0x300 [ 1406.546219][T24582] __msan_chain_origin+0x54/0xa0 [ 1406.551179][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1406.556337][T24582] get_compat_msghdr+0x108/0x2b0 [ 1406.561389][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1406.566018][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1406.571242][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1406.577072][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1406.582307][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1406.587974][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1406.593318][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1406.598112][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1406.602822][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.608928][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.615105][T24582] __do_fast_syscall_32+0x127/0x180 [ 1406.620323][T24582] do_fast_syscall_32+0x77/0xd0 [ 1406.625189][T24582] do_SYSENTER_32+0x73/0x90 [ 1406.629706][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.636050][T24582] RIP: 0023:0xf7f64549 [ 1406.640125][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1406.659747][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1406.668217][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1406.676236][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1406.684237][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1406.692236][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1406.700233][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1406.708507][T24582] Uninit was stored to memory at: [ 1406.713543][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1406.719296][T24582] __msan_chain_origin+0x54/0xa0 [ 1406.724263][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1406.729402][T24582] get_compat_msghdr+0x108/0x2b0 [ 1406.734357][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1406.738875][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1406.743576][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.749665][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.755834][T24582] __do_fast_syscall_32+0x127/0x180 [ 1406.761055][T24582] do_fast_syscall_32+0x77/0xd0 [ 1406.765947][T24582] do_SYSENTER_32+0x73/0x90 [ 1406.770469][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.776812][T24582] [ 1406.779144][T24582] Uninit was stored to memory at: [ 1406.784157][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1406.789894][T24582] __msan_chain_origin+0x54/0xa0 [ 1406.794849][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1406.799976][T24582] get_compat_msghdr+0x108/0x2b0 [ 1406.804927][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1406.809440][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1406.814163][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.820244][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.826425][T24582] __do_fast_syscall_32+0x127/0x180 [ 1406.831694][T24582] do_fast_syscall_32+0x77/0xd0 [ 1406.836561][T24582] do_SYSENTER_32+0x73/0x90 [ 1406.841172][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.847515][T24582] [ 1406.849835][T24582] Uninit was stored to memory at: [ 1406.854846][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1406.860599][T24582] __msan_chain_origin+0x54/0xa0 [ 1406.865562][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1406.870693][T24582] get_compat_msghdr+0x108/0x2b0 [ 1406.875650][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1406.880171][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1406.884893][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.890991][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.897174][T24582] __do_fast_syscall_32+0x127/0x180 [ 1406.902401][T24582] do_fast_syscall_32+0x77/0xd0 [ 1406.907276][T24582] do_SYSENTER_32+0x73/0x90 [ 1406.911800][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.918148][T24582] [ 1406.920468][T24582] Uninit was stored to memory at: [ 1406.925480][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1406.931210][T24582] __msan_chain_origin+0x54/0xa0 [ 1406.936154][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1406.941273][T24582] get_compat_msghdr+0x108/0x2b0 [ 1406.946218][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1406.950731][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1406.955416][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1406.961495][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1406.967777][T24582] __do_fast_syscall_32+0x127/0x180 [ 1406.972995][T24582] do_fast_syscall_32+0x77/0xd0 [ 1406.977947][T24582] do_SYSENTER_32+0x73/0x90 [ 1406.982462][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1406.988832][T24582] [ 1406.991151][T24582] Uninit was stored to memory at: [ 1406.996163][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1407.001903][T24582] __msan_chain_origin+0x54/0xa0 [ 1407.006855][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1407.011983][T24582] get_compat_msghdr+0x108/0x2b0 [ 1407.016954][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1407.021474][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1407.026166][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.032249][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.038425][T24582] __do_fast_syscall_32+0x127/0x180 [ 1407.043644][T24582] do_fast_syscall_32+0x77/0xd0 [ 1407.048536][T24582] do_SYSENTER_32+0x73/0x90 [ 1407.053055][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.059402][T24582] [ 1407.061752][T24582] Uninit was stored to memory at: [ 1407.066769][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1407.072529][T24582] __msan_chain_origin+0x54/0xa0 [ 1407.077482][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1407.082607][T24582] get_compat_msghdr+0x108/0x2b0 [ 1407.087646][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1407.092189][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1407.096910][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.102996][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.109338][T24582] __do_fast_syscall_32+0x127/0x180 [ 1407.114553][T24582] do_fast_syscall_32+0x77/0xd0 [ 1407.119419][T24582] do_SYSENTER_32+0x73/0x90 [ 1407.123933][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.130276][T24582] [ 1407.132611][T24582] Uninit was stored to memory at: [ 1407.137625][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1407.143363][T24582] __msan_chain_origin+0x54/0xa0 [ 1407.148313][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1407.153439][T24582] get_compat_msghdr+0x108/0x2b0 [ 1407.158391][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1407.162915][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1407.167608][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.173690][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.179866][T24582] __do_fast_syscall_32+0x127/0x180 [ 1407.185094][T24582] do_fast_syscall_32+0x77/0xd0 [ 1407.189966][T24582] do_SYSENTER_32+0x73/0x90 [ 1407.194515][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.200956][T24582] [ 1407.203280][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1407.209959][T24582] do_recvmmsg+0xbf/0x22d0 [ 1407.214394][T24582] do_recvmmsg+0xbf/0x22d0 [ 1407.283734][T24598] not chained 2370000 origins [ 1407.288537][T24598] CPU: 1 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1407.297322][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.307422][T24598] Call Trace: [ 1407.310719][T24598] dump_stack+0x24c/0x2e0 [ 1407.315121][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1407.320896][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1407.326308][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1407.331899][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1407.337123][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1407.342822][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1407.348967][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1407.354200][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.360216][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1407.366311][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1407.371533][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1407.377196][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1407.383303][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1407.388621][T24598] ? _copy_from_user+0x1fd/0x300 [ 1407.393610][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.398607][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.403758][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.408723][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.413248][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1407.418813][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1407.424030][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.429856][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1407.435078][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1407.440901][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1407.446223][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1407.451004][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.455713][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.462096][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.468365][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.473852][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.478839][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.483468][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.489845][T24598] RIP: 0023:0xf7f64549 [ 1407.493925][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1407.513545][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1407.521991][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1407.529982][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1407.537984][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1407.545975][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1407.553966][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1407.561960][T24598] Uninit was stored to memory at: [ 1407.566991][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.572777][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.577731][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.582861][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.587820][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.592344][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.597036][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.603119][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.609294][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.614544][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.619448][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.623971][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.630334][T24598] [ 1407.632658][T24598] Uninit was stored to memory at: [ 1407.637764][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.643619][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.648629][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.653769][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.658831][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.663361][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.668069][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.674171][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.680377][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.685609][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.690495][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.695045][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.701419][T24598] [ 1407.703861][T24598] Uninit was stored to memory at: [ 1407.708903][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.714653][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.719639][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.724789][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.729924][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.734462][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.739177][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.745369][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.751596][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.756910][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.761800][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.766344][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.772725][T24598] [ 1407.775062][T24598] Uninit was stored to memory at: [ 1407.780082][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.785923][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.790888][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.796022][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.800978][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.805527][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.810222][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.816310][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.822490][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.827709][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.832583][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.837104][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.843449][T24598] [ 1407.845779][T24598] Uninit was stored to memory at: [ 1407.850792][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.856527][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.861491][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.866656][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.871608][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.876126][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.880812][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.886895][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.893066][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.898287][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.903166][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.907685][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.914024][T24598] [ 1407.916343][T24598] Uninit was stored to memory at: [ 1407.921371][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.927136][T24598] __msan_chain_origin+0x54/0xa0 [ 1407.932181][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1407.937327][T24598] get_compat_msghdr+0x108/0x2b0 [ 1407.942277][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1407.946807][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1407.951539][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1407.957741][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1407.963943][T24598] __do_fast_syscall_32+0x127/0x180 [ 1407.969170][T24598] do_fast_syscall_32+0x77/0xd0 [ 1407.974057][T24598] do_SYSENTER_32+0x73/0x90 [ 1407.978610][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1407.984953][T24598] [ 1407.987295][T24598] Uninit was stored to memory at: [ 1407.992336][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1407.998082][T24598] __msan_chain_origin+0x54/0xa0 [ 1408.003036][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1408.008161][T24598] get_compat_msghdr+0x108/0x2b0 [ 1408.013110][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1408.017648][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1408.022339][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.028428][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.034610][T24598] __do_fast_syscall_32+0x127/0x180 [ 1408.039841][T24598] do_fast_syscall_32+0x77/0xd0 [ 1408.044732][T24598] do_SYSENTER_32+0x73/0x90 [ 1408.049248][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.055606][T24598] [ 1408.057958][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1408.064633][T24598] do_recvmmsg+0xbf/0x22d0 [ 1408.069080][T24598] do_recvmmsg+0xbf/0x22d0 [ 1408.240360][T24582] not chained 2380000 origins [ 1408.245091][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1408.253896][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.264234][T24582] Call Trace: [ 1408.267573][T24582] dump_stack+0x24c/0x2e0 [ 1408.271942][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1408.277682][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1408.283085][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1408.288657][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1408.293879][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1408.299534][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1408.305668][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1408.310894][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1408.316728][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1408.322840][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1408.328079][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1408.333747][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1408.339835][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1408.345139][T24582] ? _copy_from_user+0x1fd/0x300 [ 1408.350194][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.355161][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.360307][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.365286][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.369907][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1408.375135][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1408.381143][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1408.386371][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1408.392049][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1408.397368][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1408.402186][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.406938][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.413039][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.419228][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.424465][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.429353][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.433978][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.440427][T24582] RIP: 0023:0xf7f64549 [ 1408.444526][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1408.464160][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1408.472612][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1408.480676][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1408.488654][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1408.496643][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1408.504709][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.512712][T24582] Uninit was stored to memory at: [ 1408.517729][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.523480][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.528424][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.533547][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.538499][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.543016][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.547969][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.554138][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.560318][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.565541][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.570404][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.574927][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.581273][T24582] [ 1408.583616][T24582] Uninit was stored to memory at: [ 1408.588628][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.594362][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.599307][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.604476][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.609518][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.614034][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.618728][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.624816][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.631009][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.636225][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.641088][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.645601][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.651940][T24582] [ 1408.654257][T24582] Uninit was stored to memory at: [ 1408.659267][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.665023][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.669968][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.675118][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.680082][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.684601][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.689290][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.695475][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.701848][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.707084][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.712066][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.716588][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.722953][T24582] [ 1408.725297][T24582] Uninit was stored to memory at: [ 1408.730321][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.736064][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.741026][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.746158][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.751110][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.755784][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.760534][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.766628][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.772814][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.778036][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.783004][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.787533][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.793881][T24582] [ 1408.796212][T24582] Uninit was stored to memory at: [ 1408.801223][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.806961][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.811917][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.817044][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.821992][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.826535][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.831222][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.837302][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.843473][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.848711][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.853599][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.858116][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.864457][T24582] [ 1408.866779][T24582] Uninit was stored to memory at: [ 1408.871792][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.877528][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.882565][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.887694][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.892652][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.897175][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.901864][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.907960][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.914136][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.919372][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.924235][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.928748][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1408.935084][T24582] [ 1408.937403][T24582] Uninit was stored to memory at: [ 1408.942414][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1408.948199][T24582] __msan_chain_origin+0x54/0xa0 [ 1408.953157][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1408.958282][T24582] get_compat_msghdr+0x108/0x2b0 [ 1408.963236][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1408.967758][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1408.972444][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1408.978526][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1408.984693][T24582] __do_fast_syscall_32+0x127/0x180 [ 1408.989905][T24582] do_fast_syscall_32+0x77/0xd0 [ 1408.994768][T24582] do_SYSENTER_32+0x73/0x90 [ 1408.999281][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.005622][T24582] [ 1409.007964][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1409.014630][T24582] do_recvmmsg+0xbf/0x22d0 [ 1409.019072][T24582] do_recvmmsg+0xbf/0x22d0 [ 1409.095161][T24582] not chained 2390000 origins [ 1409.099877][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1409.108680][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.118748][T24582] Call Trace: [ 1409.122057][T24582] dump_stack+0x24c/0x2e0 [ 1409.126418][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1409.132205][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1409.137628][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1409.143200][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1409.148512][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1409.154167][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1409.160259][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1409.165738][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1409.171566][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1409.177830][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1409.183064][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1409.188756][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1409.194872][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1409.200205][T24582] ? _copy_from_user+0x1fd/0x300 [ 1409.205165][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.210150][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.215291][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.220251][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.224780][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1409.230002][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1409.235859][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1409.241096][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1409.246759][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1409.252079][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1409.256896][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.261613][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.267720][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.273923][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.279147][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.284018][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.288545][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.294908][T24582] RIP: 0023:0xf7f64549 [ 1409.298986][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1409.318621][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1409.327069][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1409.335157][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1409.343154][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1409.351145][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1409.359134][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.367128][T24582] Uninit was stored to memory at: [ 1409.372158][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.377899][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.382854][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.387981][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.393015][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.397561][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.402248][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.408328][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.414501][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.419723][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.424588][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.429102][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.435446][T24582] [ 1409.437765][T24582] Uninit was stored to memory at: [ 1409.442789][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.448527][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.453477][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.458702][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.463656][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.468168][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.472856][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.478946][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.485129][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.490342][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.495204][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.499722][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.506079][T24582] [ 1409.508394][T24582] Uninit was stored to memory at: [ 1409.513406][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.519160][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.524125][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.529249][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.534194][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.538713][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.543401][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.549483][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.555660][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.560887][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.565759][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.570300][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.576647][T24582] [ 1409.578970][T24582] Uninit was stored to memory at: [ 1409.583991][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.589765][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.594724][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.599859][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.604824][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.609348][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.614041][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.620241][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.626413][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.631642][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.636514][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.641034][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.647391][T24582] [ 1409.649713][T24582] Uninit was stored to memory at: [ 1409.654725][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.660454][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.665401][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.670523][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.675472][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.679989][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.684681][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.690767][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.696965][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.702193][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.707081][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.711619][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.718141][T24582] [ 1409.720484][T24582] Uninit was stored to memory at: [ 1409.725539][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.731301][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.736265][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.741403][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.746400][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.750930][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.755626][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.761714][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.767927][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.773165][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.778032][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.782549][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.788920][T24582] [ 1409.791247][T24582] Uninit was stored to memory at: [ 1409.796262][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1409.802003][T24582] __msan_chain_origin+0x54/0xa0 [ 1409.806988][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1409.812125][T24582] get_compat_msghdr+0x108/0x2b0 [ 1409.817080][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1409.821594][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1409.826279][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1409.832358][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1409.838619][T24582] __do_fast_syscall_32+0x127/0x180 [ 1409.843833][T24582] do_fast_syscall_32+0x77/0xd0 [ 1409.848702][T24582] do_SYSENTER_32+0x73/0x90 [ 1409.853215][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1409.859572][T24582] [ 1409.861892][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1409.868564][T24582] do_recvmmsg+0xbf/0x22d0 [ 1409.873003][T24582] do_recvmmsg+0xbf/0x22d0 [ 1410.047262][T24582] not chained 2400000 origins [ 1410.051981][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1410.060769][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.070880][T24582] Call Trace: [ 1410.074188][T24582] dump_stack+0x24c/0x2e0 [ 1410.078557][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1410.084518][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1410.089935][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1410.095527][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.100760][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1410.106441][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1410.112533][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.117771][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1410.123610][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1410.129871][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.135182][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1410.140937][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1410.147040][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1410.152351][T24582] ? _copy_from_user+0x1fd/0x300 [ 1410.157316][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.162282][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.167427][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.172397][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.176936][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.182161][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1410.187991][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.193203][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1410.198848][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1410.204149][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1410.208931][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.213628][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.219719][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.225893][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.231109][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.235980][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.240518][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.246863][T24582] RIP: 0023:0xf7f64549 [ 1410.250942][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1410.270744][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1410.279200][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1410.287205][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1410.295285][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1410.303266][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1410.311250][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1410.319255][T24582] Uninit was stored to memory at: [ 1410.324278][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.330044][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.335003][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.340140][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.345100][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.349625][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.354319][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.360399][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.366574][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.371792][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.376679][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.381196][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.387636][T24582] [ 1410.389954][T24582] Uninit was stored to memory at: [ 1410.394995][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.400817][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.405768][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.410895][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.415847][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.420366][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.425052][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.431130][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.437301][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.442518][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.447381][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.451898][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.458247][T24582] [ 1410.460568][T24582] Uninit was stored to memory at: [ 1410.465579][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.471312][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.476259][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.481402][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.486701][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.491215][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.495909][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.501998][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.508178][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.513496][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.518388][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.522930][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.529296][T24582] [ 1410.531633][T24582] Uninit was stored to memory at: [ 1410.536688][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.542435][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.547401][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.552546][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.557516][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.562050][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.566757][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.572943][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.579135][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.584376][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.589263][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.593794][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.600145][T24582] [ 1410.602469][T24582] Uninit was stored to memory at: [ 1410.607491][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.613224][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.618173][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.623299][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.628363][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.632889][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.637578][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.643666][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.649862][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.655111][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.659987][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.664510][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.670876][T24582] [ 1410.673237][T24582] Uninit was stored to memory at: [ 1410.678405][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.684181][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.689240][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.694406][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.699490][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.704041][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.708766][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.714949][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.721138][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.726387][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.731268][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.735908][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.742265][T24582] [ 1410.744603][T24582] Uninit was stored to memory at: [ 1410.749617][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1410.755368][T24582] __msan_chain_origin+0x54/0xa0 [ 1410.760320][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1410.765447][T24582] get_compat_msghdr+0x108/0x2b0 [ 1410.770413][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1410.774932][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1410.779626][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1410.785712][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1410.791897][T24582] __do_fast_syscall_32+0x127/0x180 [ 1410.797114][T24582] do_fast_syscall_32+0x77/0xd0 [ 1410.801981][T24582] do_SYSENTER_32+0x73/0x90 [ 1410.806497][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1410.812862][T24582] [ 1410.815181][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1410.821845][T24582] do_recvmmsg+0xbf/0x22d0 [ 1410.826292][T24582] do_recvmmsg+0xbf/0x22d0 [ 1410.906768][T24582] not chained 2410000 origins [ 1410.911581][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1410.920541][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.930621][T24582] Call Trace: [ 1410.933970][T24582] dump_stack+0x24c/0x2e0 [ 1410.938349][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1410.944097][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1410.949532][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1410.955104][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.960332][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1410.966078][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1410.972168][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.977389][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1410.983219][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1410.989318][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1410.994559][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1411.000308][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1411.006400][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1411.011710][T24582] ? _copy_from_user+0x1fd/0x300 [ 1411.016676][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.021639][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.026786][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.031754][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.036304][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.041526][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1411.047344][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.052558][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1411.058204][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1411.063504][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1411.068284][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.072980][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.079070][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.085257][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.090496][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.095370][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.099900][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.106248][T24582] RIP: 0023:0xf7f64549 [ 1411.110328][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1411.129997][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1411.138531][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1411.146526][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1411.154527][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1411.162710][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1411.170695][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1411.178709][T24582] Uninit was stored to memory at: [ 1411.183815][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.189561][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.194548][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.199689][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.204658][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.209177][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.213870][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.219963][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.226139][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.231359][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.236241][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.240773][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.247471][T24582] [ 1411.249884][T24582] Uninit was stored to memory at: [ 1411.254904][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.260658][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.265698][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.270823][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.275771][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.280302][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.284994][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.291078][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.297424][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.302650][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.307523][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.312054][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.318412][T24582] [ 1411.320749][T24582] Uninit was stored to memory at: [ 1411.325765][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.331509][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.336467][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.341655][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.346615][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.351128][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.355833][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.361915][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.368436][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.373647][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.378524][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.383037][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.389380][T24582] [ 1411.391700][T24582] Uninit was stored to memory at: [ 1411.396722][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.402460][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.407525][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.412654][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.417620][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.422133][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.426819][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.432910][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.439079][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.444308][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.449177][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.453707][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.460060][T24582] [ 1411.462381][T24582] Uninit was stored to memory at: [ 1411.467389][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.473124][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.478072][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.483199][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.488186][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.492703][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.497391][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.503470][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.509647][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.514899][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.519771][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.524305][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.530669][T24582] [ 1411.532994][T24582] Uninit was stored to memory at: [ 1411.538019][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.543776][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.548725][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.554109][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.559058][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.563572][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.568259][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.574341][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.580517][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.585743][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.590672][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.595188][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.601549][T24582] [ 1411.603873][T24582] Uninit was stored to memory at: [ 1411.608903][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1411.614640][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.619675][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.624815][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.629763][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.634277][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1411.638966][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1411.645048][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1411.651219][T24582] __do_fast_syscall_32+0x127/0x180 [ 1411.656446][T24582] do_fast_syscall_32+0x77/0xd0 [ 1411.661312][T24582] do_SYSENTER_32+0x73/0x90 [ 1411.665846][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1411.672190][T24582] [ 1411.674693][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1411.681360][T24582] do_recvmmsg+0xbf/0x22d0 [ 1411.685805][T24582] do_recvmmsg+0xbf/0x22d0 [ 1411.863855][T24582] not chained 2420000 origins [ 1411.868897][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1411.877678][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.887790][T24582] Call Trace: [ 1411.891088][T24582] dump_stack+0x24c/0x2e0 [ 1411.895453][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1411.901198][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1411.906597][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1411.912168][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.917482][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1411.923226][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1411.929337][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.934673][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1411.940502][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1411.946611][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.951846][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1411.957765][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1411.963868][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1411.969190][T24582] ? _copy_from_user+0x1fd/0x300 [ 1411.974152][T24582] __msan_chain_origin+0x54/0xa0 [ 1411.979109][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1411.984246][T24582] get_compat_msghdr+0x108/0x2b0 [ 1411.989207][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1411.993760][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1411.998978][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1412.004803][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.010014][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1412.015662][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1412.020959][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1412.025739][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.030448][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.036538][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.042710][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.047949][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.052827][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.057345][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.063691][T24582] RIP: 0023:0xf7f64549 [ 1412.067774][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1412.087395][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1412.095841][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1412.103827][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1412.111836][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1412.119820][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1412.127801][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1412.135784][T24582] Uninit was stored to memory at: [ 1412.140812][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.147452][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.152537][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.157676][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.162663][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.167196][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.171895][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.178018][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.184220][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.189446][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.194311][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.198827][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.205182][T24582] [ 1412.207503][T24582] Uninit was stored to memory at: [ 1412.212541][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.218399][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.223392][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.228516][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.233466][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.237983][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.242932][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.249020][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.255189][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.260401][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.265265][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.269778][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.276122][T24582] [ 1412.278440][T24582] Uninit was stored to memory at: [ 1412.283449][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.289183][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.294135][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.299260][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.304212][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.308826][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.313529][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.319642][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.325831][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.331067][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.335962][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.340497][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.347033][T24582] [ 1412.349458][T24582] Uninit was stored to memory at: [ 1412.354506][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.360254][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.365321][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.370467][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.375530][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.380064][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.384764][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.390862][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.397046][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.402286][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.407166][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.411715][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.418095][T24582] [ 1412.420428][T24582] Uninit was stored to memory at: [ 1412.425458][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.431196][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.436154][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.441285][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.446251][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.450774][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.455471][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.461569][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.467756][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.472981][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.478031][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.482556][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.488966][T24582] [ 1412.491309][T24582] Uninit was stored to memory at: [ 1412.496328][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.502075][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.507047][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.512183][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.517134][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.521654][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.526347][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.532443][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.538620][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.543848][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.548719][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.553234][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.559592][T24582] [ 1412.561911][T24582] Uninit was stored to memory at: [ 1412.566918][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1412.572647][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.577591][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.583242][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.588196][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.592811][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.597499][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.603602][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.609776][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.615012][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.619873][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.624391][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.630748][T24582] [ 1412.633064][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1412.639726][T24582] do_recvmmsg+0xbf/0x22d0 [ 1412.644152][T24582] do_recvmmsg+0xbf/0x22d0 [ 1412.727277][T24582] not chained 2430000 origins [ 1412.732030][T24582] CPU: 0 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1412.740900][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1412.750970][T24582] Call Trace: [ 1412.754260][T24582] dump_stack+0x24c/0x2e0 [ 1412.758651][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1412.764396][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1412.769805][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1412.775378][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.780600][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1412.786255][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1412.792360][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.797586][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1412.803420][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1412.809520][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.814748][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1412.820422][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1412.826524][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1412.831855][T24582] ? _copy_from_user+0x1fd/0x300 [ 1412.836935][T24582] __msan_chain_origin+0x54/0xa0 [ 1412.841897][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1412.847146][T24582] get_compat_msghdr+0x108/0x2b0 [ 1412.852112][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1412.856641][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.861860][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1412.867683][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1412.872899][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1412.878550][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1412.883858][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1412.888643][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1412.893425][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1412.899602][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1412.905790][T24582] __do_fast_syscall_32+0x127/0x180 [ 1412.911011][T24582] do_fast_syscall_32+0x77/0xd0 [ 1412.915882][T24582] do_SYSENTER_32+0x73/0x90 [ 1412.920412][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1412.926870][T24582] RIP: 0023:0xf7f64549 [ 1412.930955][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1412.950599][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1412.959054][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1412.967049][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1412.975042][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1412.983034][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1412.991039][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1412.999051][T24582] Uninit was stored to memory at: [ 1413.004068][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.009811][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.014793][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.019945][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.024901][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.029415][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.034103][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.040185][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.046376][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.051602][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.056463][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.060978][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.067416][T24582] [ 1413.069742][T24582] Uninit was stored to memory at: [ 1413.074756][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.080490][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.085433][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.090581][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.095536][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.100056][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.104747][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.110826][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.117020][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.122234][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.127109][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.131624][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.137968][T24582] [ 1413.140288][T24582] Uninit was stored to memory at: [ 1413.145482][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.151239][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.156195][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.161322][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.166297][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.170841][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.175544][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.181639][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.187816][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.193031][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.197900][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.202419][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.208760][T24582] [ 1413.211079][T24582] Uninit was stored to memory at: [ 1413.216089][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.221824][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.226771][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.231896][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.236852][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.241391][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.246090][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.252172][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.258349][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.263584][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.268466][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.272998][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.279356][T24582] [ 1413.281692][T24582] Uninit was stored to memory at: [ 1413.286705][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.292439][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.297388][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.302516][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.307466][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.311977][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.316667][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.322748][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.328913][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.334127][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.338998][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.343514][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.349890][T24582] [ 1413.352218][T24582] Uninit was stored to memory at: [ 1413.357232][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.362982][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.367958][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.373100][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.378068][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.382625][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.387311][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.393397][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.399745][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.404979][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.409847][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.414368][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.420721][T24582] [ 1413.423038][T24582] Uninit was stored to memory at: [ 1413.428046][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1413.433778][T24582] __msan_chain_origin+0x54/0xa0 [ 1413.438727][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1413.443849][T24582] get_compat_msghdr+0x108/0x2b0 [ 1413.448796][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1413.453321][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1413.458039][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.464124][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.470315][T24582] __do_fast_syscall_32+0x127/0x180 [ 1413.475586][T24582] do_fast_syscall_32+0x77/0xd0 [ 1413.480449][T24582] do_SYSENTER_32+0x73/0x90 [ 1413.484965][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.491307][T24582] [ 1413.493638][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1413.500312][T24582] do_recvmmsg+0xbf/0x22d0 [ 1413.504745][T24582] do_recvmmsg+0xbf/0x22d0 [ 1413.692662][T24598] not chained 2440000 origins [ 1413.697397][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1413.706181][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.716244][T24598] Call Trace: [ 1413.719527][T24598] dump_stack+0x24c/0x2e0 [ 1413.723925][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1413.729749][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1413.735143][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1413.740731][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1413.745960][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1413.751621][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1413.757712][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1413.762962][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1413.768827][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1413.774932][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1413.780186][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1413.785848][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1413.791941][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1413.797246][T24598] ? _copy_from_user+0x1fd/0x300 [ 1413.802222][T24598] __msan_chain_origin+0x54/0xa0 [ 1413.807192][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1413.812328][T24598] get_compat_msghdr+0x108/0x2b0 [ 1413.817286][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1413.821814][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1413.827379][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1413.832606][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1413.838424][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1413.843632][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1413.849296][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1413.854617][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1413.859413][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1413.864119][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1413.870223][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1413.876421][T24598] __do_fast_syscall_32+0x127/0x180 [ 1413.881647][T24598] do_fast_syscall_32+0x77/0xd0 [ 1413.886515][T24598] do_SYSENTER_32+0x73/0x90 [ 1413.891046][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1413.897390][T24598] RIP: 0023:0xf7f64549 [ 1413.901467][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1413.921377][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1413.929868][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1413.937853][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1413.945841][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1413.953824][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1413.961821][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1413.969826][T24598] Uninit was stored to memory at: [ 1413.974943][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1413.980703][T24598] __msan_chain_origin+0x54/0xa0 [ 1413.985656][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1413.990793][T24598] get_compat_msghdr+0x108/0x2b0 [ 1413.995751][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.000265][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.004962][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.011058][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.017236][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.022470][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.027346][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.031889][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.038242][T24598] [ 1414.040572][T24598] Uninit was stored to memory at: [ 1414.045587][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.051326][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.056278][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.061435][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.066442][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.070981][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.075684][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.081774][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.087969][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.093183][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.098057][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.102580][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.108925][T24598] [ 1414.111268][T24598] Uninit was stored to memory at: [ 1414.116369][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.122103][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.127054][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.132178][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.137126][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.141901][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.146592][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.152682][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.158870][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.164096][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.168982][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.173514][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.179872][T24598] [ 1414.182193][T24598] Uninit was stored to memory at: [ 1414.187237][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.193125][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.198116][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.203278][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.208277][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.212821][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.217535][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.223647][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.229843][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.235084][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.240236][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.244780][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.251149][T24598] [ 1414.253480][T24598] Uninit was stored to memory at: [ 1414.258582][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.264335][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.269340][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.274495][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.279467][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.284017][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.288728][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.294848][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.301035][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.306246][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.311109][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.315624][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.321967][T24598] [ 1414.324329][T24598] Uninit was stored to memory at: [ 1414.329341][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.335082][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.340030][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.345161][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.350109][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.354632][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.359321][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.365443][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.371639][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.376896][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.381773][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.386296][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.392636][T24598] [ 1414.394956][T24598] Uninit was stored to memory at: [ 1414.399972][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.405707][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.410652][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.415777][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.420741][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.425254][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.429954][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.436038][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.442205][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.447416][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.452281][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.456795][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.463141][T24598] [ 1414.465474][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1414.472146][T24598] do_recvmmsg+0xbf/0x22d0 [ 1414.476620][T24598] do_recvmmsg+0xbf/0x22d0 [ 1414.692524][T24598] not chained 2450000 origins [ 1414.697245][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1414.706032][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.716198][T24598] Call Trace: [ 1414.719491][T24598] dump_stack+0x24c/0x2e0 [ 1414.723964][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1414.729793][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1414.735192][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1414.740762][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1414.746065][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1414.751732][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1414.757817][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1414.763048][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1414.768896][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1414.775004][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1414.780243][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1414.785912][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1414.792028][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1414.797358][T24598] ? _copy_from_user+0x1fd/0x300 [ 1414.802390][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.807400][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.812552][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.817606][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1414.822146][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1414.827722][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1414.832944][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1414.838768][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1414.843991][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1414.849666][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1414.854967][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1414.859766][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1414.864475][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1414.870583][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1414.876810][T24598] __do_fast_syscall_32+0x127/0x180 [ 1414.882051][T24598] do_fast_syscall_32+0x77/0xd0 [ 1414.886938][T24598] do_SYSENTER_32+0x73/0x90 [ 1414.891482][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.897862][T24598] RIP: 0023:0xf7f64549 [ 1414.902046][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1414.921769][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1414.930241][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1414.938223][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1414.946207][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.954197][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.962187][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.970195][T24598] Uninit was stored to memory at: [ 1414.975240][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1414.981008][T24598] __msan_chain_origin+0x54/0xa0 [ 1414.985977][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1414.991111][T24598] get_compat_msghdr+0x108/0x2b0 [ 1414.996069][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.000584][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.005272][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.011357][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.017548][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.022765][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.027630][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.032231][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.038574][T24598] [ 1415.040896][T24598] Uninit was stored to memory at: [ 1415.045911][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.051642][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.056617][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.061742][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.066747][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.071300][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.076033][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.082143][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.088336][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.093584][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.098465][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.102984][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.109331][T24598] [ 1415.111649][T24598] Uninit was stored to memory at: [ 1415.116660][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.122394][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.127340][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.132462][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.137407][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.141927][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.146700][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.152781][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.158951][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.164174][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.169065][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.173617][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.179998][T24598] [ 1415.182337][T24598] Uninit was stored to memory at: [ 1415.187351][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.193102][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.198074][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.203212][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.208167][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.212685][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.217379][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.223461][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.229634][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.234849][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.239711][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.244246][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.250591][T24598] [ 1415.252918][T24598] Uninit was stored to memory at: [ 1415.257930][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.263680][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.268679][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.273827][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.278801][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.283341][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.288036][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.294116][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.300295][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.305513][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.310382][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.314899][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.321241][T24598] [ 1415.323747][T24598] Uninit was stored to memory at: [ 1415.328759][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.334494][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.339529][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.344755][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.349704][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.354225][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.358917][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.365017][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.371215][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.376452][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.381342][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.385884][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.392245][T24598] [ 1415.394573][T24598] Uninit was stored to memory at: [ 1415.399596][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1415.405335][T24598] __msan_chain_origin+0x54/0xa0 [ 1415.410278][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1415.415408][T24598] get_compat_msghdr+0x108/0x2b0 [ 1415.420379][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1415.424894][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1415.429603][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.435687][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.441852][T24598] __do_fast_syscall_32+0x127/0x180 [ 1415.447065][T24598] do_fast_syscall_32+0x77/0xd0 [ 1415.451965][T24598] do_SYSENTER_32+0x73/0x90 [ 1415.456480][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.462826][T24598] [ 1415.465162][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1415.471829][T24598] do_recvmmsg+0xbf/0x22d0 [ 1415.476283][T24598] do_recvmmsg+0xbf/0x22d0 [ 1415.662688][T24582] not chained 2460000 origins [ 1415.667452][T24582] CPU: 1 PID: 24582 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1415.676273][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.686355][T24582] Call Trace: [ 1415.689686][T24582] dump_stack+0x24c/0x2e0 [ 1415.694056][T24582] kmsan_internal_chain_origin+0x6f/0x130 [ 1415.699841][T24582] ? __skb_datagram_iter+0x3cb/0x1210 [ 1415.705254][T24582] ? skb_copy_datagram_iter+0x200/0x200 [ 1415.710878][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1415.716106][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1415.721772][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1415.727871][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1415.733105][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1415.739149][T24582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1415.745262][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1415.750603][T24582] ? kmsan_set_origin_checked+0xa2/0x100 [ 1415.756263][T24582] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1415.762366][T24582] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1415.767809][T24582] ? _copy_from_user+0x1fd/0x300 [ 1415.772802][T24582] __msan_chain_origin+0x54/0xa0 [ 1415.777781][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1415.783044][T24582] get_compat_msghdr+0x108/0x2b0 [ 1415.788020][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1415.792555][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1415.797776][T24582] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1415.803609][T24582] ? kmsan_get_metadata+0x116/0x180 [ 1415.808828][T24582] ? kmsan_internal_set_origin+0x82/0xc0 [ 1415.814478][T24582] ? __msan_poison_alloca+0xec/0x110 [ 1415.819780][T24582] ? __sys_recvmmsg+0xb5/0x6f0 [ 1415.824584][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1415.829286][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1415.835386][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1415.841565][T24582] __do_fast_syscall_32+0x127/0x180 [ 1415.846817][T24582] do_fast_syscall_32+0x77/0xd0 [ 1415.848994][T24598] not chained 2470000 origins [ 1415.851681][T24582] do_SYSENTER_32+0x73/0x90 [ 1415.860848][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1415.867217][T24582] RIP: 0023:0xf7f64549 [ 1415.871315][T24582] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1415.890951][T24582] RSP: 002b:00000000f555e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1415.899417][T24582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1415.907483][T24582] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1415.915466][T24582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.923461][T24582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1415.931543][T24582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.939529][T24582] Uninit was stored to memory at: [ 1415.939531][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1415.944565][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1415.953415][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.959161][T24582] __msan_chain_origin+0x54/0xa0 [ 1415.969212][T24598] Call Trace: [ 1415.969239][T24598] dump_stack+0x24c/0x2e0 [ 1415.974144][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1415.977457][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1415.981761][T24582] get_compat_msghdr+0x108/0x2b0 [ 1415.986932][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1415.992651][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1415.997580][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1416.002931][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.007429][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1416.012970][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.017625][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1416.022802][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.028845][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1416.034457][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.040590][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1416.046639][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.051825][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1416.057003][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.061848][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1416.067676][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.072198][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1416.078269][T24582] [ 1416.078286][T24582] Uninit was stored to memory at: [ 1416.078296][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.084593][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1416.089785][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.092137][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1416.097137][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.102843][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1416.108552][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.113480][T24598] ? _copy_from_user+0x1fd/0x300 [ 1416.119543][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.124667][T24598] __msan_chain_origin+0x54/0xa0 [ 1416.129934][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.134855][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1416.139771][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.144271][T24598] get_compat_msghdr+0x108/0x2b0 [ 1416.149190][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.153857][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1416.158946][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.165001][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1416.169924][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.176101][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1416.180677][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.185873][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1416.191402][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.196239][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1416.201432][T24582] [ 1416.201441][T24582] Uninit was stored to memory at: [ 1416.201451][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.205920][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1416.211701][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.218005][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1416.223175][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.225483][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1416.230479][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.236187][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1416.241793][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.246721][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.251980][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.257074][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.261813][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.266745][T24598] __do_fast_syscall_32+0x127/0x180 [ 1416.271433][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.275936][T24598] do_fast_syscall_32+0x77/0xd0 [ 1416.281987][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.286658][T24598] do_SYSENTER_32+0x73/0x90 [ 1416.292785][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.298831][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.304021][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.310323][T24598] RIP: 0023:0xf7f64549 [ 1416.315160][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.320334][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1416.324814][T24582] [ 1416.324822][T24582] Uninit was stored to memory at: [ 1416.329640][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 [ 1416.335946][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.340431][T24598] ORIG_RAX: 0000000000000151 [ 1416.344482][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.350780][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1416.370370][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.372699][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1416.377811][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.383882][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1416.389588][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.394255][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1416.399188][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.407239][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1416.412351][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.420341][T24598] Uninit was stored to memory at: [ 1416.425259][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.433217][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1416.437696][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.445649][T24598] __msan_chain_origin+0x54/0xa0 [ 1416.450337][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.458295][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1416.464343][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.469395][T24598] get_compat_msghdr+0x108/0x2b0 [ 1416.475558][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.481271][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1416.486456][T24582] [ 1416.486471][T24582] Uninit was stored to memory at: [ 1416.486480][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.491401][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1416.496234][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.501341][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.505820][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.510754][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.517076][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.521751][T24598] __do_fast_syscall_32+0x127/0x180 [ 1416.524059][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.529055][T24598] do_fast_syscall_32+0x77/0xd0 [ 1416.534749][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.539419][T24598] do_SYSENTER_32+0x73/0x90 [ 1416.544331][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.550374][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.555458][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.561585][T24598] [ 1416.561597][T24598] Uninit was stored to memory at: [ 1416.566507][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.571972][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1416.576465][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.581507][T24598] __msan_chain_origin+0x54/0xa0 [ 1416.586185][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.590677][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1416.596767][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.603070][T24598] get_compat_msghdr+0x108/0x2b0 [ 1416.609197][T24582] [ 1416.609205][T24582] Uninit was stored to memory at: [ 1416.611506][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1416.616526][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.621698][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1416.627403][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.632229][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.637139][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.641808][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.646920][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.653220][T24598] __do_fast_syscall_32+0x127/0x180 [ 1416.658133][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.660457][T24598] do_fast_syscall_32+0x77/0xd0 [ 1416.665547][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.670040][T24598] do_SYSENTER_32+0x73/0x90 [ 1416.675775][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.680444][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.685383][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.691442][T24598] [ 1416.691451][T24598] Uninit was stored to memory at: [ 1416.696534][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.702673][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1416.707592][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.712773][T24598] __msan_chain_origin+0x54/0xa0 [ 1416.717252][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.722077][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1416.726733][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.731234][T24598] get_compat_msghdr+0x108/0x2b0 [ 1416.737295][T24582] [ 1416.737303][T24582] Uninit was stored to memory at: [ 1416.743601][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1416.749731][T24582] kmsan_internal_chain_origin+0xad/0x130 [ 1416.752042][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1416.757044][T24582] __msan_chain_origin+0x54/0xa0 [ 1416.762255][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.767973][T24582] __get_compat_msghdr+0x6db/0x9d0 [ 1416.772829][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.777761][T24582] get_compat_msghdr+0x108/0x2b0 [ 1416.782260][T24598] __do_fast_syscall_32+0x127/0x180 [ 1416.787361][T24582] do_recvmmsg+0xdc1/0x22d0 [ 1416.793683][T24598] do_fast_syscall_32+0x77/0xd0 [ 1416.798618][T24582] __sys_recvmmsg+0x519/0x6f0 [ 1416.800932][T24598] do_SYSENTER_32+0x73/0x90 [ 1416.805936][T24582] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.810429][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.816130][T24582] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.820791][T24598] [ 1416.820800][T24598] Uninit was stored to memory at: [ 1416.825707][T24582] __do_fast_syscall_32+0x127/0x180 [ 1416.831751][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1416.836834][T24582] do_fast_syscall_32+0x77/0xd0 [ 1416.842984][T24598] __msan_chain_origin+0x54/0xa0 [ 1416.847895][T24582] do_SYSENTER_32+0x73/0x90 [ 1416.853066][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1416.857550][T24582] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.862399][T24598] get_compat_msghdr+0x108/0x2b0 [ 1416.867070][T24582] [ 1416.867086][T24582] Local variable ----msg_sys@do_recvmmsg created at: [ 1416.871585][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1416.877643][T24582] do_recvmmsg+0xbf/0x22d0 [ 1416.883980][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1416.890154][T24582] do_recvmmsg+0xbf/0x22d0 [ 1416.892475][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1416.972086][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1416.978285][T24598] __do_fast_syscall_32+0x127/0x180 [ 1416.983533][T24598] do_fast_syscall_32+0x77/0xd0 [ 1416.988414][T24598] do_SYSENTER_32+0x73/0x90 [ 1416.992932][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1416.999280][T24598] [ 1417.001603][T24598] Uninit was stored to memory at: [ 1417.006632][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.012365][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.017404][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.022530][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.027650][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.032165][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.036858][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.042938][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.049193][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.054404][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.059268][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.063798][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.070170][T24598] [ 1417.072531][T24598] Uninit was stored to memory at: [ 1417.077567][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.083328][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.088328][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.093493][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.098453][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.102979][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.107673][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.113752][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.120010][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.125311][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.130351][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.134870][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.141217][T24598] [ 1417.143559][T24598] Uninit was stored to memory at: [ 1417.148747][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.154572][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.159570][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.164717][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.169699][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.174244][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.178965][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.185186][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.191401][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.196643][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.201707][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.206263][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.212629][T24598] [ 1417.214957][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1417.221640][T24598] do_recvmmsg+0xbf/0x22d0 [ 1417.226092][T24598] do_recvmmsg+0xbf/0x22d0 [ 1417.493312][T24598] not chained 2480000 origins [ 1417.498038][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1417.506923][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.517014][T24598] Call Trace: [ 1417.520308][T24598] dump_stack+0x24c/0x2e0 [ 1417.524670][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1417.530413][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1417.535865][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1417.541440][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1417.546660][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1417.552315][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1417.558423][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1417.563627][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1417.569603][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1417.575745][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1417.580991][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1417.586770][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1417.592863][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1417.598175][T24598] ? _copy_from_user+0x1fd/0x300 [ 1417.603104][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.608033][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.613133][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.618058][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.622548][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1417.628085][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1417.633370][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1417.639165][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1417.644453][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1417.650123][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1417.655398][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1417.660169][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.664892][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.671034][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.677258][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.682476][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.687386][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.691896][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.698239][T24598] RIP: 0023:0xf7f64549 [ 1417.702307][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1417.721969][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1417.730468][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1417.738464][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1417.746536][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1417.754558][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1417.762531][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1417.770554][T24598] Uninit was stored to memory at: [ 1417.775597][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.781334][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.786336][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.791478][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.796432][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.800932][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.805633][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.811699][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.817858][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.823063][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.827911][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.832401][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.838715][T24598] [ 1417.841023][T24598] Uninit was stored to memory at: [ 1417.846035][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.851751][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.856704][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.861811][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.866777][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.871301][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.876021][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.882105][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.888307][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.893507][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.898418][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.902918][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.909364][T24598] [ 1417.911686][T24598] Uninit was stored to memory at: [ 1417.916701][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.922414][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.927364][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1417.932462][T24598] get_compat_msghdr+0x108/0x2b0 [ 1417.937400][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1417.941913][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1417.946603][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1417.952670][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1417.958869][T24598] __do_fast_syscall_32+0x127/0x180 [ 1417.964111][T24598] do_fast_syscall_32+0x77/0xd0 [ 1417.968970][T24598] do_SYSENTER_32+0x73/0x90 [ 1417.973592][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1417.979940][T24598] [ 1417.982313][T24598] Uninit was stored to memory at: [ 1417.987346][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1417.993060][T24598] __msan_chain_origin+0x54/0xa0 [ 1417.998067][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.003170][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.008124][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.012665][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.017329][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.023390][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.029640][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.035316][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.040187][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.044720][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.051046][T24598] [ 1418.053352][T24598] Uninit was stored to memory at: [ 1418.058347][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.064065][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.069004][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.074151][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.079182][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.083690][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.088367][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.094520][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.100674][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.105894][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.110766][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.115471][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.121834][T24598] [ 1418.124163][T24598] Uninit was stored to memory at: [ 1418.129191][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.134916][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.139877][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.145018][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.150034][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.154543][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.159209][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.165275][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.171440][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.176654][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.181556][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.186129][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.192463][T24598] [ 1418.194778][T24598] Uninit was stored to memory at: [ 1418.199814][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.205578][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.210507][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.215608][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.220535][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.225056][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.229746][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.235842][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.241990][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.247216][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.252061][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.256566][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.262914][T24598] [ 1418.265250][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1418.271939][T24598] do_recvmmsg+0xbf/0x22d0 [ 1418.276364][T24598] do_recvmmsg+0xbf/0x22d0 [ 1418.456113][T24598] not chained 2490000 origins [ 1418.460833][T24598] CPU: 0 PID: 24598 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1418.469721][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.479837][T24598] Call Trace: [ 1418.483146][T24598] dump_stack+0x24c/0x2e0 [ 1418.487548][T24598] kmsan_internal_chain_origin+0x6f/0x130 [ 1418.493299][T24598] ? __skb_datagram_iter+0x3cb/0x1210 [ 1418.498705][T24598] ? skb_copy_datagram_iter+0x200/0x200 [ 1418.504280][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1418.509500][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1418.515153][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1418.521251][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1418.526461][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1418.532267][T24598] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1418.538354][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1418.543557][T24598] ? kmsan_set_origin_checked+0xa2/0x100 [ 1418.549195][T24598] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1418.555264][T24598] ? kmsan_unpoison_shadow+0x74/0xa0 [ 1418.560577][T24598] ? _copy_from_user+0x1fd/0x300 [ 1418.565533][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.570508][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.575665][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.580627][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.585190][T24598] ? ring_buffer_record_is_on+0x5d/0xa0 [ 1418.590753][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1418.596028][T24598] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1418.601836][T24598] ? kmsan_get_metadata+0x116/0x180 [ 1418.607046][T24598] ? kmsan_internal_set_origin+0x82/0xc0 [ 1418.612686][T24598] ? __msan_poison_alloca+0xec/0x110 [ 1418.617996][T24598] ? __sys_recvmmsg+0xb5/0x6f0 [ 1418.622757][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.627425][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.633485][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.639639][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.644842][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.649795][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.654319][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.660680][T24598] RIP: 0023:0xf7f64549 [ 1418.664782][T24598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1418.684535][T24598] RSP: 002b:00000000f551c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1418.692967][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003680 [ 1418.701340][T24598] RDX: 00000000ffffff17 RSI: 0000000000000022 RDI: 0000000000000000 [ 1418.709465][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1418.717564][T24598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1418.725535][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1418.733791][T24598] Uninit was stored to memory at: [ 1418.739341][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.745275][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.750238][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.755397][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.760341][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.764852][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.769939][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.776171][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.782410][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.787619][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.792485][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.796989][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.803486][T24598] [ 1418.806024][T24598] Uninit was stored to memory at: [ 1418.811260][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.816998][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.821949][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.827058][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.832011][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.836630][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.841305][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.847389][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.853556][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.858943][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.863793][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.868345][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.874698][T24598] [ 1418.877041][T24598] Uninit was stored to memory at: [ 1418.882095][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.887852][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.892804][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.897946][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.902888][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.907469][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.912139][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.918251][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.924411][T24598] __do_fast_syscall_32+0x127/0x180 [ 1418.929691][T24598] do_fast_syscall_32+0x77/0xd0 [ 1418.934584][T24598] do_SYSENTER_32+0x73/0x90 [ 1418.939104][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1418.945430][T24598] [ 1418.947911][T24598] Uninit was stored to memory at: [ 1418.952910][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1418.958792][T24598] __msan_chain_origin+0x54/0xa0 [ 1418.963794][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1418.968918][T24598] get_compat_msghdr+0x108/0x2b0 [ 1418.973863][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1418.978403][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1418.983108][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1418.989281][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1418.995439][T24598] __do_fast_syscall_32+0x127/0x180 [ 1419.000670][T24598] do_fast_syscall_32+0x77/0xd0 [ 1419.005538][T24598] do_SYSENTER_32+0x73/0x90 [ 1419.010066][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1419.017033][T24598] [ 1419.019786][T24598] Uninit was stored to memory at: [ 1419.024818][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1419.030533][T24598] __msan_chain_origin+0x54/0xa0 [ 1419.035482][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1419.040588][T24598] get_compat_msghdr+0x108/0x2b0 [ 1419.045554][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1419.050053][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1419.054761][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1419.060826][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1419.067032][T24598] __do_fast_syscall_32+0x127/0x180 [ 1419.072350][T24598] do_fast_syscall_32+0x77/0xd0 [ 1419.077228][T24598] do_SYSENTER_32+0x73/0x90 [ 1419.081746][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1419.088205][T24598] [ 1419.090721][T24598] Uninit was stored to memory at: [ 1419.095739][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1419.101569][T24598] __msan_chain_origin+0x54/0xa0 [ 1419.106546][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1419.111681][T24598] get_compat_msghdr+0x108/0x2b0 [ 1419.116616][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1419.121115][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1419.125953][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1419.132049][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1419.138344][T24598] __do_fast_syscall_32+0x127/0x180 [ 1419.143654][T24598] do_fast_syscall_32+0x77/0xd0 [ 1419.148511][T24598] do_SYSENTER_32+0x73/0x90 [ 1419.153032][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1419.159382][T24598] [ 1419.161726][T24598] Uninit was stored to memory at: [ 1419.166760][T24598] kmsan_internal_chain_origin+0xad/0x130 [ 1419.172485][T24598] __msan_chain_origin+0x54/0xa0 [ 1419.177439][T24598] __get_compat_msghdr+0x6db/0x9d0 [ 1419.182563][T24598] get_compat_msghdr+0x108/0x2b0 [ 1419.187552][T24598] do_recvmmsg+0xdc1/0x22d0 [ 1419.192061][T24598] __sys_recvmmsg+0x519/0x6f0 [ 1419.196739][T24598] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1419.202820][T24598] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1419.209069][T24598] __do_fast_syscall_32+0x127/0x180 [ 1419.214266][T24598] do_fast_syscall_32+0x77/0xd0 [ 1419.219153][T24598] do_SYSENTER_32+0x73/0x90 [ 1419.223650][T24598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1419.230069][T24598] [ 1419.232395][T24598] Local variable ----msg_sys@do_recvmmsg created at: [ 1419.239063][T24598] do_recvmmsg+0xbf/0x22d0 [ 1419.243563][T24598] do_recvmmsg+0xbf/0x22d0 10:38:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 10:38:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000100)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:38:53 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2001) 10:38:53 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x402) 10:38:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000000)=@usbdevfs_disconnect={0x1}) 10:38:53 executing program 1: sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 1420.084901][T24636] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #1 10:38:53 executing program 3: syz_80211_join_ibss(0xfffffffffffffffe, 0x0, 0x0, 0x0) 10:38:53 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, 0x0, 0x0) 10:38:53 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) 10:38:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001300)={0x30, r1, 0x39ea4b51a34b71ad, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "41104bbe27c94b0e"}}]}, 0x30}}, 0x0) 10:38:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000001c0)={0x1120, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_FRAME={0x10c4, 0x33, @data_frame={@qos_no_ht={{@type01={{}, {}, @device_a, @initial, @broadcast}}, {@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @from_mac, @from_mac=@broadcast, {0x4, 0x9}}, {0xe, 0x0, 0x2, 0x1, 0x81}}}, @a_msdu=[{@device_b, @device_a, 0x49, "e19ef792c7d74739a0cead7552c5fabfbd3d452412ec12de0c998eb0730fbc3116b57158ffc0134c3e18c5b0262e8f4448a0cdfeaeac1d0b16c936f93591cca2cef83d9b28744f77fe"}, {@broadcast, @device_b, 0x16, "5c846344322544a0a7b9554111c2fc78c1a85e47c090"}, {@device_a, @broadcast, 0x1000, "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"}]}}]}, 0x1120}, 0x1, 0x0, 0x0, 0x80}, 0x840) 10:38:54 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)) [ 1422.448525][T12252] device hsr_slave_0 left promiscuous mode [ 1422.465481][T12252] device hsr_slave_1 left promiscuous mode [ 1422.476222][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.484426][T12252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.494560][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.502461][T12252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.514944][T12252] device bridge_slave_1 left promiscuous mode [ 1422.521953][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.536357][T12252] device bridge_slave_0 left promiscuous mode [ 1422.543117][T12252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.563839][T12252] device veth1_macvtap left promiscuous mode [ 1422.570127][T12252] device veth0_macvtap left promiscuous mode [ 1422.576564][T12252] device veth1_vlan left promiscuous mode [ 1422.582709][T12252] device veth0_vlan left promiscuous mode [ 1425.334050][T12252] team0 (unregistering): Port device team_slave_1 removed [ 1425.350608][T12252] team0 (unregistering): Port device team_slave_0 removed [ 1425.367173][T12252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.390724][T12252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.464897][T12252] bond0 (unregistering): Released all slaves [ 1425.542459][T24664] IPVS: ftp: loaded support on port[0] = 21 [ 1425.774419][T24664] chnl_net:caif_netlink_parms(): no params data found [ 1425.886525][T24664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.894691][T24664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.904651][T24664] device bridge_slave_0 entered promiscuous mode [ 1425.922420][T24664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.929983][T24664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.942815][T24664] device bridge_slave_1 entered promiscuous mode [ 1425.994144][T24664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.012411][T24664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.062586][T24664] team0: Port device team_slave_0 added [ 1426.078659][T24664] team0: Port device team_slave_1 added [ 1426.122440][T24664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.129996][T24664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.158447][T24664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.175254][T24664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.182602][T24664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.210011][T24664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.278792][T24664] device hsr_slave_0 entered promiscuous mode [ 1426.289107][T24664] device hsr_slave_1 entered promiscuous mode [ 1426.299035][T24664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.307109][T24664] Cannot create hsr debugfs directory [ 1426.676695][T18189] Bluetooth: hci2: command 0x0409 tx timeout [ 1426.762313][T24664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.786425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.795832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.812748][T24664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.830435][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.840612][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.849896][T18189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.857248][T18189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.874529][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.888308][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.898386][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1426.907733][T18189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.915103][T18189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.934505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1426.955695][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1426.975897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1426.987113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1426.999103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1427.017155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1427.027077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1427.050022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1427.059388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1427.081417][T24664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1427.097282][T24664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1427.107938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1427.118220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1427.148782][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.156929][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.185476][T24664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.291186][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1427.301680][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1427.346091][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1427.355995][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1427.369015][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1427.379648][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1427.394018][T24664] device veth0_vlan entered promiscuous mode [ 1427.416414][T24664] device veth1_vlan entered promiscuous mode [ 1427.460808][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1427.470519][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1427.480140][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1427.490278][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1427.509245][T24664] device veth0_macvtap entered promiscuous mode [ 1427.526635][T24664] device veth1_macvtap entered promiscuous mode [ 1427.559369][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1427.570762][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.581025][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1427.591709][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.601835][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1427.612632][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.622754][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1427.633470][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.643676][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1427.654394][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.667062][T24664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.676500][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1427.687271][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1427.696798][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1427.706960][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1427.734637][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1427.745340][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.755589][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1427.766631][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.777177][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1427.790021][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.800489][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1427.811211][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.821283][T24664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1427.832218][T24664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.844499][T24664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.854209][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1427.864442][T18189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.180000][T12255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.187965][T12255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.219187][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1428.269272][T18213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.277665][T18213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.287127][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:39:01 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4003, 0x0) 10:39:01 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x541b, 0x0) 10:39:01 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000540)={@broadcast, @multicast, @void, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @rand_addr, @empty, @multicast2}}}}, 0x0) 10:39:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) 10:39:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd7, &(0x7f00000000c0)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000004c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 10:39:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x2}, 0x40) 10:39:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xbfa3f3ae9f101bfa, 0x1}, 0x40) [ 1428.750765][ T4703] Bluetooth: hci2: command 0x041b tx timeout 10:39:02 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x646f, 0x4e0d) 10:39:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0xec6f, 0x0, 0x2}, 0x40) 10:39:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)='e'}) 10:39:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x2}, 0x40) 10:39:02 executing program 2: io_setup(0x3, &(0x7f0000000680)=0x0) io_submit(r0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 10:39:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, 0x0, 0x0) 10:39:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd7, &(0x7f00000000c0)=""/215, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:02 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000540)={@broadcast, @multicast, @void, {@arp={0x4305, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @rand_addr, @empty, @multicast2}}}}, 0x0) 10:39:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f00000002c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @call, @jmp], {0x95, 0x73}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd7, &(0x7f00000000c0)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:03 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000180), 0x4) [ 1429.946573][T24928] binder: 24925:24928 ioctl c0306201 200001c0 returned -22 [ 1429.995981][T24930] binder: 24925:24930 ioctl c0306201 200001c0 returned -22 10:39:03 executing program 5: io_setup(0x3, &(0x7f0000000680)=0x0) io_destroy(r0) 10:39:03 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2142, 0x0) 10:39:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0xc0481273, 0x0) 10:39:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x127f, 0x0) 10:39:04 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x10000f}, 0x20) [ 1430.635601][T24944] binder: 24942:24944 ioctl c0306201 200001c0 returned -22 10:39:04 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) 10:39:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='e'}) 10:39:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) [ 1430.833261][ T4703] Bluetooth: hci2: command 0x040f tx timeout [ 1431.074708][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.081408][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 10:39:04 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000540)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @rand_addr, @empty, @multicast2}}}}, 0x0) 10:39:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) write$tun(r0, 0x0, 0x0) 10:39:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f0000000080)='\a'}) [ 1431.258731][T24956] binder: 24953:24956 ioctl 4018620d 0 returned -22 [ 1431.316397][T24957] binder: 24955:24957 ioctl c0306201 200001c0 returned -22 [ 1431.327277][T24956] binder: 24953:24956 ioctl 4018620d 0 returned -22 10:39:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xc6, &(0x7f0000000280)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:05 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x26) [ 1431.686426][T24965] binder: 24963:24965 ioctl 541b 0 returned -22 10:39:05 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x107001) 10:39:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1432.004717][T24971] binder: 24969:24971 ioctl c0306201 200001c0 returned -22 10:39:05 executing program 5: socket(0x22, 0x0, 0x9) 10:39:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x128, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x48}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) 10:39:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:05 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0) 10:39:05 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) [ 1432.506634][T24965] binder: 24963:24965 ioctl 541b 0 returned -22 10:39:06 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)) 10:39:06 executing program 4: clock_gettime(0x2, &(0x7f0000000000)) fork() 10:39:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 1432.923211][ T5] Bluetooth: hci2: command 0x0419 tx timeout 10:39:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0, 0x2de0}}, 0x0) 10:39:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f000000ae40), 0x10) 10:39:06 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) 10:39:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 10:39:07 executing program 4: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002b00), 0xffffffffffffffff) 10:39:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:07 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 10:39:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000001b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000000180)={0xec4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@mesh_config={0x71, 0x7}, @tim={0x5, 0x28, {0x0, 0x0, 0x0, "e2fe2ee3449e19eb2816e7895e424a0ab916a934315f0dee40b5a1ed258f4453a7ddbfc790"}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x0, "fe03c9306a4e5a9da16aecbcacf4df2c7ebda4ff5b340150cdd8e489275b70fb4c4282916a1784ffc6944d3bca1a63227ced7a7f235c735afdd981155c7c7b9d8fea71af438a44e0fe44bb2a3b1db53589ccf035544d078c24f1615d40f77e00f4e11847c1223c36ef97f6c4136fcef1529546"}}, @dsss={0x3, 0x1}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @val, @void, @void}}, @challenge={0x10, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x91, 0xfa, "9db4b18340d0e812668a603fbbe19a7504c1356b869fe44b91bd3028c84984f664a05fa7445030484564415326956916d0ec0d669f5fecc231b961ab3c964b621113ceaa3eab6421750f971a5e8ddd06d3c304e049a6632e391b41d9b91da4fa8e343505eeb13eedbf0bb7203ab90f03947a8e32e8d2c17fde77698a1563a524ade4a2e78829dd545279b7c607"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xd, 0xfc, "1d3f1ddec141883c7e"}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "28dc1a955b9b5706279b58512c502cc2b9dfdb23246d8cb5386e7a03a674a11fadd0f0f72ee5598f7264e789a730de003fc4e8ae698c0469bde3147e72f51490fff1a1c8887d8a87025d71fb13f2572b964f1e0f9135a5beded4ba7d190014bfac9d400b0416dc51de5c9495ae02f66de9b2a99b9108ae768515f4bb9a677cb7cab0e09db5305019a553a0d6ae0bec8d1c290253cccfc8b3177be4d0155837c9b016a687a11f20b7eec36ea9dabcd49fc062be52245018db629570d9781abc39ca"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, 'q'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xf1, 0xfc, "5cfd315e0fb36067f77ca9a786638c6e6d544b20c12fc406d6d55b4b4d991c96ba63fa8acbfb3a8259bd2a64fe60c946075107903632a658fd5188842e1387b8c0ad4bc8fdb085b0fc94118c251f74653e32f800bdb1ee526208cb8d515b3d9d69c3c50880074dce852db57f5970fe355cf3c49a3fbc8c29613068405fb7bb407f6cd22d24bed2b5d3c5da2350f59b3437d01886aa4331f1da685fe7459bc5255a3b7e06362592d02ce491ef075afb180732fc7bf26fe00ec9e461d6c0c2e2fbb9d8272fc7bbf9c50bcee8e7d57e6299e758893186424e022a8a7431d860f5cd44f1099baa9893bd3822fc1021"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "13445bd80b0d9583a3d11ed9e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xed, 0xfc, "5ffe1735a22e086252d31f4b7ac58559af7b4a686db714b8795add719ebff37a55da81cf21856ba2e84ad6b35bbc13cc2df878effc2fd913866eae9c306e60f7ac3113b66e40ea8b9f1a77684bb7b7f6e4d440e5ebf09763b6bd86ee09201bcf56966e9a5a7c2a054d44fe98da8d9bd278a8358b9391f84acac2da14dd56b25d2af93e93df64ecf987659239d55b4866fad120e593631c29a7f80f2aba990b4660260a83738ee63fe8c41939104222f821eff8fbc3a185bc847d50e1db22bc3b8c6d0fe1f18dee7ee50e9c7677de0be2a89472bf6e9efe34db10e3d6e4b12c80e21b8b0a915f4da07f"}, @NL80211_ATTR_FILS_ERP_RRK={0xa65, 0xfc, "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"}]]}, 0xec4}}, 0x0) 10:39:07 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:39:07 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 10:39:07 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, 0x0) 10:39:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000000180)={0xec4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@mesh_config={0x71, 0x7}, @tim={0x5, 0x28, {0x0, 0x0, 0x0, "e2fe2ee3449e19eb2816e7895e424a0ab916a934315f0dee40b5a1ed258f4453a7ddbfc790"}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x0, "fe03c9306a4e5a9da16aecbcacf4df2c7ebda4ff5b340150cdd8e489275b70fb4c4282916a1784ffc6944d3bca1a63227ced7a7f235c735afdd981155c7c7b9d8fea71af438a44e0fe44bb2a3b1db53589ccf035544d078c24f1615d40f77e00f4e11847c1223c36ef97f6c4136fcef1529546"}}, @dsss={0x3, 0x1}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @val, @void, @void}}, @challenge={0x10, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x91, 0xfa, "9db4b18340d0e812668a603fbbe19a7504c1356b869fe44b91bd3028c84984f664a05fa7445030484564415326956916d0ec0d669f5fecc231b961ab3c964b621113ceaa3eab6421750f971a5e8ddd06d3c304e049a6632e391b41d9b91da4fa8e343505eeb13eedbf0bb7203ab90f03947a8e32e8d2c17fde77698a1563a524ade4a2e78829dd545279b7c607"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xd, 0xfc, "1d3f1ddec141883c7e"}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "28dc1a955b9b5706279b58512c502cc2b9dfdb23246d8cb5386e7a03a674a11fadd0f0f72ee5598f7264e789a730de003fc4e8ae698c0469bde3147e72f51490fff1a1c8887d8a87025d71fb13f2572b964f1e0f9135a5beded4ba7d190014bfac9d400b0416dc51de5c9495ae02f66de9b2a99b9108ae768515f4bb9a677cb7cab0e09db5305019a553a0d6ae0bec8d1c290253cccfc8b3177be4d0155837c9b016a687a11f20b7eec36ea9dabcd49fc062be52245018db629570d9781abc39ca"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, 'q'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xf1, 0xfc, "5cfd315e0fb36067f77ca9a786638c6e6d544b20c12fc406d6d55b4b4d991c96ba63fa8acbfb3a8259bd2a64fe60c946075107903632a658fd5188842e1387b8c0ad4bc8fdb085b0fc94118c251f74653e32f800bdb1ee526208cb8d515b3d9d69c3c50880074dce852db57f5970fe355cf3c49a3fbc8c29613068405fb7bb407f6cd22d24bed2b5d3c5da2350f59b3437d01886aa4331f1da685fe7459bc5255a3b7e06362592d02ce491ef075afb180732fc7bf26fe00ec9e461d6c0c2e2fbb9d8272fc7bbf9c50bcee8e7d57e6299e758893186424e022a8a7431d860f5cd44f1099baa9893bd3822fc1021"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "13445bd80b0d9583a3d11ed9e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xed, 0xfc, "5ffe1735a22e086252d31f4b7ac58559af7b4a686db714b8795add719ebff37a55da81cf21856ba2e84ad6b35bbc13cc2df878effc2fd913866eae9c306e60f7ac3113b66e40ea8b9f1a77684bb7b7f6e4d440e5ebf09763b6bd86ee09201bcf56966e9a5a7c2a054d44fe98da8d9bd278a8358b9391f84acac2da14dd56b25d2af93e93df64ecf987659239d55b4866fad120e593631c29a7f80f2aba990b4660260a83738ee63fe8c41939104222f821eff8fbc3a185bc847d50e1db22bc3b8c6d0fe1f18dee7ee50e9c7677de0be2a89472bf6e9efe34db10e3d6e4b12c80e21b8b0a915f4da07f"}, @NL80211_ATTR_FILS_ERP_RRK={0xa65, 0xfc, "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"}]]}, 0xec4}}, 0x0) 10:39:07 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:08 executing program 1: socket$netlink(0x2, 0x3, 0x0) 10:39:08 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2001, 0x0) 10:39:08 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d15, &(0x7f0000000040)) 10:39:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 10:39:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) 10:39:08 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:08 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @private1}}}, 0x3a) 10:39:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d15, &(0x7f0000000040)) 10:39:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000001180)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) 10:39:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 10:39:09 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:09 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) fork() 10:39:09 executing program 5: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00'}) socket$bt_rfcomm(0x1f, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='memory.high\x00', 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) syz_genetlink_get_family_id$wireguard(&(0x7f0000002b00), 0xffffffffffffffff) 10:39:09 executing program 3: socket$netlink(0x10, 0x3, 0x1d22c4e05fdcfaf8) 10:39:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{}]}) 10:39:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f00000001c0)='GPL\x00', 0x7, 0xc6, &(0x7f0000000280)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:09 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:10 executing program 4: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0xb71eb1c3b98022dd) 10:39:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000001180)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f00000011c0), r0) 10:39:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xc6, &(0x7f0000000280)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400), 0x10}, 0x78) 10:39:10 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001180)={'wg0\x00'}) 10:39:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 10:39:10 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 10:39:10 executing program 3: bpf$MAP_CREATE(0x8, &(0x7f0000000140), 0x40) 10:39:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$inet6(0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 10:39:10 executing program 1: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:39:11 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000001180)=@proc={0x10, 0x0, 0x0, 0x4000000}, 0xc) 10:39:11 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0d02, 0x0) 10:39:11 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 10:39:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 10:39:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$inet6(0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 10:39:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={0x0}}, 0x0) 10:39:12 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x3a) 10:39:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:12 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 10:39:12 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10:39:13 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) 10:39:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="c40e0040"], 0xec4}}, 0x0) 10:39:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$inet6(0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 10:39:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2de0}}, 0x0) 10:39:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000077c0)=ANY=[], 0x2de0}}, 0x0) 10:39:13 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 10:39:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d15, 0x0) 10:39:14 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000001940)='ns/time\x00') 10:39:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000100)=@raw=[@jmp, @call], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:14 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000e00)) 10:39:14 executing program 3: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) [ 1440.965682][T25168] binder: 25165:25168 ioctl 4018620d 0 returned -22 10:39:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 10:39:14 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/mnt\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 10:39:14 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x4d0100, 0x0) 10:39:14 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1441.565531][T25180] binder: 25178:25180 ioctl 4018620d 0 returned -22 10:39:15 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 10:39:15 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 10:39:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000100)=@raw=[@jmp, @call], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, @tim={0x5, 0x28, {0x0, 0x4b, 0x0, "e2fe2ee3449e19eb2816e7895e424a0ab916a934315f0dee40b5a1ed258f4453a7ddbfc790"}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x0, "fe03c9306a4e5a9da16aecbcacf4df2c7ebda4ff5b340150cdd8e489275b70fb4c4282916a1784ffc6944d3bca1a63227ced7a7f235c735afdd981155c7c7b9d8fea71af438a44e0fe44bb2a3b1db53589ccf035544d078c24f1615d40f77e00f4e11847c1223c36ef97f6c4136fcef1529546"}}, @dsss={0x3, 0x1}, @peer_mgmt={0x75, 0x6, {0x0, 0x7fff, @val, @void, @void}}, @challenge={0x10, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x91, 0xfa, "9db4b18340d0e812668a603fbbe19a7504c1356b869fe44b91bd3028c84984f664a05fa7445030484564415326956916d0ec0d669f5fecc231b961ab3c964b621113ceaa3eab6421750f971a5e8ddd06d3c304e049a6632e391b41d9b91da4fa8e343505eeb13eedbf0bb7203ab90f03947a8e32e8d2c17fde77698a1563a524ade4a2e78829dd545279b7c607"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8bd8}, @NL80211_ATTR_FILS_ERP_RRK={0xd, 0xfc, "1d3f1ddec141883c7e"}, @NL80211_ATTR_FILS_ERP_REALM={0xc7, 0xfa, "28dc1a955b9b5706279b58512c502cc2b9dfdb23246d8cb5386e7a03a674a11fadd0f0f72ee5598f7264e789a730de003fc4e8ae698c0469bde3147e72f51490fff1a1c8887d8a87025d71fb13f2572b964f1e0f9135a5beded4ba7d190014bfac9d400b0416dc51de5c9495ae02f66de9b2a99b9108ae768515f4bb9a677cb7cab0e09db5305019a553a0d6ae0bec8d1c290253cccfc8b3177be4d0155837c9b016a687a11f20b7eec36ea9dabcd49fc062be52245018db629570d9781abc39cadf6c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, 'q'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xf1, 0xfc, "5cfd315e0fb36067f77ca9a786638c6e6d544b20c12fc406d6d55b4b4d991c96ba63fa8acbfb3a8259bd2a64fe60c946075107903632a658fd5188842e1387b8c0ad4bc8fdb085b0fc94118c251f74653e32f800bdb1ee526208cb8d515b3d9d69c3c50880074dce852db57f5970fe355cf3c49a3fbc8c29613068405fb7bb407f6cd22d24bed2b5d3c5da2350f59b3437d01886aa4331f1da685fe7459bc5255a3b7e06362592d02ce491ef075afb180732fc7bf26fe00ec9e461d6c0c2e2fbb9d8272fc7bbf9c50bcee8e7d57e6299e758893186424e022a8a7431d860f5cd44f1099baa9893bd3822fc1021"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "13445bd80b0d9583a3d11ed9e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xe1, 0xfc, "5ffe1735a22e086252d31f4b7ac58559af7b4a686db714b8795add719ebff37a55da81cf21856ba2e84ad6b35bbc13cc2df878effc2fd913866eae9c306e60f7ac3113b66e40ea8b9f1a77684bb7b7f6e4d440e5ebf09763b6bd86ee09201bcf56966e9a5a7c2a054d44fe98da8d9bd278a8358b9391f84acac2da14dd56b25d2af93e93df64ecf987659239d55b4866fad120e593631c29a7f80f2aba990b4660260a83738ee63fe8c41939104222f821eff8fbc3a185bc847d50e1db22bc3b8c6d0fe1f18dee7ee50e9c7677de0be2a89472bf6e9efe34db10e3d6e4"}, @NL80211_ATTR_FILS_ERP_RRK={0xa70, 0xfc, "d1bac73ce237400ce72652551f31e8f5340fe94f7399d2f161a450b9f85fb60f14bebd434d281a40978ef4558259f970dd08ba91082d93dcef4d4a16d9b0b320b9ee6618a4bac4229dc4624c7f4eeeb5157c602e458f19a466102dd16a4dfb142902136c71489b537bde60c7615e7d4760af533f3bb825e5828cc5de7c661df0b20555be77b5d0497f80f298b8ffd0d9717c92e5988880fd6833122fde378b3e81f6538db0b5f738eb42356a6cd48c19458524c65b1ce659e7618dc3649898bb64a8ec3754eebff011e7bf3ef8a25291ed2e58b66520fb400979430c8afc9a44294f615e5f1ba2a4e051493cb92f329d30a7f63eb684df1e41d4b04c1113c67de0b165ccde54d6a5b390b932e88fa60ed5e9c2f9395d2ab0edf6f036b7f6f1aad72fc8c276a2618eea27b01ea2e0343472aea516cd7faf5c8f99b87ec9b3325965ab4cac9ba3d82c6fac866c13ead18e4a409f4d3e0b4e4a9f45d7a7a75759fb4b981f314d1f75d9240ab056beca4b1349cb301bcec41bbb9ef5a4e52111d9c7afcd6667f7b5120256204cb858d1419fbfd48bc1615fffa6fcda3d0565e5f849c86eab6cf81ff72e9999a172278b699ef4ef373d194fd06ea036faec6151a8cdff3176bc2912da6d48f182a892bb2e0756bf24173ca132be88ec755a10704a871d80bf510030e2d555e7d0f569b4f6d9d708b44e57e78135ddb6ad91a3b3005283c30a13675e7cef49fb6ebc93713ad000543f4b0cc618f0dfc3d3db2b0a7e9f0a998a47b6bddb7a91c918ac724363008bc9bcb7405cb0fd046206bc014a74a7f3e04ca34ba98f9232734be5feabcebd64f70b9a4c1ac498babd04250bc6c4a248117c81857f173671f29bf7d88f4d8d0b34e792ca1f11d77e74c4a8b674da60d1070f7d43e905b249924a263f1a81b6cf6a5f6e958b910150a13726680cf2fa8d25ec2f7b25829d6b5e26bd54539b0dc5289df1fb12c45e3fc76a0cbf229f92a0075ba985b4a24b4d00fe5b4bde99087c5270b2744ff75cf90ecffe0fb0ace10dac7e9bcd0deab13f7a842d59e149bc04b06558d9812e4b086717ae2df4f377d02b9664034f206c781320196530cd45d8a78966304eb76451d6bed2542b2d9f78ed8c9439ccb62ad89e02cb7d7d9c6bce6250f067b1fee4f4d5d5a2a80d878d50ed271cd3e300914e4d9fbfeb33e7a44fea1e02272ac8d166e3c05cf8c429af6ec9c3e9ee23c0772974f0edb5b2d59a8c0b0bb6deaf30042d612952edc93925bcd4f75e352cadfbfe2e936689eba94c0e761ddcfdf245954c021014da7273e6621c16fa126db800aed60e4a10399a3c3a2c732b3bca7021e24205cd14ad4fe7a6e55aea1071ebe869f01d28d60b35e95dd1232a6da1704140f1e61f6c25a649d6e3ba686786514e7d46c728d0504f6cb5986ddffbccb4e68c7d80e913512a122aaf1c5e77d1b0c7e4aad93e3a9693e8660769afb3d3bdc0a373ff816a0efecc764e63b3780abb0055d37f518e8333845e9d04c9356c8b3f164ef8123cc805b9ec8eb35121498753ccc4ca3e579fe75f96043b7f035518dd47fcde4373eb866a685afd8660a41a11ccd59f53ce33952904ae14d0af07139f3bfc501bf73452df341652c173b92ac2ce450d9b9551cac5ee798b37bae629b25e05ea94b0fd929d2c5b1a68868c84780897e70fc0a82fd8de6db76315d70572bdb2fc1a11d5dce34eb7aef8ab5300e1147d3ade5c623a5a1c8d78250a21486a5d2d99d49db06b06f06d4f66137353bad38b182639eedc76b3355150f4f888a1efb56d2f35c34adc92a2c8e8047e6a1f45b23ad43daf5fef3bc7a018703b2ff08f4fb69961d92934efc2b1ef64561f0ac1a2cf4b6004177a1fe700d8027067b50e25d28e023b644030dc39d1d6201ecaba9a7b52f38684096951e68dd24f9590bbe473f8334b16b88b2c683ece24c291f06816447341315e12f1c12ed418096be88ba8f47ffbd20e1791424e9c6631eb3e3dc7ce99949f20428407b973719e1f97a3e8b6a91dde1ab215955f1bba7778fffdc4d6c898a2e1874b5d41934f5deb5bc9f4e0d4e9589ea2a256a586d64f2ee6aea0b1cce67068ef5a6e8ca8db582e433dd027a89687f72e13ebad51b81d4798f09322bf46fd7a7d0d4a4c595808a0bce4a0f298add53e92ca3064bdacf83777fdff7d69d000850905cd04b375a04d624b804f828c9605d495b2b18a5c2498e0ad778da497c3870512ec1e90d4975ffca8c23c70064ded5eda50675f54bfe5fcd54da3de51a71ad99dbc359e8a07aa473b848fa31d98afb986af5d5f8316793b9523ae8ec6337dbff4db1c128ce56504f0ea8153710da8ad75a53a3890185e3f67dd3677b38030ab1b5a78bb27a64739375004969e4d8baff6d52803fbc56be362e14055907d741eed9499b43498bf74de4038c14e030a3c85d1bee6ad612ac1fb1dc21369135c4db67206ac99768a2b36c997e51fc6a57f411ce146d29d267450d96579725c7570b94ba6947a6a7b4c8385441f51e429d59776d0d9ded01137a4f3609ac886b3ab4a2d453bc31eb6e97318105346b44e3db7fd7857b457b4cb9c2adcb1bce6b2934dbbbcd3d2c681c57a81153e109db3f45479ff92e48e6beb14cefb2a4c7c0023af2a4560e7f5af9a69058366292e39bca286c0b309aa4d5d820fc13e030dd377599f20998e74a6c8f12e8488b7fa234071e340733197a608d33c4a856aec2d90ae4da7aaa046278311f5df71dcf4b00de4ed3099d9f260e2b589448a1aa8b7dd9583a877988b804f575a158c6c4808a1872c63bd76c589278a23b479f3ad15fbfdb3a6d6ef1849b669f09dbee6772aed90050f6ddd85b4c8f304632c8540082986fb8f53e4f134c95d078283588d0e8b061966600bf3697911594ddcc1336c7432d9091f37ca2cdb2c84c84af367285501f0b31b8af205658a25e4f7c4aea3a9ab43a553afe29af19bc4d27338b414c57efa0c74f0195f72599c405c3b8a1bc13ea1d3589a844b4f8c0766a9ff8b0fca5314e7f1591e6dac9ae76f5366af373e89a73a3653560c99ddd1924dd408e268290b297cbd275553407fd21b4b3eff362c8f74140b91944eca0fac51d2584a08e116acfc698642fcd1b5d43119f6ce4ec9198bbba0843a9b66452d6222c9613e8df3e22c8e12c6157305e9dbbfea08fc7ca33fefa2dcca79120b7626879b5a8ba137ec37ef4e57b194a067503e1622464809c0361325bfeb19f79b027911effeffaeff8b1950d596ab9e5d1301ccabfc1f9fcd9bf8cb6748ba491b9be0cb6ff146f1bfb680628b28f8ee98315d4fb4dfc7089c4d91151d3c2e210b04be692ee4c58d8a78f0d556ebcb013d45cfae24ce10248f87de6c66e3f79dbb9240645fb3370f7bb129abbcf043eca12e30b23659f8994fab101008e1c5ab3ab507b5ecef3b02feee8d0822a8c3b9834e34879b2f24e5defc433fedcfd556bde2b9ff3254b02c2258a3767da81dc63af9ced27cfa32267694f11821ab02541bfd6052b271d58acd9465eee1bcab28833070f540bbddad8c71a134dbb844f78da0d5e22b79e0bd17708749e59db55c90e113b52c09d948e28d7d16d269a773124445ef24073379a29a29730775745e81b5aa31ee8482a82697179aa02df1c02aca5b096d3329835d446182f2f26b6ec30e48f5c76da5edc7afcfca18f41896ac7ea9883d45e4d7757ad346de1041924e9044c693b4e055e16e6a259fb4f24d8595d2de392ae777859a7b48e6773c447a"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}]]}, 0xec4}, 0x1, 0x0, 0x0, 0x44004}, 0x8050) 10:39:15 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000680)='./file0\x00', 0x24000000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) 10:39:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) [ 1442.333237][T25197] binder: 25196:25197 ioctl 4018620d 0 returned -22 10:39:15 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x200, 0xd0, 0x18c, 0x148, 0x1b8, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'bridge_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 10:39:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x4004001) 10:39:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:16 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:39:16 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x309140, 0x0) 10:39:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0xec4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@mesh_config={0x71, 0x7}, @tim={0x5, 0x28, {0x0, 0x0, 0x0, "e2fe2ee3449e19eb2816e7895e424a0ab916a934315f0dee40b5a1ed258f4453a7ddbfc790"}}, @measure_req={0x26, 0x76, {0x0, 0x6, 0x0, "fe03c9306a4e5a9da16aecbcacf4df2c7ebda4ff5b340150cdd8e489275b70fb4c4282916a1784ffc6944d3bca1a63227ced7a7f235c735afdd981155c7c7b9d8fea71af438a44e0fe44bb2a3b1db53589ccf035544d078c24f1615d40f77e00f4e11847c1223c36ef97f6c4136fcef1529546"}}, @dsss={0x3, 0x1}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @val, @void, @void}}, @challenge={0x10, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x91, 0xfa, "9db4b18340d0e812668a603fbbe19a7504c1356b869fe44b91bd3028c84984f664a05fa7445030484564415326956916d0ec0d669f5fecc231b961ab3c964b621113ceaa3eab6421750f971a5e8ddd06d3c304e049a6632e391b41d9b91da4fa8e343505eeb13eedbf0bb7203ab90f03947a8e32e8d2c17fde77698a1563a524ade4a2e78829dd545279b7c607"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xd, 0xfc, "1d3f1ddec141883c7e"}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "28dc1a955b9b5706279b58512c502cc2b9dfdb23246d8cb5386e7a03a674a11fadd0f0f72ee5598f7264e789a730de003fc4e8ae698c0469bde3147e72f51490fff1a1c8887d8a87025d71fb13f2572b964f1e0f9135a5beded4ba7d190014bfac9d400b0416dc51de5c9495ae02f66de9b2a99b9108ae768515f4bb9a677cb7cab0e09db5305019a553a0d6ae0bec8d1c290253cccfc8b3177be4d0155837c9b016a687a11f20b7eec36ea9dabcd49fc062be52245018db629570d9781abc39ca"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, 'q'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xf1, 0xfc, "5cfd315e0fb36067f77ca9a786638c6e6d544b20c12fc406d6d55b4b4d991c96ba63fa8acbfb3a8259bd2a64fe60c946075107903632a658fd5188842e1387b8c0ad4bc8fdb085b0fc94118c251f74653e32f800bdb1ee526208cb8d515b3d9d69c3c50880074dce852db57f5970fe355cf3c49a3fbc8c29613068405fb7bb407f6cd22d24bed2b5d3c5da2350f59b3437d01886aa4331f1da685fe7459bc5255a3b7e06362592d02ce491ef075afb180732fc7bf26fe00ec9e461d6c0c2e2fbb9d8272fc7bbf9c50bcee8e7d57e6299e758893186424e022a8a7431d860f5cd44f1099baa9893bd3822fc1021"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "13445bd80b0d9583a3d11ed9e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xed, 0xfc, "5ffe1735a22e086252d31f4b7ac58559af7b4a686db714b8795add719ebff37a55da81cf21856ba2e84ad6b35bbc13cc2df878effc2fd913866eae9c306e60f7ac3113b66e40ea8b9f1a77684bb7b7f6e4d440e5ebf09763b6bd86ee09201bcf56966e9a5a7c2a054d44fe98da8d9bd278a8358b9391f84acac2da14dd56b25d2af93e93df64ecf987659239d55b4866fad120e593631c29a7f80f2aba990b4660260a83738ee63fe8c41939104222f821eff8fbc3a185bc847d50e1db22bc3b8c6d0fe1f18dee7ee50e9c7677de0be2a89472bf6e9efe34db10e3d6e4b12c80e21b8b0a915f4da07f"}, @NL80211_ATTR_FILS_ERP_RRK={0xa65, 0xfc, "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"}]]}, 0xec4}}, 0x0) 10:39:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00'}) 10:39:16 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) 10:39:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:16 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 10:39:16 executing program 1: socket$netlink(0x11, 0x3, 0x13) 10:39:16 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) 10:39:17 executing program 2: syz_genetlink_get_family_id$wireguard(&(0x7f0000002b00), 0xffffffffffffffff) 10:39:17 executing program 4: syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc4342) 10:39:17 executing program 5: madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x2000)=nil) 10:39:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 10:39:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001cc0)={&(0x7f0000000700)=@file={0x0, './file\x00'}, 0x9, &(0x7f0000001b80)=[{&(0x7f0000000740)="2963c778d3ccdeb473aae29fdad1340e3ebba492ca8bd734c1f8403b65d4c3dfe84b936cb83a5315a9f803e8cf72542874fca0578baa61e4026131f898b0089026bcd9a0b53feede11e308d7bffebcbd58c4f6649a428ebec4b68a649f59252f447f555f13d04d53b9c5a455cff3b537a60206b57c11247bd4ff2f2409af48b7d4897451eae6106d839e8b67de214cd8a5e54a65e9e25762f7e5a055386b5763d273cd0c569b", 0xa6}, {&(0x7f0000000800)="c25d362b96c9fd22dd921c60057c20671bd36b7b37947380f1c0da02b331bfdd9184f921efbe94eaf9bc0ade94d5e94c76e787c5dd480f1096c91a367185ea5d54361a8804c700503eff1dc644b8c518aaec42c0f2be096bb8fd51b2674adbe511be4c4272231ead79d4f929389487518f1bd01e0501e4ff9c8ffe44163ba18033bdbeb06267871b83836d34fed2e68a6b7f3aece5765b37c33e126f71239aa537aad74c", 0xa4}, {&(0x7f00000008c0)="d297b02ef9912935b53c640a4e1bf8f5a1c9823e64648165", 0x18}, {&(0x7f0000000900)="963ccae49abde0fd28d55bd46852ab2acfab39", 0x13}, {&(0x7f0000000940)="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", 0x68c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:39:17 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0) 10:39:17 executing program 2: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 10:39:17 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 10:39:17 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 10:39:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:39:18 executing program 3: socket(0x0, 0x8d81ed9fc7611491, 0x0) 10:39:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)=')', 0x1}], 0x1, &(0x7f0000001c80)=[@rights], 0x10}, 0xd) 10:39:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000280)="84", 0x1) 10:39:18 executing program 4: munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) [ 1445.039084][T25257] binder: 25256:25257 ioctl c0306201 0 returned -14 10:39:18 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000001a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 10:39:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:39:18 executing program 3: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10:39:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) 10:39:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:39:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)="2963c778d3ccdeb473aae29fdad1340e3ebba492ca8bd734c1f8403b65d4c3dfe84b936cb83a5315a9f803e8cf72542874fca0578baa61e4026131f898b0089026bcd9a0b53feede11e308d7bffebcbd58c4f6649a428ebec4b68a649f59252f447f555f13d04d53b9c5a455cff3b537a60206b57c11247bd4ff2f2409af48b7d4897451eae6106d839e8b67de214cd8a5e54a65e9e25762f7e5a055386b5763d273cd0c569b", 0xa6}, {&(0x7f0000000800)="c25d362b96c9fd22dd921c60057c20671bd36b7b37947380f1c0da02b331bfdd9184f921efbe94eaf9bc0ade94d5e94c76e787c5dd480f1096c91a367185ea5d54361a8804c700503eff1dc644b8c518aaec42c0f2be096bb8fd51b2674adbe511be4c4272231ead79d4f929389487518f1bd01e0501e4ff9c8ffe44163ba18033bdbeb06267871b83836d34fed2e68a6b7f3aece5765b37c33e126f71239aa537aad74c", 0xa4}, {&(0x7f00000008c0)="d297b02ef9912935b53c640a4e1bf8f5a1c9823e64648165", 0x18}, {&(0x7f0000000900)="963ccae49abde0fd28d55bd46852ab2acfab39", 0x13}, {&(0x7f0000000940)="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", 0x60f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:39:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) [ 1445.752322][T25273] binder: 25270:25273 ioctl c0306201 0 returned -14 10:39:19 executing program 3: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 10:39:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:39:19 executing program 4: open$dir(&(0x7f0000000bc0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000540)='./file\x00', 0x0, 0x0) 10:39:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001cc0)={&(0x7f0000000700)=@file={0x0, './file\x00'}, 0x9, &(0x7f0000001b80)=[{&(0x7f0000000740)="2963c778d3ccdeb473aae29fdad1340e3ebba492ca8bd734c1f8403b65d4c3dfe84b936cb83a5315a9f803e8cf72542874fca0578baa61e4026131f898b0089026bcd9a0b53feede11e308d7bffebcbd58c4f6649a428ebec4b68a649f59252f447f555f13d04d53b9c5a455cff3b537a60206b57c11247bd4ff2f2409af48b7d4897451eae6106d839e8b67de214cd8a5e54a65e9e25762f7e5a055386b5763d273cd0c569b", 0xa6}, {&(0x7f0000000800)="c25d362b96c9fd22dd921c60057c20671bd36b7b37947380f1c0da02b331bfdd9184f921efbe94eaf9bc0ade94d5e94c76e787c5dd480f1096c91a367185ea5d54361a8804c700503eff1dc644b8c518aaec42c0f2be096bb8fd51b2674adbe511be4c4272231ead79d4f929389487518f1bd01e0501e4ff9c8ffe44163ba18033bdbeb06267871b83836d34fed2e68a6b7f3aece5765b37c33e126f71239aa537aad74c", 0xa4}, {&(0x7f00000008c0)="d297b02ef9912935b53c640a4e1bf8f5a1c9823e64648165", 0x18}, {&(0x7f0000000900)="963ccae49abde0fd28d55bd46852ab2acfab39", 0x13}, {&(0x7f0000000940)="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", 0x60f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:39:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000100)={'bridge_slave_0\x00', @ifru_mtu}) 10:39:19 executing program 5: memfd_create(&(0x7f0000000000)='$\x00', 0x4) [ 1446.376340][T25285] binder: 25283:25285 ioctl c0306201 0 returned -14 10:39:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f000000ac00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000040)="7302f6c7fa7c5a3e9e239119edd722efac2dd89de7c2427dd90246a5a2a133391821f8d8f61c05aaa516b3fefa062e7282d991d6078593b0280bdb110e9b1a9b6a3d3f26a56651f6d5380445e88e06fdbcbe61d8ba2751c516125267bd8bb49220c33cc5ec2d8c44f46d9e2e1e091123916427bcb4235cdf55e30e48b5021870bb1ed1d1b5fe4e4c213913f30c6501a97a0150f316be6ac33607bbc58ed6", 0x9e}, {&(0x7f0000000100)="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", 0x4b8}, {&(0x7f0000001100)="776dc370052c6f5a07666869431056cf3d710919ff5f7fb55758e74c2ed56ea7f81b34640fcc2333b6e7d803dd81f3febf4a6e8416d0e9546313fda46593fa5d2de8e32c90eafd1ba2261bc580aaa0b0595134b1adbd7dfbf38b7893404990b7d632b8741a0c08765634de2799e08c0a02a3b1c1fe55e42ba6738067f59ceec800b78b6d49c008a0082d8fb1ae5edb3a9c9837092ab2bafcac5d29b998ecf58a0a2252b5c91f763b5e1dcdab9b5d23e0430369357f62c0c92eb6f7677629a7683319c8dd7b8e9f2a00ffcd39f7", 0xcd}, {&(0x7f0000001200)="7450af9a86", 0x5}, {&(0x7f00000012c0)="728777553b5215528943ffcab89d282176160ccb92aa2331509ff1f0ce2dd547c094559995ae2f56f34d", 0x2a}, {&(0x7f0000001340)="cc8cf9c0080cc1fe1349943e2b1b", 0xe}], 0x6}}], 0x1, 0x0) 10:39:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:20 executing program 2: pselect6(0x40, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)={0x8001}, 0x0, 0x0) 10:39:20 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x5451, 0x0) 10:39:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x10, 0x29, 0xb, 0xffff7fb1}}], 0x10}}], 0x1, 0x0) 10:39:20 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x41}) 10:39:20 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x109102) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) 10:39:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@utf8}, {@fat=@time_offset}], [{@obj_role}]}) 10:39:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:20 executing program 4: openat$vsock(0xffffff9c, &(0x7f00000003c0), 0x119181, 0x0) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000140)=[{&(0x7f0000000080)="29f72a100fc98a4dfbe0c92774276dce6e2b9c9dceb409956ae25a2e2b76592facbfb0caf2b4a35a", 0x28, 0xd45}, {&(0x7f00000000c0)="286732a4d2b5dbe41a8e388f3179d1afc9242f9261027c9fef308d35afaf", 0x1e, 0xffff}, {&(0x7f0000000100)="9babbff0cbcfed4c14d4a8", 0xb, 0x4}], 0x0, &(0x7f0000000180)={[{':,*!-@&'}], [{@euid_gt={'euid>', 0xee01}}, {@dont_measure}]}) 10:39:21 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2286, 0x816e000) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0xffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) 10:39:21 executing program 5: openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 1447.721964][T25315] loop4: detected capacity change from 0 to 255 [ 1447.746691][T25315] romfs: Unknown parameter ':' 10:39:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b480)={0x0, 0x0, &(0x7f000000b440)={&(0x7f0000000040)=@newtaction={0xf28, 0x30, 0x0, 0x0, 0x0, {}, [{0xf14, 0x1, [@m_bpf={0xf10, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xee6, 0x6, "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"}, {0xc}, {0xc, 0x8, {0xf8fe11adcfdbffbb, 0x3}}}}]}]}, 0xf28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10:39:21 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 10:39:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b480)={0x0, 0x0, &(0x7f000000b440)={&(0x7f0000000040)=@newtaction={0xf28, 0x30, 0x0, 0x0, 0x0, {}, [{0xf14, 0x1, [@m_bpf={0xf10, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xee6, 0x6, "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"}, {0xc}, {0xc, 0x8, {0xf8fe11adcfdbffbb, 0x3}}}}]}]}, 0xf28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10:39:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b480)={0x0, 0x0, &(0x7f000000b440)={&(0x7f0000000040)=@newtaction={0xf, 0x30, 0x0, 0x0, 0x0, {}, [{0xf14, 0x1, [@m_bpf={0xf10, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xee6, 0x6, "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"}, {0xc}, {0xc, 0x8, {0xf8fe11adcfdbffbb, 0x3}}}}]}]}, 0xf28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10:39:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000440) 10:39:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 10:39:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'sit0\x00', 0x0}) 10:39:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{0x0}], 0x0, 0x0) 10:39:22 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x15, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 10:39:22 executing program 5: r0 = openat$vcs(0xffffff9c, &(0x7f0000000b00), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 10:39:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 10:39:22 executing program 3: openat$vcs(0xffffff9c, &(0x7f0000000b00), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 10:39:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000140)) 10:39:22 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:39:22 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:39:22 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:39:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 10:39:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x5, 0x0, &(0x7f0000000380)) 10:39:23 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/254, 0xfe}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x11c, 0x0, 0x0) 10:39:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x10e4}, 0x40) 10:39:23 executing program 1: mq_open(&(0x7f0000000040)='@\x00', 0x3, 0x0, 0x0) 10:39:23 executing program 5: openat$vcs(0xffffff9c, 0x0, 0x410000, 0x0) 10:39:23 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:39:23 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x8001, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 10:39:23 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000080)) 10:39:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x10, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) r5 = openat(r0, &(0x7f00000002c0)='./bus\x00', 0x2, 0x25) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a", 0xf, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67d8c079", 0xcc, 0x100, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0", 0x22, 0x0, 0x0, 0x2, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:23 executing program 1: r0 = openat$vcs(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xc0c00) 10:39:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x10}}], 0x10}}], 0x1, 0x0) 10:39:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b480)={0x0, 0x0, &(0x7f000000b440)={&(0x7f0000000040)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0xf000000, {}, [{0xeb0, 0x1, [@m_bpf={0xeac, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xe81, 0x6, "d75907eaffad611b795750a2efe21f6131a8c2c859f6662d340a24fcd53053e8c51bde10147b74eccce3a2ae7bf24ed649f26bd72925bc58bc6f4a3202a2b4ac876c03901d24efa51332bf6ecba151016989aef861543deb46a6703cf1ab7d4cdcbcf6f570e828070b9437ff9627fb5f0f37a8a21d8cf8b5c89dcf992af51d02967ba920de34e7d20376bc24e3607226db8be1ec0e128cef21154c782ad9dc06ef4d62101a574649f1c40f65e0e53685cb94579f24123bd95dbc7f625d116da28cee00578d7dcba0f280236bf891d51f3b7b26b095f5805fa4eb6144fede248d9c31fd847a714e06ce4036aedaf1128a8938091cfd2e876c700cf0dc36ec0f328ee915ca44ad9c9629bf803b94dab354f3f616322b744589623f8d4052046a1ed6eb607f6de52f241dd1c09389c47d897936f73530bb25ca3dd164c63b691e71eadd2cb4bd82de354d638929c582480b40e0d421489b3be67bb661c540069acb01c4499ef8512ddac694ce1e0b90ae4d065e228aee71cf8bc94a7e24212cc7a725a26904f718538432513270d94cd8142699bb23d512a2826d3b7b5c74993d59b9454366586e67a562b82473b16b77264e13aee7edfa64240513b4b51967358aa6572d1a4fd5c12c64ed5028734fd480f63ab913d5cd237678d6625f70faec91e5637861f888bb7fd5c90447d1fc48c721be0acbee8c9e289d16306843e777eb0f212f263727c8eb8d0a951d08d1a7c54e10524988e80461331fdde5131f5abc59aad5ee119c6beacf967a1c89b809b13d053dabbf80f8007e62cee5f602c037f0c8e2286e9337e4bea3a6a4ce9c8d9dd2b64b7ed6f5354ef6dfc47c74ecc51f6548cbd4cfaab7b43dcc5851a75f68cb73c48ca2955f7e62e4ea90a44f5f797468e46e3706635d9b6f6bf9fa166f021199907a9229b47110f37d8434138ef86081292ad847c5b7b6b42da947fec69aa7e2683da4ba9559ae4cd2f4161f2eb853e244081ecf16026fb83c134add14c744c14efa4aa7478a8aca34867a1d91516bfca05a9848bd9f26ec35fb46bfe220c81cc74f87748577dd9421412e20ad02371584cf252334d690edad7c114d796c437f66c05438730125a70d6df22f757433b44f68e0c65489f7e2578ad676e93f95387f5a6be391fb0fd531da78faad45a6e33b89b71c0e87c641b510a9d6088d4a70fae4df57f5ffa7f0af7fdc91decf1b86e881902c738b5f0d771a59572741b9167b7bf648143319f4cb0cab55127d3eb6d443f988c4849b33a47e1968cce9f3aa60199ff22b2d9a6cd432346335e1edefc644371408e9be737da649b65b9a3941564a737482ab336c15f2e94e98919c6b2b0636f5e86f20421af1ffa7ce7cbeb104cff7909ea1cbba37613476a5bbece72a53f163fbccbddbfca460c7f6a67704b7c330aaeb3f0d6168916fdffc3cda0d5f2da8f5dc2ada95b994f29998d3514bc46bbd208759dba3a16295788303139bad811029faa06612f835e14103f66b6e6e633eaee9ca01cd45b6fad0637a25f8b1e153f49f11d1d9da79ac7443746765ee077744bb3625dc711d53904ef39d6ca0201c0620e18db286cc88ae38a41d2cd9310a7930d4bf7eea5c2d78b1e39b63ec6a8c92b4ff03af6ee796635fc3bb44f37f037a81c503fd028a741c2904d9bc8d8988332910ec3e137900d1f1d2b3a43a441b2c4a56e09d38f91a367c7bff820c2a191d2b37e9ffc5669949b6640560f8ce9b95744a540ad3be405f2142e5a2203cd65aee3a1137b33177a379b6557c61bc7da5d40bc03a6031b8eec05727a02e900bf562a1f33a0baf90357aa31f424b04e83e4f8b77ad8ad0b42151ebb69553e33bd323f71218b6ec3fa93fc8c56295f82958b4846a9a99735272926ff20cc906abfb4e10b737c98b75ddf12b96ec483856d86c7da6f21b08995a777b8aeb34132aac1b4b24d259826bcdfd9273042df459900845899a1f78fcfe236c586c94b9f85e0227b71708c1d316b8461c1bbe574d1e8ec3d5348ae6e243a906a7f6ceab9c11024706b80eac617daa7474d3a06ce17e33d1019bbef00bdfa00c599b25ca718eb8a96358b79150417835917bfd03732e50442bb40c71bcacc7f51bd9a3f2575f190f7ef888ed270d4815ed45bcbf2f018889a7e569e895ad8566a51bc198d1858f927f3de0a9e81388f9987deba1048da1960e082cf5fd29c7160f4a4981f9d0ad6fcd919e8a78829d0f9dbb654b73da75eeb14979eb63e4652cafefb6875b24247160673ff93b48180a73aacff9b1963a5b7220c9386a721acb39f619f02e3303461260870ea1312ec8c64e57f133b206f7efc535eefbeed0112d20853d1d53306e5882cf01b900f48edac7d0d268e12904f5fccd03913691dd3fcdfd124bed30609dafad375b26b8116b95fd46f05748282477d6613daf7147e114f3bd73015fc0848768469e4383be3932cd2f43a16378274eb4e50a012513997ee58a96282d53f4999ca2d41b6f82390f58a66dd8241c0d8082fd09511221d17acf45f2591274c7ba5f6ab9867f380be060ddc51bdc7030b837fbe0658e877ba5a804bf2fc48a96d46fc63eb48dcc770719e4176e1b027aa050dee999c582b2bdf73ba562148626647bf18fdd9bbaa810ac332d3030e4abc099f7e8fba040aba23adaef13382e967dd0596ee515390d85fa022f7ebe7af39c303b2ff31de45e1a3192c456a9180fa6b275983bb69673c318ae95d2d89b08f1f522734c6fe69aa4ce7bceb6f2e03bbe8843e0826228c9880553eab86ad652b8b74791d2a142fca0a927f20ca36cfa7dfa422f3b42e44b0e094c4d7b46e85aa4ff6444c1b0dc2bceecc58e46c91a8f301088fcc248412f57d532a825eb02887f807ee67e22177907bbf4b86f202bd51b2de37ab4c687f572e7b0c3252a131085aa6a495a93d8d430abd16c7dc440c8e849883d589b200279a91c330f73f03fa2452b7206a9a9a51af97144317d99fa038d78ec31aeb3c86f7d263d2eebbc6c904d109e144441d66aa97db9bdc3af228c6a810a70f438bd96443e6891a94636c372cd8236fb24835607f4d3dcee8b0c9226a8becd03bb9fc365a56c39455a6189911559fd676685294a74d3ba43380347eb306b8c56e2916a9d7f120812640104f7f3b5fa4d9c1ee3793487eefe7d36dac65979bf9a68905491dcd9f8039232306cf631004c7005d14c27a07ee99e6a2aa5b96439508ba3fba154a7b74abf175c33a1be8d9f880e2c692120d98589b136b6dba49e8f8dac764dac4c019744a3ac7d6a93ecfba79ce92f5ab222e5af9a79cc49aecd18cc0ba260ef73cff5ec8f7dcd538a626c349ee703404460636789db451a47e288e3b8fec1664a694e8b1a7d0197cafe53802d98b46f7f4fa3b276cbfb07971e4c4f2136476e99952df3675a874ae699f870de669b036e2d1c401aa68ab1821002722c9d3b1e62eede682c5d7110428350b67896fe0b0781c06cbfdd7a20f2f5b71077325d77a4039feef99c3ed32c0bcc0185cb458d934b37a8e1d15d66d8ca345b2118e5a8b24568f21a6716f64d97a3f982c2e6563382111339e4a50431e796bf331e80e1f97819f290604c1905d320ea2f71776f0a9998857ea0a0142321b66910148054d98aafd841687e47ad46e08c2d559e40b8ef6e92c29deeaca5d6d047b6a5367dd6f80b40539ade110a5ea9449bf767ef353dea851c9f05c916d3a49b8c741aac653062ebe6095a2b9869f902eb74f27ad66a9423a747617b4b908548f214487795aa63b438213645612af7217fcc08b3ec5ed6f6dbb1e2c4a381b9fae98782ce12e11e5be360d2fdb72cbaa88d260e7f50e087d96cbad55d41f1361925f6bd3b3af23d2cfd0ced193536368e7a20af163468b2c17a631d494420438a98c90aad1f3d926d6b549fe09cd3efb8b1290cb885a0d17584400fd4c3505242bce868539079dd739ccafaff01994e1be97e92539c3cb11c3a7b91b7a55cb6b154cdf189781cfd9a8a7593550f71bed44c89480743d807e6b208c2f70648ae71e0bf327839bb82a0c22e941facf246d61902ccd7fcc097766af953424a5aea4c3f3c4b0fa780fc02e25040c457b65bb3c8f6953a85ebb913229de4feca27f7a67939203e7c6eaf37cf24b2f56847382132226ffb9a7a59fe2d056ae4127af702c3e0bb7b83e24a6573a8056c270fb658e2edc7c72e7649a736287a1adf400f72a64f8c58e89e6ba1576d52a05c947164b1d9653d8adda5b3f8f8138437828658c4c28e49ac625b1a1b01ae04e23c9122f033cc78db3b7dad14f60521f19f461c55ed476fa66409fed2f55052581406cbd9baf46fd450e59c5016ebedf4b9a9c54d46f537563b2aaab9784fbdc2725d3b7c995b84d5afc4df6be8dc6b2043cce0ed3131fb4daccb224dc8fe0f8faa413034c61666fb4acebb856833c60742b17af499e4c54f16b228d7b61259166b451abeb7ac55a840057ba2826464e60d1f6bc7494b6fc535c3fb7ca0e49244aab425fc177ad82eea0071d5bed158cb388feec769a045f3a6bbad980b167543bbbf92f92bcff1b86d67660478721b3fcbab43ccfc992df7916230b190541284d942fbe799ca63c37cc112e9b9e99e31e2dd6479fa50fae7ed91ded52e3d75af2fa30524cc757ba7835837ccfec651869c377ba97202df5af996600de7f3bd4eab47d442646c974f2e3e76b8a85392438f2d2cc197f52e62117de3a83e3020242b4723e5fd5d2a9f09fca50ed6c193de06fcf50486477ac1671d30340bc8783f0ffb7e09faeab69c1e214f625d9dc260e1edfe199c1aa7dfd8be6b868067345f555e9af887ed80020133eca4696eb7b5cd1c9ae7af412472a6da90f035d773d5a4e26bf510518e47cd1c76033e98ebdbf31c94e52f90b394b08bc3a069dd7e4a120fa8f093409c068b1d25a6ec4e61d02d08fecf453b7671b57049b7453dcad29b7e733961371f18b1a584cd968f1f3a7b80bb3407d746d172b391379cae51e669041086e9f5eb7541ebbee33f1350efa63267e6e048f85df1e8cbe0d16aed613cf41968713a3155a3a1cd898701d3fd5e1eee24cebc5536bbd095e30b48af27b5f4df0527d4800b08c576dbbcc368a3aa830ce574460a8cfb2418a7bddaa4d07028ec29d1ff23b63e143227392db917862b506b5169911ba61cf345b3b0f5d767acc6b80d0beef8c5750e81726d5cee081aace1eebe43bb2dabec65f327302912"}, {0xc}, {0xc, 0x8, {0xf8fe11adcfdbffbb, 0x3}}}}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10:39:24 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0xa40) 10:39:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x541d, &(0x7f0000000040)) 10:39:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x101) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, 0x0}, 0x0) userfaultfd(0x800) syz_btf_id_by_name$bpf_lsm(&(0x7f00000017c0)='bpf_lsm_d_instantiate\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000001800)=""/211) socketpair(0x0, 0x0, 0x0, &(0x7f0000001900)) syz_genetlink_get_family_id$team(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x3c, 0x0, 0x84, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 10:39:24 executing program 5: bpf$MAP_CREATE(0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:39:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0xfc5}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast2}}}], 0x20}}], 0x1, 0x0) 10:39:24 executing program 2: mq_open(&(0x7f00000000c0)='\xe5i\xe9yS\xb0\xa4\xc2\xf3\xe2\x1fP\\d\xf0\x1e\x05\xfc\x9c\xd6\xb8N=W\xf9\xd5\xc9\xba\xdf\xe2J\x0e\xdeQp\xd1\xf9m:1d\xb7>\xa8\xad\x9a\xa5;V\x01O\xb9\x99\xf3\xba\xca\x01\xb3z\xcc\xc3\x17\x00\x0f\xe3~f^\xf8\x95f\xa9 \xad\x06\xb5RT\xd2\xe4Hk\xc6\xbe\xebD\xfcz\xbd\x15\r\xeev\xa8\x8c\xbey\xd3\xa4\xa9tln\xec\x95\xfd$\xdbi5\xf7T\x9b\x8e\xd9E.\xe3 V\xd2\x85d\xbb\xe4\x94\xad', 0x0, 0x0, 0x0) 10:39:25 executing program 4: socketpair(0x11, 0x3, 0x8000, &(0x7f0000000000)) 10:39:25 executing program 3: socketpair(0x2, 0x0, 0x1913, &(0x7f0000000240)) 10:39:25 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0x6, 0x0, 0x7) 10:39:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x7800}}) 10:39:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 10:39:25 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5bd5}) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a887dbdafaf", 0x14, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67", 0xc9, 0x100, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0cf2b99618f773e343db4f4fa0ee9c049ff11de47e10b8270393e15303c6227e364d4e04e1b15137673", 0x4b, 0x8, 0x0, 0x2}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x4b4a, 0x0) 10:39:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) 10:39:26 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 10:39:26 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 10:39:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x400c744d, 0x0) 10:39:26 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) getresuid(0x0, &(0x7f0000003280), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x0, &(0x7f0000000540)) nanosleep(0x0, 0x0) 10:39:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x10, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) r5 = openat(r0, &(0x7f00000002c0)='./bus\x00', 0x2, 0x25) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a887dbdafaf", 0x14, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67d8c079", 0xcc, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0cf2b99618f773e343db4f4fa0ee9c049ff11de47e10b8270393e15303c6227e364d4e04e1b15137673", 0x4b, 0x8, 0x0, 0x2, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x4b4a, 0x0) 10:39:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x4bfa, 0x0) 10:39:27 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x13, 0x0, 0x0) 10:39:27 executing program 4: connect$caif(0xffffffffffffffff, 0x0, 0x0) 10:39:27 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) getresuid(0x0, &(0x7f0000003280), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x0, &(0x7f0000000540)) nanosleep(0x0, 0x0) 10:39:27 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0) 10:39:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x4b4a, 0x0) 10:39:27 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/i2c_i801', 0x41c101, 0x0) 10:39:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x10, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) r5 = openat(r0, &(0x7f00000002c0)='./bus\x00', 0x2, 0x25) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a887dbdafaf", 0x14, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67d8c079", 0xcc, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0cf2b99618f773e343db4f4fa0ee9c049ff11de47e10b8270393e15303c6227e364d4e04e1b15137673", 0x4b, 0x8, 0x0, 0x2, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:28 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) getresuid(0x0, &(0x7f0000003280), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x0, &(0x7f0000000540)) nanosleep(0x0, 0x0) 10:39:28 executing program 4: add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="9a", 0x1, 0xfffffffffffffffe) 10:39:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000001100010000000000fddbdf2500000000", @ANYRES32, @ANYBLOB="140800003000000008001b00fd0000"], 0x74}}, 0x10000004) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 10:39:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x3) 10:39:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x4b4a, 0x0) [ 1455.424892][T25488] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1455.503655][T25490] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 10:39:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000000)={'sit0\x00', 0x0}) 10:39:29 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) getresuid(0x0, &(0x7f0000003280), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x0, &(0x7f0000000540)) nanosleep(0x0, 0x0) 10:39:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x10, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) r5 = openat(r0, &(0x7f00000002c0)='./bus\x00', 0x2, 0x25) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a887dbdafaf", 0x14, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67d8c079", 0xcc, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0cf2b99618f773e343db4f4fa0ee9c049ff11de47e10b8270393e15303c6227e364d4e04e1b15137673", 0x4b, 0x8, 0x0, 0x2, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80), 0xb09405, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r1, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c", 0x19, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x1, 0x1d, 0x7f}, 0x10, r2}, 0x74) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000080, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@euid_lt={'euid<', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}]}}) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r1, &(0x7f0000001d00)="2d89dbe28eb02cba0010a90000000000fd00fa088bfc6f073ca182aa4fc2d2e9418f33a82a63e781d3794b1b8d7ce54a2d1f92e15ae19ef86595f01e4e4b2055fbb2dc808fa739220db0a1d044d5ba51d35cb1822c05fc04147299362ae5f7a49bbb0996cc52e4c195312fbff3b327be605c9784b3e79037af08a4c76fa9ea94d7aedcb63910f3ea5029dd4c134154f32853ca390871eaee06d93d593141c439a6d8757ad1fc0ef52ee3e193b90f43000d620f3c5630d718087209ba71449fd5325dfab4809c89e4b15d46e3d60ba3989353218eef7e3c9dff20dd53242c1025dd0e20551e1e", 0xe6) recvmmsg(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000020, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r4) 10:39:29 executing program 5: mq_open(&(0x7f0000000040)='@\x00', 0x2, 0x0, 0x0) 10:39:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) 10:39:29 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 10:39:29 executing program 3: r0 = openat$vcs(0xffffff9c, &(0x7f0000000b00), 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 10:39:30 executing program 1: r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$fuse(0xffffff9c, &(0x7f000000a880), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0)=r0) 10:39:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r0) 10:39:30 executing program 0: pipe2(&(0x7f000000c080)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f000000c080)={0xffffffffffffffff}, 0x0) r2 = dup3(r1, r0, 0x0) write$char_usb(r2, 0x0, 0xfffffffffffffd0d) 10:39:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x10, r2, 0x0) io_setup(0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_setup(0x8000, &(0x7f0000000000)=0x0) r5 = openat(r0, &(0x7f00000002c0)='./bus\x00', 0x2, 0x25) io_submit(r4, 0x3, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000, r2, &(0x7f00000001c0)="72f0ee50d0c388723464e74312cf5a887dbdafaf", 0x14, 0x829, 0x0, 0x4, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3bb, r3, &(0x7f00000003c0)="bddff5389b735116d5a4092b5a7cc58331fb798b192eaff7449732661289503be43b642f950a3f0ae4535c2e13db758bc77440197a238d190153f6830112a9d2d5b103a6379135c35bc83aa01becb4eda2f7664134b12b1a3a0f477ad88d1e62c233769c8489f7b663dc5e15db0180d1a154a8ff8b3c2d7801522b24e452191a8f449425acfc41c111dc9492d2d52fd757f42a62aa89b279ce28e719ce3103e16f9c19badc334ab45020d6d6244622dba51a67912fd5291d9b7f31ee865dcf9ebc82d8a0116b6b5c67d8c079", 0xcc, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0)="b7496d77df3b6b543f51ae49d825b4ea0384b94b6fe08e4006a8ce0b8e7357eed6b0cf2b99618f773e343db4f4fa0ee9c049ff11de47e10b8270393e15303c6227e364d4e04e1b15137673", 0x4b, 0x8, 0x0, 0x2, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0xfffffffffffff513) 10:39:30 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x10000c0) 10:39:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000400)=""/198, &(0x7f0000000500)=0xc6) 10:39:30 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8e) 10:39:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000021c0)='./file0\x00', 0x210000, 0x49) 10:39:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:39:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000120, &(0x7f0000002b40)={0x0, 0x3938700}) [ 1457.814644][ T34] audit: type=1804 audit(1626259171.244:49): pid=25537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir230390329/syzkaller.XJfdhG/714/file0" dev="sda1" ino=14166 res=1 errno=0 10:39:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$bt_hci(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)) 10:39:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002b40)={0x0, 0x3938700}) 10:39:31 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2242, 0x0) 10:39:31 executing program 2: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) 10:39:31 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff}, 0x0) dup2(r1, r0) 10:39:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 10:39:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000120, 0x0) 10:39:32 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) 10:39:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000040)) 10:39:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff}, 0x0) dup3(r2, r1, 0x0) 10:39:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) 10:39:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff}, 0x0) dup2(r1, r2) 10:39:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80) 10:39:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 10:39:33 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x10000c0) 10:39:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8942, 0x0) 10:39:33 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x41) 10:39:33 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup3(r1, r0, 0x0) 10:39:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000500)) 10:39:33 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x20440, 0x100) 10:39:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 10:39:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000100)) 10:39:34 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, 0x0}) 10:39:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003980)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x20}}, 0x0) 10:39:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x5421, 0x0) 10:39:34 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) 10:39:34 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 10:39:34 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000001c0)=0xfffffff8, 0x4) 10:39:34 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) 10:39:34 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x10) 10:39:35 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 10:39:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={0x0, 0x30}, 0x1, 0x0, 0x22bd}, 0x0) 10:39:35 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r5, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}]}, 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 10:39:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003980)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}]}, 0x18}}, 0x0) 10:39:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x541b, 0x0) 10:39:35 executing program 0: r0 = socket$can_bcm(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001400)={'vcan0\x00'}) 10:39:35 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) [ 1462.329839][ T34] audit: type=1804 audit(1626259175.754:50): pid=25633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir281961171/syzkaller.5180H4/45/cgroup.controllers" dev="sda1" ino=14229 res=1 errno=0 10:39:35 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x300}, 0x0) 10:39:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d"], 0x30}}, 0x0) 10:39:36 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 10:39:36 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x4000040) 10:39:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000001f40)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d9678"], 0x30}}, 0x0) 10:39:36 executing program 5: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) 10:39:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x4505}, 0x0) 10:39:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 10:39:36 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 10:39:36 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1}, &(0x7f00000000c0)=0x8) 10:39:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={0x0, 0x30}, 0x1, 0x0, 0x5865}, 0x0) 10:39:37 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="b95b03b77e030000009e40f086dd1fff060000003a00ffe077fbac141412e0000001c699da153f08a0e6e380f60108f683317585d747fd1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x1c) recvmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x4f8}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000380)={r4, &(0x7f0000000140), &(0x7f0000000300)=""/6}, 0x20) 10:39:37 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc01, 0x0) 10:39:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0xfffffffffffffffe) 10:39:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x33fe0}}, 0x0) 10:39:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000780)=@newchain={0x3c, 0x64, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) 10:39:37 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001f00)) 10:39:37 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0x17f, 0x4) 10:39:38 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000380)=[{}, {}], 0x10) 10:39:38 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) 10:39:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002780)={&(0x7f00000005c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000002740)=[@timestamping={{0x14}}], 0x18}, 0x0) [ 1464.806276][T25689] TCP: TCP_TX_DELAY enabled 10:39:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="87", 0x1}, {&(0x7f0000000180)="e9", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="e4", 0x1}], 0x2}}], 0x2, 0x0) 10:39:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "44db6fee53c25b8e80973a6260db603e9baa0b353c407c27bccdaab439e8"}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "513722b26ba5da37a2d61903e6a9899d44b3615e09557d9dd34a0ed34539"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 10:39:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="187f134564bb1471fe008e88"], &(0x7f0000000180)='GPL\x00', 0x5, 0xd4, &(0x7f00000001c0)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6_vti0\x00'}) 10:39:38 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x2}, &(0x7f0000000040)={0x4}, 0x0, &(0x7f0000000100)={r0}, 0x0) 10:39:38 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x10000000) 10:39:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 10:39:38 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x891b, 0x0) 10:39:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000380)=[{}], 0x8) 10:39:39 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 10:39:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x60}}], 0x1, 0x0) 10:39:39 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x300}, 0x0) 10:39:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 10:39:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 10:39:40 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 10:39:40 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x2}, 0x0, 0x0, &(0x7f0000000100)={r0}, 0x0) 10:39:40 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'bridge_slave_0\x00'}}, 0x1e) 10:39:40 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x78) 10:39:40 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 10:39:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 10:39:40 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @broadcast}, 0x10) 10:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000180)={0x6, 'bridge_slave_0\x00', {0x6cd91270}}) 10:39:41 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000043000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000080404000001007d40b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000008b28672ad3094c03000000bd007041d7332be142f7abeef17ffd831d659db5f16a2d56206374b9a087b299e6981cf9174900000000000000fd31adf7ebc88f5244715b77b0a8d05fb70600aededd0cd98308b29d00b5aae0c702cfa6f9f709000000450000000085e7fc0000000099f3e06b63a065f321aa40252b423d8d9cb56cea38bae66377bb37fc9b9704d6e658f870e4509994af464fc97f947b421163fbc313df3168a789ba5d2ed64527c2234cc45d6ffda9e64050561d81273d06003140a17cfa35ce4b3fcb9133f4b5d8a4621f0e81960cfb3c7c2861878f17f42fdba31c67eaa8a345dac00f7c01ee2c13c753ac128569929883105fe3ee44dd04090000000000080000000000000074979e9b06000000000000000e39a5147627ff2da265f994aa96ed0f0200000000000016a57d7ea36c06044e8a8ed793e7b9dce510a67f203ceb590a6f2d2b43535e89b4b8c63a9ffa1b44706dc29e658ea9f9fb9ff9c5de4671974fa9013d22b0f5b55270ddc8e3943beebbba5f49aa69c441c21d4e72ee01fd6fa5122c21ac9f2f52fd3377607ceb7a2b2d7b8fa9e8a4461bb9bb2b8dbbfd012aca04415e0fcc840b6acc8bbe22bad85584af7d04e89844b1e1779a04388573406524c759058967387d50700188af3984ec3aa17cf58d3e105b57afbcce04000000d7f605f88c720bdbfd71488a661b830b9ef4b5096d72cb9be71d231156ecb54e0a0a0a526eba88014ff9dbcdc0b3ca2d62b76c5fe9e64a174cc7572298363665bcdd1b406b732cacbdde919577a427e36cabb1a1145401033a1bab8625ebf705ae3724b0a3b538a277882477bfc4969b95a77803097a7d1c9c2dada6bfe014fbe6bb7a47d01ba2f4cd88e378a5bf24ead8000000000000000000000000efda6ecc1f31bfb8057a5e69cfa16db300b932ed06e6fcd6060033cae46ed87e76910733c591b85045982c37317dda43f0614b87200f5f4828d6ae514715e332f0d8d408491d94815e01d132f1a5f194c32ecb968ffcb4958820a402dfc7abd1399e7123bd64bdb189f9d69d0c54754b839e6ec70f6411784dc25a2eaa0400000100000040d2d5b0b200675750d224fe6592672697694b4c02219884cb6556ed78f6a80100fcf2f109157971edf63ad7abb77915f11f010000009183faf87b00d658b7517608cf2d95dbada31ab03745bdf113ad5aac500e0dad000000009fca31cbe3e50800000024e07d7fd0a12571fb15fc9d54c2760e61a300caf090910efbea134e4af4dbef746dc643a045aba437bdb4c7ee4f9839b90100000000000000aa5f4e86fe4c19ed4916a0bd39ebdc883368bd40fe39b5084c1425eb60b30158e2b1620a7086b61b6f8c1800822a20fb510ed5965adf5e879fd4ff611d09d482f1c5680469aed3903856539852b6a1b5e82684fef7e6a28fc03b1e4b9484fadb9cecbfe1dbeb5fa4d649ec20c4b85ffbfd3bee4d1532c01ef636f991e40953b5f8f4d2caeeb26135ec42e473e7a2fa283d21e8600d00000000000000004f7c9b10f97e2a3db7287834f545445a684b4ecdcaee2d2d2755e134620430d71cb5a9250462c79899c377d254763f2638133310f3de5ee598dff59c069952d0d20481f476713a90507549f8cd181825d46b12ab128f34790ade456b545dcdf12590fd78342c3eee561712c7588c73b5a167617af78efbc012aa32dee9eb887fec20cf8aa378bcda53bde20f97a6c2ac7c3bfc1dfa9632423ff75b90b66f61ab7a5a71aa00cf79dc4b0a98f201e00bc6d34fa96f89629778d87ecfef71fc1fbd46797de72b0b9eb65b2e8a21a5cb04a6c9b9e72c91b781d33e38db7592abd472e18615cb3b5bf226d29daed4dc91d441100660452790222306ba3c4e5891a5f90cf1b8fcd2a21ceb6f733e8294d2e1650a665bfe4d94cd92dc10712f3f8d75f04c4f62c0e715ab5e09bc7a4cc5b903402a9e7769150fe3af178ecc17a750f522cc2c12c8cf4b2c7ce6e4296152a5f1148c6242cade1dc400cf94e0adb8722417992dfb2a6aea367cdefa64306a356adec4ced8298aa6b8e9a0221047ee70955ab06b5ab8ce10dfdbd201f4292ab9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x1c) recvmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000140), &(0x7f0000000300)=""/6}, 0x20) 10:39:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 10:39:41 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x0) 10:39:41 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 10:39:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 10:39:41 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 10:39:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={0x0}}, 0x0) 10:39:41 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x81, 0x4) 10:39:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0xc, 0x101}, 0x14}}, 0x0) 10:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xc}, 0x0) 10:39:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000010c0)={r2}, &(0x7f0000001100)=0x8) 10:39:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 10:39:42 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000180), 0x2000018c, &(0x7f0000000240)={0x0}}, 0x20000000) 10:39:42 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='macvtap0\x00'}) 10:39:42 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:39:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x20}, 0xc) sendfile(r1, r0, 0x0, 0x800000000000c) 10:39:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601030000000000000000000000000500010007"], 0x28}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 10:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}]}, 0x18}}, 0x0) 10:39:43 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) 10:39:43 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:39:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1470.068832][ T34] audit: type=1804 audit(1626259183.494:51): pid=25793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir230390329/syzkaller.XJfdhG/730/cgroup.controllers" dev="sda1" ino=14270 res=1 errno=0 10:39:43 executing program 3: socket(0x2, 0x6, 0x2) 10:39:43 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) 10:39:43 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x10007fc, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x20) 10:39:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x3}, 0x14}}, 0x0) 10:39:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 10:39:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:39:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x7) 10:39:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000006d0001002bbd7000fedbdf250000", @ANYRES32, @ANYBLOB="29290000000001001a0024002c9f"], 0x70}}, 0x0) 10:39:44 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) 10:39:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'virt_wifi0\x00'}}, 0x1e) 10:39:44 executing program 2: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) select(0xc4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) 10:39:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={0x0, 0x30}, 0x1, 0x0, 0x81000000}, 0x0) 10:39:45 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 10:39:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000001c0)={'wg1\x00', @ifru_flags}) 10:39:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:39:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local}, 0x10) 10:39:45 executing program 2: r0 = socket$can_bcm(0x2, 0x2, 0x73) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000002580)) 10:39:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001d80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000780)=@newchain={0x1064, 0x64, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0xc14, 0x2, [@TCA_ROUTE4_POLICE={0xc10, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x1064}}, 0x0) 10:39:45 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:39:45 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:39:45 executing program 5: r0 = socket(0x1, 0x5, 0x0) connect$pppoe(r0, 0x0, 0x0) 10:39:45 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000005c0)) 10:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x12020, &(0x7f0000003c80)) 10:39:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={0x0, 0xfffffdef}}, 0x0) 10:39:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r0, 0x0, 0x0) 10:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000180)={0x6, 'bridge_slave_0\x00'}) 10:39:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d"], 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000093c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005840)=""/170, 0xaa}}, {{0x0, 0x0, &(0x7f00000060c0)=[{0x0}, {&(0x7f0000006000)=""/179, 0xb3}], 0x2}}], 0x2, 0x2042, 0x0) 10:39:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 10:39:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 10:39:46 executing program 4: socket(0x2b, 0x1, 0xfff) 10:39:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000300)) 10:39:47 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000003c0)=0x10) 10:39:47 executing program 3: socketpair(0x2, 0x801, 0x106, &(0x7f0000000000)) 10:39:47 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 10:39:47 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 10:39:47 executing program 4: r0 = socket$can_bcm(0x11, 0x2, 0x2) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 10:39:47 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) 10:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x305, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:39:47 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)='O', 0x1}, 0x0) 10:39:47 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000000900)="ab", 0x1}], 0x3}, 0x0) 10:39:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x2, 0x0) 10:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x401}, 0x14}}, 0x0) 10:39:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 10:39:48 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) 10:39:48 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000011) 10:39:48 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:39:48 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r5, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}]}, 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 10:39:48 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), 0x4) 10:39:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1ff}, 0x40) 10:39:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d9678946400", @ANYRES32, @ANYBLOB='\a'], 0x30}}, 0x0) 10:39:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000093c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2042, 0x0) 10:39:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) [ 1475.744185][ T34] audit: type=1804 audit(1626259189.174:52): pid=25918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir341601839/syzkaller.7W5pyQ/749/cgroup.controllers" dev="sda1" ino=13955 res=1 errno=0 [ 1475.950096][T25924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 10:39:49 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) 10:39:49 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x700) 10:39:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d"], 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000093c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005840)=""/170, 0xaa}}, {{0x0, 0x0, &(0x7f00000060c0)=[{0x0}, {&(0x7f0000006000)=""/179, 0xb3}], 0x2}}, {{0x0, 0x0, &(0x7f0000009280)=[{&(0x7f0000001340)=""/68, 0x44}], 0x1}}], 0x3, 0x2042, 0x0) 10:39:49 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f00000035c0)=[{&(0x7f0000000340)="6700315fdf41f47720ab689010de", 0xe}, {&(0x7f0000000000)='r', 0x1}, {&(0x7f0000001340)="1c", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 10:39:49 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu}) 10:39:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r0, 0x0, 0x40) 10:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0xc}, 0x0) 10:39:50 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 10:39:50 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000780)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 10:39:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x300}, 0x0) 10:39:50 executing program 3: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x5}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 10:39:50 executing program 2: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000380)={r3, &(0x7f0000000140), &(0x7f0000000300)=""/6}, 0x20) 10:39:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:39:50 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000780)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 10:39:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="5500000018007f5f00fe01b2a4a28093020600fefe000001080b00000a000a003500281e14000000090005407fdeafcb634803535631a1a314ba790695ec8941f1e1fe2e0f6ffcd62a77fce42180ef0050ecc427fa", 0x55}], 0x1}, 0x0) 10:39:51 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 10:39:51 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 10:39:51 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), 0x4) [ 1477.974521][T25971] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1477.983190][T25971] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:51 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="87", 0x1}], 0x1}, 0x80c0) 10:39:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:39:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:39:52 executing program 2: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 10:39:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1002000000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 10:39:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x20}, 0xc) sendfile(r1, r0, 0x0, 0x800000000000c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:39:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={0x0, 0x0, &(0x7f0000009f40)={&(0x7f0000009f00)=ANY=[@ANYBLOB="300000001d007d9678946400", @ANYRES32, @ANYBLOB="0700000a140003"], 0x30}}, 0x0) 10:39:52 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000004480)={&(0x7f0000000040), 0xc, &(0x7f0000004440)={0x0}}, 0x0) 10:39:52 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 10:39:52 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x4, 0x4) [ 1479.268483][T25996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 10:39:53 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 10:39:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x10) 10:39:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000009f80)={&(0x7f0000008b40)={0x2}, 0xc, &(0x7f0000009f40)={0x0, 0x30}}, 0x0) 10:39:53 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) 10:39:53 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x15eedf9952cc9a21) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 10:39:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic) 10:39:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 10:39:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 10:39:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000042c0)) 10:39:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) 10:39:54 executing program 0: r0 = timerfd_create(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006f80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000100), 0x0, 0x1) 10:39:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006f80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) sendmsg$unix(r2, 0x0, 0x4) 10:39:54 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006f80)={0xffffffffffffffff}) fchmod(r0, 0x2c) 10:39:54 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000ff2000/0x4000)=nil, 0x3) 10:39:54 executing program 1: prctl$PR_SET_MM(0x7, 0x0, &(0x7f0000000000/0x2000)=nil) 10:39:54 executing program 3: mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0) 10:39:54 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x103) 10:39:54 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x103) 10:39:55 executing program 5: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006f80)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 10:39:55 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe05, 0x0) 10:39:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006f80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000040)=@generic={0x0, "39a6c4d6b1f2565cd1519f8359754dd815e97e6ba5ff5f56123ecd2fdd448b5607753a1901ced7945d5740e67e49389379710a3d62f1d07da644c1aa0a702a3806c359cc33d33326a4413df3ee1d00b68226883129f454ae701d83b32bbd8e86894dc0c72cef016c15d2f77087c69fbd6eeaa35e8deabd1a4e2cc5b6e2b1"}, 0x80, 0x0}, 0x0) 10:39:55 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8001, 0xfffffffe) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 10:39:55 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x24, 0x0, &(0x7f0000000040), 0xc) 10:39:55 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x1, 0x0) 10:39:55 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$KDSETMODE(r0, 0x20004b0a, 0x0) 10:39:55 executing program 2: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 10:39:55 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 10:39:55 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 10:39:56 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 10:39:56 executing program 0: r0 = socket(0x18, 0x2, 0x0) recvfrom(r0, &(0x7f0000000100)=""/159, 0x9f, 0x0, 0x0, 0x0) 10:39:56 executing program 4: open$dir(&(0x7f0000000400)='./file0\x00', 0x5b288153c7175bfe, 0x0) open$dir(&(0x7f0000001540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 10:39:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000001c0)="fb33e16f413617c741d2cb5d6e3db9fd2e0885a6305ea888968f3e69429db3637120efd71061df591863abde07bb098cda02201093db77d64680b3210a0481115d94528cfdf09980189e354ee9c79eec9660f497a692a56a29f98a9712f4461d4ca571394f7228e26e0a3834dab2f86ccfd52142fd1ea2b266b06cf66ce9bca3a1156ff564526f8db8c60c3d0420afd35cda08f041b44286864c6e182bcf8dbcf5caa75ee5d35c5a20657f", 0xab}, {&(0x7f0000000280)="b369345546538fd81e320bc8d76980ec8b5dd3282213051684185479f7c4f44b88c690df7cf3a3a2ddc6e12c4ff561e2055ddc50bd5b8ded3667757078c2caa51aa82f50596866a2f8c9e2505ab98ff9371c1049722c37ebf99a7e462e74b22e9096052668675f5c1d3e346166f2d7f193c0ef967c99dc7ff750510fb27a58409b92d1", 0x83}, {&(0x7f0000000340)="2d7d5e2d3607638782613ea122345571d05de3443ef573aaa699f6b46e3627c4238ada098c379336e9736da11a8658806b084ad993b02f961c920c4f00a7527b69749bfaa11b516a949baee73023d756c3c112ae01b3fc5004b8d7a17535dcf0baf50515348d142014733c9c170c7b24f16ab7f718a1b1f630bbb5ac284ed9ed3f042122db23d41d0c5247bcaae13dcd9d5bb1bcc2a8ad909eb9a0dc0faf5ac71b9238abbde88330b7ea5d25d07c1e8db527ed35d2becd3980e88a0c259b0926ceaeda951c6d763b90c18a660b92f905862c5d6ff881de123836643697", 0xdd}, {&(0x7f0000000440)="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", 0xfb}, {&(0x7f0000000600)="e688dea45e6838cfeb5efec493385eb9b9f81283599310e46a804a9071295f7cb71e2dade6c297a81312ce107c82fc47c2dc1f32255bea4a81c75aef2b93d0f5fa4a103002ccc97814d3fd193fb348c48f", 0x51}, {&(0x7f0000000540)="635572a274f0a2ad984b1850b705c51879867c434a6cf20763", 0x19}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="91be91428276b51c611a7ee251a7c417424e80198ebeb1db3a265a001b28a3d7b03a38e77f29cb68aaaeadd63a0f5b3b61a9defad085c561f205a148df5b936399256f0bb1e3d8cb92987b06833e6d3b997e5e5a436fb8b01648b068b599011df61adf52cfce58786c8f2d619003f5b358f6529dae189cee6fa1cd3a44213cd880f9e79c", 0x84}, {&(0x7f0000001740)="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", 0x13d}], 0x9, &(0x7f0000002800)=[{0xd0, 0x1, 0x0, "debea2d375d54c48e05e414fb03b40883143ecd131c66c4e9e5892dd45a9fdd5378587cd73908bf0d4cd4f398c17ebba5c5ee0f723049600a84c495e0f17e4b373076efa237396ca2606f28e052b07fe48ca70b20fca68faf91191cc08e13d5dbcf9bb7f8a11a18be75172b9d1a65081bf423856097fdf9c594783cc723d306c4cca028350858806b277287c26033c4234ba4e950209fed24541edf5e4a8de347ca56f33fd360fa8674bdeb8974c5309d4b20d405dac2d4307"}, {0x98, 0x0, 0x0, "1c45efd08820936c751ce4b49b2dba4349e757f3e2cac87197e66e7ca6e7d341fb5ebc063261f842c3d59a3653065f6cbf93cbfbe02e94507a524033e9a910ad4a6d9c556b2fbffb8f8556306b444ed753d8d55c7eab9cc805179a03c44bef132eb533cb9c68898f882cbc628b2d80473245e94cc203d2b999bdf283241a16b353"}, {0x28, 0x0, 0x0, "f7ce259213310212e8b39b8ec54b586ba1"}, {0xc0, 0x0, 0x0, "f31a2b7e2cde89ab9613ccae30540b016bf73f301c5e37c35be06131fcd44a7c47e78a69b7f32f6afee77f832211c50561996912953437613ed157a920ab1eda3126c6120df97c9b0028b808e44a49fad758f3a0ff9f92e186508e30921aa59f65ba98825a8a47c68dc8b5d0f563f7ed1c0a0bccd6dd8dcf97c3d5e33b87d89986ff15c44695344026e0e8025a448c1cbb4f3b6defd75410fa98bdd31d845c26177fc81dc50239ed2b"}, {0x70, 0x0, 0x0, "4ca0fed70a6a79a1402213d069c84ed4ec397ac57e020be648992192e0c2d2fdfb2cdcf314f65b609e67e138cfa6baae5a99a732b7ec2090c8320faec3571dd444ae1fea2d1ddd35b04a8c4a9469e6ceefe38014533d46a567"}], 0x2c0}, 0x0) 10:39:56 executing program 1: socket(0x11, 0x3, 0x4) 10:39:56 executing program 3: setuid(0xffffffffffffffff) open$dir(&(0x7f0000000400)='./file0\x00', 0x5b288153c7175bfe, 0x0) 10:39:56 executing program 5: open$dir(&(0x7f0000000400)='./file0\x00', 0x5b288153c7175bfe, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 10:39:57 executing program 0: open$dir(&(0x7f0000000400)='./file0\x00', 0x102a8, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) 10:39:57 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getown(r0, 0x5) 10:39:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x1827615a008c3cce, 0x0) 10:39:57 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000780)='./file0\x00', 0x2, 0x0) fcntl$getown(r0, 0x5) 10:39:57 executing program 3: open$dir(&(0x7f0000000400)='./file0\x00', 0x102a8, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0x0) execve(0x0, 0x0, 0x0) 10:39:57 executing program 5: open$dir(&(0x7f0000000400)='./file0\x00', 0x5b288153c7175bfe, 0x5e0272490d45f74e) 10:39:57 executing program 0: r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0xffffffffffffffae}, 0x0) 10:39:57 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000001880)=ANY=[], 0x20}, 0x0) 10:39:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 10:39:57 executing program 1: open$dir(&(0x7f0000000400)='./file0\x00', 0x5b288153c7175bfe, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:39:58 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="10"], 0x20}, 0x0) 10:39:58 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 10:39:58 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x2, 0x0) 10:39:58 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:39:58 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x7fffffff) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 10:39:58 executing program 1: r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0xffffffffffffffae}, 0x0) 10:39:58 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noinode_cache,subvolid=0']) 10:39:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0) 10:39:59 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 10:39:59 executing program 1: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 10:39:59 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8001, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 10:39:59 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0xc) 10:39:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x10}], 0x1, 0x0, 0x34c1}, 0x0) 10:39:59 executing program 5: clone3(&(0x7f0000000300)={0x10010100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:39:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x10}], 0x300}, 0x0) 10:40:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x2, &(0x7f00000031c0)=[{0x0}, {0x0, 0x0, 0x40}], 0x800000, &(0x7f00000046c0)=ANY=[]) syz_mount_image$btrfs(&(0x7f0000003300), 0x0, 0x0, 0x0, &(0x7f0000004480), 0x0, &(0x7f0000004580)) 10:40:00 executing program 1: syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x201) 10:40:00 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 10:40:00 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30010000fbdbdf"], 0x130}}, 0x0) 10:40:00 executing program 5: get_mempolicy(0x0, &(0x7f0000000040), 0x401, &(0x7f0000ffe000/0x2000)=nil, 0x5) 10:40:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20c8082, &(0x7f00000010c0)) 10:40:00 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 10:40:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:40:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 10:40:01 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x48c000, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) finit_module(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) fstat(r0, 0x0) getpid() geteuid() sendmmsg$unix(r1, 0x0, 0x0, 0x800) socket$can_raw(0x1d, 0x3, 0x1) 10:40:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x0) 10:40:01 executing program 2: syz_io_uring_setup(0x7d7e, &(0x7f0000000180), &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 10:40:01 executing program 1: syz_io_uring_setup(0x7628, &(0x7f0000000200)={0x0, 0x0, 0x21}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a7e000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 10:40:01 executing program 3: prctl$PR_SET_NAME(0x29, 0x0) 10:40:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\b'], 0x3c}}, 0x0) 10:40:01 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) read(r0, 0x0, 0x0) 10:40:01 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 10:40:02 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) 10:40:02 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0xe}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x7f, 0x8, 0x1000, 0x4, 0x7, 0x7, 0x3000}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x183) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x62}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:40:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001340)) 10:40:02 executing program 0: socket(0x0, 0x7d441176de870e59, 0x0) 10:40:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x5, &(0x7f0000000000)=0x2) 10:40:02 executing program 5: clone3(&(0x7f0000000200)={0x1004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:40:02 executing program 2: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) syz_io_uring_setup(0x7541, &(0x7f00000017c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001840), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0xfcf, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 10:40:02 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x214800, &(0x7f0000001380)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@nfs}], [{@euid_lt}]}) 10:40:02 executing program 1: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 10:40:03 executing program 0: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2d08c1) 10:40:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) 10:40:03 executing program 4: fanotify_mark(0xffffffffffffffff, 0xa8, 0x0, 0xffffffffffffffff, 0x0) 10:40:03 executing program 2: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) syz_io_uring_setup(0x7541, &(0x7f00000017c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001840), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0xfcf, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 10:40:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 10:40:04 executing program 2: syz_io_uring_setup(0xe37, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 10:40:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10:40:04 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x214800, &(0x7f0000001380)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@nfs}], [{@euid_lt}]}) 10:40:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) 10:40:04 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/platform', 0x0, 0x0) 10:40:05 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 10:40:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[], [{@dont_appraise}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '[:h'}}]}) 10:40:05 executing program 4: waitid(0x0, 0x0, 0x0, 0x3129331570a564d5, 0x0) 10:40:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x30}}, 0x0) 10:40:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 10:40:05 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000340)='./file0\x00', 0x0) 10:40:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000001340)={0x0, @l2tp={0x2, 0x0, @private}, @sco={0x1f, @none}, @in={0x2, 0x0, @private}, 0x4}) 10:40:05 executing program 2: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) syz_io_uring_setup(0x7541, &(0x7f00000017c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001840), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0xfcf, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 10:40:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80001) 10:40:05 executing program 1: prctl$PR_SET_NAME(0x25, 0x0) [ 1492.513953][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.520558][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 10:40:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'vlan0\x00'}}, 0x80, 0x0}}], 0x1, 0x0) 10:40:06 executing program 5: syz_io_uring_setup(0x1f40, &(0x7f0000000780), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000800), 0x0) syz_io_uring_setup(0x42e3, &(0x7f0000002140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000021c0), &(0x7f0000002200)) 10:40:06 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode}, {@mode={'mode', 0x3d, 0x100000000}}]}) 10:40:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x200080a, &(0x7f0000000080)=ANY=[]) 10:40:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[{@utf8}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 10:40:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 10:40:06 executing program 0: creat(0x0, 0x0) getrusage(0x1, &(0x7f0000000080)) [ 1493.387970][T26286] tmpfs: Bad value for 'mode' [ 1493.430078][T26286] tmpfs: Bad value for 'mode' [ 1493.510087][T26289] FAT-fs (loop4): Unrecognized mount option "defcontext=unconfined_u" or missing value 10:40:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 10:40:07 executing program 3: clone3(&(0x7f0000002800)={0x40001100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000002740)=""/124, 0x0}, 0x58) [ 1493.767491][T26289] FAT-fs (loop4): Unrecognized mount option "defcontext=unconfined_u" or missing value 10:40:07 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4002012, r0, 0x0) 10:40:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x6, &(0x7f0000000000)=0x1000000) 10:40:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 10:40:07 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, &(0x7f0000002140)=""/234, 0xea) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 1494.267904][T26306] IPVS: ftp: loaded support on port[0] = 21 10:40:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}}, 0x0) 10:40:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:40:08 executing program 1: prctl$PR_SET_NAME(0x23, 0x0) 10:40:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}}, 0x0) [ 1494.879100][T26306] IPVS: ftp: loaded support on port[0] = 21 10:40:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000000)={'rose0\x00', @ifru_names}) 10:40:08 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000004fc0)='syz1\x00', 0x200002, 0x0) [ 1495.308464][T26364] nbd: must specify a device to reconfigure 10:40:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x0) 10:40:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 10:40:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x10}], 0x1, 0x0, 0xc134}, 0x0) 10:40:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d2", 0x1}], 0x1}, 0x40040) 10:40:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x33fe0}], 0x1}, 0x0) 10:40:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 10:40:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 10:40:09 executing program 0: prctl$PR_SET_NAME(0x16, 0x0) 10:40:10 executing program 1: prctl$PR_SET_NAME(0x15, 0x0) 10:40:10 executing program 5: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x200000, 0x40}, 0x18) 10:40:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @hci, @tipc}) 10:40:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 10:40:10 executing program 0: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x13, r0, 0x10000000) 10:40:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "cbe8fae0dc4af0e1850847576a115867c243d150407a30ac41b5b4440c5096f06f491b4a116ed7f4cebc38afc405b42b05361c3cc1d1af585340b55d5c1c5880"}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f00000004c0)='fscrypt:') 10:40:10 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r1, 0x0) 10:40:10 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000002200)=[{r0}], 0x1, 0x0) 10:40:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x9) preadv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000002e40)=""/153, 0x99}, {&(0x7f0000003400)=""/156, 0x9c}, {&(0x7f0000000300)=""/41, 0x29}, {0x0}], 0x7, 0x7f, 0x2) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000001cc0)=""/4096, 0x1000}, 0xfffffff8}, {{&(0x7f0000002cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d40)=""/200, 0xc8}, {&(0x7f0000002f00)=""/200, 0xc8}, {&(0x7f0000003000)=""/108, 0x6c}], 0x3, &(0x7f0000003200)=""/190, 0xbe}, 0xb4b8}, {{&(0x7f0000003100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004780)=[{&(0x7f00000032c0)=""/192, 0xc0}, {&(0x7f0000004500)=""/227, 0xe3}, {&(0x7f0000003380)=""/119, 0x77}, {&(0x7f0000004600)=""/142, 0x8e}], 0x4}, 0xcabb}, {{&(0x7f0000004800)=@ax25={{0x3, @null}, [@netrom, @null, @bcast, @null, @default, @remote, @rose, @null]}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004880)=""/31, 0x1f}, {&(0x7f00000048c0)=""/226, 0xe2}, {&(0x7f0000004a40)=""/142, 0x8e}, {&(0x7f0000004b80)=""/159, 0x9f}, {&(0x7f0000004c40)=""/30, 0x1e}, {&(0x7f0000004c80)=""/105, 0x69}], 0x6, &(0x7f0000004d80)=""/163, 0xa3}, 0x1}, {{&(0x7f0000004e40)=@isdn, 0x80, &(0x7f00000050c0)=[{0x0}, {&(0x7f0000004fc0)=""/68, 0x44}, {&(0x7f0000005040)=""/82, 0x52}], 0x3}, 0xffff}, {{&(0x7f0000005100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000005240)=""/200, 0xc8}, {&(0x7f0000005340)=""/116, 0x74}, {0x0}, {&(0x7f00000054c0)=""/200, 0xc8}, {0x0}], 0x5}}], 0x6, 0x0, &(0x7f00000069c0)) 10:40:11 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x51, 0x2, 0xffffffffffffffff, 0x0) 10:40:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @vsock, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) 10:40:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, &(0x7f00000003c0)=@can={0x1d, 0x0}, &(0x7f0000000440)=0x80) bind$packet(r1, &(0x7f0000000480)={0x11, 0x0, r2}, 0x14) 10:40:11 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0xacb, 0x2, &(0x7f0000000440)=[{&(0x7f0000000200)="78299ad83a4636696e1903f34c646d1a909c4600c1d67e93dca2153634a80d4b83dde7ce0fc8b1e91b5eb07018a5062f1ddec2fff7b80a083c6e838fe65ed33f", 0x40, 0xe01f}, {0x0, 0x0, 0x5}], 0x200000, &(0x7f00000004c0)={[{@notreelog}, {@acl}, {@check_int_data}, {@fragment_metadata}, {@datasum}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0xfffffffffffffffc}}, {@fragment_data}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nodatasum}, {@notreelog}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@dont_appraise}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '\'%'}}]}) 10:40:11 executing program 5: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) syz_io_uring_setup(0x7541, &(0x7f00000017c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001840)=0x0, &(0x7f0000001880)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC, 0x0) 10:40:12 executing program 2: syz_io_uring_setup(0x2a08, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3bd}, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:40:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:40:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002ac0), 0xffffffffffffffff) 10:40:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea5}}, 0x0) 10:40:12 executing program 4: syz_io_uring_setup(0x2a08, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 10:40:12 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x8c300, 0x0) 10:40:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000001140), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:40:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000000900000c000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000040000d7f4655fd8f4655fd8f4655f0000000000000400200008a6116cd6", 0x23, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)=ANY=[]) mount(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 10:40:13 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000500)) 10:40:13 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x3c, 0x0, 0x400, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) socketpair(0xb, 0x80000, 0x8, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000dc0)={r2, 0x101, 0x6, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000015c0)={{r0}, 0x0, 0xe, @inherit={0x50, &(0x7f0000001540)={0x0, 0x1, 0x401, 0xffffffffffff7fff, {0x68, 0x7, 0x200, 0x2, 0x8}, [0x5]}}, @name="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"}) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000025c0)=0x2, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x100010, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002600)={0x0, 0xfffffffffffffffe, 0x3, 0x1}) socket(0x1d, 0x5, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000002ac0), r0) 10:40:13 executing program 4: openat2(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0xa}, 0x62) 10:40:13 executing program 5: r0 = io_uring_setup(0xc82, &(0x7f0000000b40)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xc0051, r0, 0x10000000) 10:40:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmmsg$sock(r1, &(0x7f0000001580)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10:40:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mount$overlay(0x400000, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 10:40:13 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x801fffd) 10:40:13 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 10:40:14 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006c00)={0x77359400}) 10:40:14 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 10:40:14 executing program 2: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000200)='x', 0x1, 0xe01f}], 0x0, 0x0) 10:40:14 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') 10:40:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/155, 0x9b}}], 0x1, 0x40012000, &(0x7f0000002580)={0x0, 0x989680}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 10:40:14 executing program 0: syz_io_uring_setup(0x3bb, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000e28000/0x1000)=nil, &(0x7f000074c000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 10:40:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 10:40:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:40:15 executing program 2: syz_io_uring_setup(0x2a08, &(0x7f0000000000), &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x999, &(0x7f0000000540)={0x0, 0xe069}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), 0x0) 10:40:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}}, 0x0) 10:40:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, 0xfffffffffffffffe) 10:40:15 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x80000002) 10:40:15 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}], [{@seclabel}]}) 10:40:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) [ 1502.488092][T26525] nbd: must specify a device to reconfigure 10:40:16 executing program 2: clock_gettime(0x3, &(0x7f0000000500)) [ 1502.693608][T26533] tmpfs: Unknown parameter 'seclabel' [ 1502.717695][T26533] tmpfs: Unknown parameter 'seclabel' 10:40:16 executing program 1: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$vcsa(0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 10:40:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmmsg$sock(r1, &(0x7f0000001580)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{&(0x7f0000000140)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0xc, 0x0, 0x2}}], 0x2, 0x0) 10:40:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 10:40:16 executing program 5: prctl$PR_SET_NAME(0x39, 0x0) 10:40:16 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/134, 0x86) 10:40:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="726f8769722c696f636861727365743d63703737352c726f6469722c73686f72746e616d653d6c6f7765722c6f626a5f747970653d2d5b2c6673636f6e746578743d757365725f752c646f6e745f6d6561737572652c6673636f6e746578743d73746166665f752c7065726d69745f646972656313a65f5e7483f22c736d61636b6673666c6f6f723d2b402c736d61636b6673646566"]) 10:40:16 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x500, 0x0) 10:40:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) 10:40:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 10:40:17 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) 10:40:17 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) getpid() 10:40:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000001340), &(0x7f0000001380)='./file1\x00', 0x0, 0x0, 0x0, 0xce2876acd9e39ad4, &(0x7f0000001580)=ANY=[]) 10:40:17 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x28d25e8d7c33c6eb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 10:40:17 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 10:40:17 executing program 5: bind$alg(0xffffffffffffffff, 0x0, 0x0) 10:40:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 10:40:18 executing program 3: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 10:40:18 executing program 2: clone3(&(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[0x0], 0x1}, 0x58) fork() 10:40:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 10:40:18 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000001800)='\xc4:\x00') 10:40:18 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0xfffffffffffffe8e) 10:40:18 executing program 0: syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)) 10:40:18 executing program 3: syz_io_uring_setup(0xe799, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 10:40:19 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000980)) 10:40:19 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x500, 0x0) 10:40:19 executing program 5: prctl$PR_SET_NAME(0x2a, 0x0) 10:40:19 executing program 3: prctl$PR_SET_NAME(0x22, 0x0) 10:40:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000d24000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000cd6000/0x2000)=nil, &(0x7f0000c31000/0x3000)=nil, &(0x7f0000e32000/0x3000)=nil, &(0x7f0000e65000/0x1000)=nil, &(0x7f0000f81000/0x1000)=nil, &(0x7f0000e0a000/0x3000)=nil, &(0x7f0000e34000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000db0000/0x4000)=nil, 0x0}, 0x68) 10:40:19 executing program 2: clock_gettime(0xa0b396229c5894f1, 0x0) 10:40:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1004, &(0x7f0000000180)=ANY=[]) 10:40:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000001140), 0xffff, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) 10:40:20 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/r8152', 0x21c102, 0x0) 10:40:20 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_io_uring_setup(0xe37, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 10:40:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r0) 10:40:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 10:40:20 executing program 5: syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x88302) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) 10:40:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x4) 10:40:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000140), 0x4) 10:40:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 10:40:21 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 10:40:21 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 10:40:21 executing program 5: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)='x', 0x1, 0xe01f}, {&(0x7f0000000280)="ee7c5c00fd4d61eeab9a9f9e5e05f24c4b0edb74cbf4fcde556c81a08845c3c099104e1275a38923f3092769ee86b2212eedc5612bc7cde2d5f5a3aa5d192e27f201b5fb6237fc935ad19d06af3c168d628d7b1c53951885b09f5ef4dd95", 0x5e, 0x5}, {0x0}], 0x200000, &(0x7f00000004c0)={[{@notreelog}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0xfffffffffffffffc}}, {@fragment_data}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nodatasum}, {@notreelog}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@hash}, {@dont_measure}]}) 10:40:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}}, 0x0) 10:40:21 executing program 4: epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0) 10:40:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, &(0x7f00000031c0), 0x800000, &(0x7f00000046c0)=ANY=[]) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000004480)=[{&(0x7f0000003380)="dd", 0x1}], 0x0, 0x0) 10:40:21 executing program 2: clone3(&(0x7f0000002800)={0x40001100, &(0x7f0000002580), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:40:22 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "0ef923e1ff0234a8d6c2514f1eb0757e62c27eba657f1aed7a3824ee47838efebcf4f714506194863a8b2d433dc4cfc14fccb7759a927ac302be4608330d855e"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) [ 1508.607435][T26645] loop5: detected capacity change from 0 to 224 10:40:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x0) 10:40:22 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x141101, 0x0) write$char_usb(r0, &(0x7f0000000000)=',', 0x1) [ 1508.963172][T26655] IPVS: ftp: loaded support on port[0] = 21 10:40:22 executing program 4: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000980)) 10:40:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) [ 1509.250055][T26680] IPVS: ftp: loaded support on port[0] = 21 10:40:22 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 10:40:23 executing program 2: syz_io_uring_setup(0x3bb, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000e28000/0x1000)=nil, &(0x7f000074c000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) getpid() 10:40:23 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x0) openat$cgroup(r0, &(0x7f0000004fc0)='syz1\x00', 0x200002, 0x0) 10:40:23 executing program 5: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x800) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000008e00)={0x77359400}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 10:40:23 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x25a69558bdeb9458}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 10:40:23 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_mtu}) 10:40:23 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:40:23 executing program 2: openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x458082, 0x0, 0x10}, 0x18) 10:40:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f00000031c0)=[{0x0}], 0x0, &(0x7f00000046c0)=ANY=[]) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000004480), 0x0, 0x0) 10:40:24 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 10:40:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={0x0}}, 0x0) 10:40:24 executing program 2: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = gettid() sched_rr_get_interval(r0, &(0x7f00000000c0)) 10:40:24 executing program 1: clone3(&(0x7f00000002c0)={0x100040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:40:24 executing program 5: memfd_create(&(0x7f000000a240)='/dev/vcsa\x00', 0x0) 10:40:25 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cryptomgr', 0x501, 0x0) 10:40:25 executing program 2: r0 = syz_io_uring_setup(0x3b3d, &(0x7f00000016c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 10:40:25 executing program 5: syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x80000) 10:40:26 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='setgroups\x00') clone3(&(0x7f0000000200)={0x214100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, {r0}}, 0x58) 10:40:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x214800, &(0x7f0000001380)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}) 10:40:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8901, 0xfffffffffffffffe) 10:40:26 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000003e80), 0xa40, 0x0) 10:40:26 executing program 2: clone3(&(0x7f0000001700)={0x70020400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0xf000}, 0x0) 10:40:26 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1513.160297][T26772] IPVS: ftp: loaded support on port[0] = 21 10:40:26 executing program 1: syz_open_dev$loop(&(0x7f0000000200), 0x0, 0xa0000) 10:40:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 10:40:26 executing program 3: poll(0x0, 0x0, 0xfffffbff) [ 1513.671593][T26772] IPVS: ftp: loaded support on port[0] = 21 10:40:27 executing program 5: openat$random(0xffffffffffffff9c, 0x0, 0x8c300, 0x0) 10:40:27 executing program 0: syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x40) 10:40:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'syz_tun\x00', @ifru_flags}) 10:40:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x10}], 0x1, 0x0, 0x9effffff}, 0x0) 10:40:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 10:40:28 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "0ef923e1ff0234a8d6c2514f1eb0757e62c27eba657f1aed7a3824ee47838efebcf4f714506194863a8b2d433dc4cfc14fccb7759a927ac302be4608330d855e"}, 0x48, 0xfffffffffffffffc) 10:40:28 executing program 0: rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000540)={0x0, 0x0, 0x3ff}) 10:40:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) 10:40:28 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40b80) 10:40:28 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 10:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 10:40:28 executing program 2: syz_io_uring_setup(0xfcf, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 10:40:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "cbe8fae0dc4af0e1850847576a115867c243d150407a30ac41b5b4440c5096f06f491b4a116ed7f4cebc38afc405b42b05361c3cc1d1af585340b55d5c1c5880"}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)='fscrypt:') 10:40:29 executing program 3: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x9307c45fb5c1b488) 10:40:29 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 10:40:29 executing program 4: keyctl$search(0xa, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0) 10:40:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)={0x10, 0x7e, 0x1}, 0x10}], 0x1}, 0x0) 10:40:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}}, 0x0) 10:40:29 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 10:40:29 executing program 3: r0 = fanotify_init(0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 10:40:30 executing program 4: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 10:40:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x940, 0x0) 10:40:30 executing program 5: prctl$PR_SET_NAME(0x18, 0x0) 10:40:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000004480)={&(0x7f00000041c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x0) 10:40:30 executing program 2: syz_io_uring_setup(0x1ad6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 10:40:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0), 0xffffffffffffffff) 10:40:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffdfa}}, 0x0) 10:40:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:40:30 executing program 5: getrusage(0x1, &(0x7f00000002c0)) 10:40:31 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000c00), 0x0, 0x2) 10:40:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r1, 0xee00) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x5, 0x6, 0x6, 0x6}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x40, 0x3ff, 0x252, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') dup2(r2, r3) 10:40:31 executing program 3: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[], [{@subj_role={'subj_role', 0x3d, '\'%'}}]}) 10:40:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'caif0\x00', @ifru_map}) 10:40:31 executing program 5: syz_io_uring_setup(0x2a08, &(0x7f0000000000), &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x999, &(0x7f0000000540), &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) 10:40:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:40:31 executing program 0: socket$netlink(0x10, 0x3, 0x21) 10:40:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x500}, 0x0) 10:40:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x10}, 0x20000110}], 0x1}, 0x0) 10:40:32 executing program 3: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x2}) [ 1518.915868][T26924] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 10:40:32 executing program 1: syz_io_uring_setup(0x5a39, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000800)) [ 1518.997993][T26928] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 10:40:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 10:40:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@dont_appraise}]}) [ 1519.622633][T26943] tmpfs: Unknown parameter 'dont_appraise' [ 1519.645642][T26943] tmpfs: Unknown parameter 'dont_appraise' 10:40:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:40:33 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x141101, 0x0) write$char_usb(r0, &(0x7f0000000000)="2c9efcaf89edfa96f0fce5b7b9017cc3fc8b5f78cf70e88a45f1cf2a0604932c585665bd3c07a2ddaa634dff18a2567a098ff2b46463fd78d35a07fddbaba683d6d4a2713d23f529ce2185ad576871564ce054f49fda3f5787790c2b06e8d479ab90a63c15813fe68178a025d6000000001f00", 0x73) 10:40:33 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) 10:40:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="a4030000", @ANYRES16, @ANYBLOB="01"], 0x3a4}}, 0x0) 10:40:33 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x8000, &(0x7f00000002c0)) 10:40:33 executing program 5: fork() waitid(0x0, 0x0, 0x0, 0x80000003, 0x0) 10:40:33 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0x76) 10:40:34 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf9c1, 0x70) 10:40:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000200)='./file1\x00', 0x10, 0x103) 10:40:34 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) 10:40:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/166, 0xa6) 10:40:34 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) [ 1520.963535][ T34] audit: type=1800 audit(1626259234.394:53): pid=26968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14811 res=0 errno=0 [ 1521.135523][ T34] audit: type=1800 audit(1626259234.434:54): pid=26968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14811 res=0 errno=0 [ 1521.157652][ T34] audit: type=1800 audit(1626259234.464:55): pid=26971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14823 res=0 errno=0 [ 1521.180849][ T34] audit: type=1800 audit(1626259234.524:56): pid=26971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14823 res=0 errno=0 10:40:34 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4c02, 0x0) 10:40:34 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) 10:40:34 executing program 4: creat(&(0x7f0000002e00)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x40, &(0x7f0000000140)) 10:40:34 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) [ 1521.567022][ T34] audit: type=1800 audit(1626259234.964:57): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".log" dev="sda1" ino=14814 res=0 errno=0 [ 1521.589971][ T34] audit: type=1800 audit(1626259234.974:58): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".log" dev="sda1" ino=14814 res=0 errno=0 10:40:35 executing program 5: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 10:40:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfdc1, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 1521.918236][ T34] audit: type=1800 audit(1626259235.284:59): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=14812 res=0 errno=0 10:40:35 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0x0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) [ 1522.075739][ T34] audit: type=1800 audit(1626259235.374:60): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=14812 res=0 errno=0 [ 1522.099933][ T34] audit: type=1800 audit(1626259235.414:61): pid=26990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14809 res=0 errno=0 [ 1522.121969][ T34] audit: type=1800 audit(1626259235.434:62): pid=26990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14809 res=0 errno=0 10:40:35 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) write$P9_RVERSION(r0, 0x0, 0x31) 10:40:35 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x8c) 10:40:35 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101840, 0x100) 10:40:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0xfffffffffffffe3d) 10:40:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 10:40:36 executing program 3: pipe2$9p(&(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$cgroup_freezer_state(r2, 0x0, 0x0) 10:40:36 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) write$cgroup_subtree(r0, &(0x7f0000002b00), 0x0) 10:40:36 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) 10:40:36 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e1140, 0x111) 10:40:36 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x26b42, 0x0) 10:40:36 executing program 5: semget$private(0x0, 0x4, 0x1cf) 10:40:36 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x44342, 0x0) 10:40:37 executing program 4: creat(&(0x7f0000002e00)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x84000042) 10:40:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5143, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 10:40:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) 10:40:37 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x8040, 0xc4) 10:40:37 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 10:40:37 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) writev(r0, 0x0, 0x0) 10:40:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 10:40:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4b9c1, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 10:40:37 executing program 1: r0 = epoll_create(0x200) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 10:40:38 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x8040, 0x171) 10:40:38 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 10:40:38 executing program 3: creat(&(0x7f0000002e00)='./file0\x00', 0x0) open$dir(&(0x7f0000000880)='./file0\x00', 0x100, 0x40) 10:40:38 executing program 4: r0 = epoll_create(0x8008003) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xa5) 10:40:38 executing program 1: r0 = semget(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000080)=""/22) 10:40:38 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) 10:40:38 executing program 2: creat(&(0x7f0000002e00)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10080, 0x0) 10:40:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 10:40:38 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getpgid(r1) 10:40:39 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2246, 0x144) 10:40:39 executing program 1: r0 = epoll_create(0xff) fcntl$getownex(r0, 0x10, 0x0) 10:40:39 executing program 0: creat(&(0x7f0000002e00)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x43) 10:40:39 executing program 2: semget$private(0x0, 0x4, 0x28) 10:40:39 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) writev(r0, &(0x7f0000000400), 0x0) 10:40:39 executing program 5: r0 = creat(&(0x7f0000002e00)='./file0\x00', 0x0) write$P9_RCREATE(r0, 0x0, 0x1047197ad2f89208) 10:40:40 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0xc) [ 1526.502209][ T34] kauditd_printk_skb: 13 callbacks suppressed [ 1526.502272][ T34] audit: type=1804 audit(1626259239.924:76): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir792605123/syzkaller.cngubR/910/file0" dev="sda1" ino=14822 res=1 errno=0 10:40:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) 10:40:40 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x13) [ 1526.948867][ T34] audit: type=1800 audit(1626259240.374:77): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14826 res=0 errno=0 10:40:40 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RWSTAT(r1, 0x0, 0x0) 10:40:40 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) [ 1527.077438][ T34] audit: type=1800 audit(1626259240.434:78): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14826 res=0 errno=0 10:40:40 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 10:40:40 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[], 0x2a) 10:40:40 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0x181) 10:40:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf9c1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8201, 0x8d) 10:40:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa59c3, 0x0) 10:40:41 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6342, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 1527.768236][ T34] audit: type=1800 audit(1626259241.194:79): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14860 res=0 errno=0 [ 1527.790095][ T34] audit: type=1800 audit(1626259241.214:80): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14860 res=0 errno=0 10:40:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a0102"], 0x20}}, 0x0) 10:40:41 executing program 4: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) fork() [ 1528.024504][ T34] audit: type=1800 audit(1626259241.424:81): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14851 res=0 errno=0 [ 1528.049044][ T34] audit: type=1800 audit(1626259241.434:82): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14851 res=0 errno=0 10:40:41 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000018c0), 0x18002, 0x0) 10:40:41 executing program 0: creat(&(0x7f0000002e00)='./file0\x00', 0x0) getgroups(0x1, &(0x7f0000000040)=[0xee00]) chown(&(0x7f0000000000)='./file0\x00', 0xee01, r0) [ 1528.323691][ T34] audit: type=1800 audit(1626259241.734:83): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14806 res=0 errno=0 [ 1528.496032][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1528.552384][ T34] audit: type=1800 audit(1626259241.834:84): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14850 res=0 errno=0 [ 1528.574657][ T34] audit: type=1800 audit(1626259241.854:85): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14806 res=0 errno=0 10:40:42 executing program 3: creat(&(0x7f0000002e00)='./file0\x00', 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x4000, 0x100) 10:40:42 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24342, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 10:40:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}], 0x1, 0x0) 10:40:42 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001380), 0x20001, 0x0) 10:40:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc3931d5"}, 0x0, 0x0, @planes=0x0}) 10:40:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x38}}, 0x0) 10:40:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x2, @sdr={0x50323234}}) 10:40:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000380)=0x1) 10:40:43 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) 10:40:43 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/98) 10:40:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x90) 10:40:43 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:40:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="e6", 0x1}], 0x1}}], 0x1, 0x60cd880) 10:40:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000680)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a559c3a1"}, 0x0, 0x0, @fd}) 10:40:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000880), 0x10) 10:40:44 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a559c3a1"}, 0x0, 0x0, @fd}) 10:40:44 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) 10:40:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 10:40:44 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ad648046"}, 0x0, 0x0, @userptr}) 10:40:44 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001680)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 10:40:45 executing program 2: socketpair(0x1d, 0x0, 0x2, &(0x7f0000001dc0)) 10:40:45 executing program 3: fork() syz_open_procfs$namespace(0x0, 0x0) 10:40:45 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000440), 0x4) 10:40:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) 10:40:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000002e00)) 10:40:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 10:40:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 10:40:47 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) 10:40:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 10:40:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:47 executing program 5: mkdir(&(0x7f00000007c0)='./file0\x00', 0xc8) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) 10:40:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:47 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f0000001dc0)) [ 1534.570797][T27207] can: request_module (can-proto-0) failed. [ 1534.635359][T27207] can: request_module (can-proto-0) failed. 10:40:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readahead(r0, 0x0, 0x0) 10:40:48 executing program 5: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14) 10:40:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:49 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000380)={r3, &(0x7f0000000140), &(0x7f0000000300)=""/6}, 0x20) 10:40:51 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f00000017c0)={[{@umask}, {@creator={'creator', 0x3d, "ba8e5444"}}, {}]}) 10:40:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:51 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x4}) socketpair(0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001380), 0x20001, 0x0) 10:40:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000004940)={&(0x7f0000008f00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401}], {0x14}}, 0x50}}, 0x0) 10:40:51 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xc000, 0x0) 10:40:51 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x735f, &(0x7f00000004c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6e6f6e752d7402ce5663c1a20a"]) 10:40:51 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "fe46c0e4de518a0f3158652698a218a3a2be6bfaa2c1b8b1a25f9f0b54b96ad8dcd8888dfcfaa27088d3ddfc831fe81cf6a5c2c1ff92dee6996d50e59d6e06ea"}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) 10:40:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:51 executing program 0: madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb) 10:40:52 executing program 4: r0 = socket(0xa, 0x3, 0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10:40:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) fork() getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) 10:40:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:53 executing program 2: io_setup(0x6c, &(0x7f0000000000)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000300)="ee2fe2f328489e83d2b371d0751903ba", 0x10}]) 10:40:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) 10:40:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 10:40:53 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 10:40:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{0x25}]}) 10:40:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) 10:40:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000000000005d12b6703b", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}]}}]}, 0x170}}, 0x0) 10:40:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x1, 0x9, 0x801}, 0x14}}, 0x0) 10:40:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnetconf={0x14, 0x52, 0xb2d}, 0x14}}, 0x0) [ 1540.913494][T27302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:40:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 10:40:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:40:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60"], 0x0) [ 1541.078393][T27307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:40:54 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:54 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000040), 0x0) 10:40:54 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)="b0", 0x1, 0xffffffffffffffff) 10:40:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x648, 0x208, 0x328, 0xffffffff, 0x208, 0x328, 0x578, 0x578, 0xffffffff, 0x578, 0x578, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'ip6gretap0\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@remote, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv6=@remote, @icmp_id, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'vxcan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {'QU'}}, @common=@mh={{0x28}, {')S'}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ceef"}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @local, @remote, @private1, @dev, @local, @remote, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private0, @mcast1, @loopback]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 10:40:55 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 10:40:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 10:40:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 10:40:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private1, [], [], 'ipvlan1\x00', 'lo\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 10:40:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:56 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x8a0, 0x0, 0x248, 0x458, 0x0, 0x0, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'veth1_to_bridge\x00', 'macvlan1\x00'}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@private}, {@ipv4=@multicast2, [], @ipv4=@empty}, {@ipv4=@local, [], @ipv4=@multicast1}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], @ipv6=@empty}]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@dev}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@empty}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@private0}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'wlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x900) 10:40:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x760, 0x468, 0x210, 0xffffffff, 0x210, 0x210, 0x690, 0x690, 0xffffffff, 0x690, 0x690, 0x5, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'netpci0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xf, @ipv6=@private0, @ipv6=@private1, @port, @gre_key}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4, @gre_key, @icmp_id}}}, {{@ipv6={@loopback, @private1, [], [], 'vcan0\x00', 'netdevsim0\x00'}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@srh={{0x30}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private0, @dev, @loopback, @remote, @private2, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private1, @loopback, @private2]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4, @icmp_id}}}, {{@ipv6={@dev, @private1, [], [], 'veth0_virt_wifi\x00', 'veth1_vlan\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@loopback, @loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @local, @remote, @loopback, @remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @private2]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0) 10:40:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0xb460856c083809cf}, 0x20}}, 0x0) 10:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 10:40:57 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10:40:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8918, 0x0) 10:40:57 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:57 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@random="f97adca0a5cd", @random="f314c385473a", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0xe8, 0x1b8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @loopback, [0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'vcan0\x00', {0xff}, {0xff}, 0x32, 0x7, 0x0, 0x3}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "24ff27baf956af4c972234425c81e3a17f471c255b6b85d2ec391532d9f8"}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xffffffff], 'ip6gre0\x00', 'team0\x00', {}, {}, 0x3c, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [], [0xffffff00, 0xffffffff, 0xff], 'veth1_vlan\x00', 'batadv0\x00', {0xff}, {}, 0x1d, 0x52, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 10:40:58 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0) 10:40:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:40:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0xf0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv4, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private1, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 10:40:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'veth0_to_hsr\x00', 'team0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 10:40:59 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:59 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x140) 10:40:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x1}}, 0xe8) 10:40:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x50}}, 0x0) 10:40:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}}, 0x0) 10:40:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:40:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:40:59 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002100)='ns/net\x00') 10:41:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000700)={'macvlan0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 10:41:00 executing program 4: r0 = socket(0xa, 0x3, 0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 10:41:00 executing program 5: r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r0) 10:41:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:41:00 executing program 2: set_robust_list(&(0x7f0000000480), 0x18) 10:41:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x0, 0x6, 0x301}, 0x14}}, 0x0) 10:41:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'syz_tun\x00', @ifru_flags}) 10:41:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0xa, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @int, @func_proto, @var, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 10:41:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:41:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 10:41:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 10:41:01 executing program 0: modify_ldt$write(0x1, &(0x7f0000004c80), 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 10:41:01 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netstat\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r0) 10:41:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 10:41:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r0, 0x0) 10:41:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0xf0, 0x0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x0, 'SNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private1, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe04) 10:41:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 10:41:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:41:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x80023, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 10:41:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000000)={'bridge0\x00', @ifru_flags}) 10:41:02 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002080)='/sys/class/power_supply', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 10:41:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 10:41:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x19}]}}, @AF_BRIDGE={0x4}]}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x3c}}, 0x0) 10:41:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x8a0, 0x0, 0x248, 0x458, 0x0, 0x0, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'veth1_to_bridge\x00', 'macvlan1\x00'}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@private}, {@ipv4=@multicast2, [], @ipv4=@empty}, {@ipv4=@local, [], @ipv4=@multicast1}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], @ipv6=@empty}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@dev}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@empty}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@private0}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'wlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x900) 10:41:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'bridge0\x00', @ifru_flags}) 10:41:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:41:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'veth0_to_hsr\x00', 'team0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 10:41:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x700, 0x248, 0x488, 0x488, 0xd0, 0x0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'team_slave_1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @local, @private2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e0adb000000000000000009eff5ec81b2f8b2ce4da6aca60ed0e1dcfaffe"}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @empty, [], [], 'veth0_vlan\x00', 'veth0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @private2, [], [], 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1, @private2}}, @common=@icmp6={{0x28}, {0x0, "d652"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760) 10:41:04 executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 10:41:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 10:41:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3e80, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}, 0x0) 10:41:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:41:04 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') dup2(r0, r1) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) [ 1550.910148][T22610] Bluetooth: hci2: command 0x0406 tx timeout 10:41:04 executing program 2: add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="95", 0xfffff, 0xfffffffffffffffd) 10:41:04 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, 0x0) 10:41:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 10:41:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:41:05 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 10:41:05 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @random="b15bf689be74", @val, {@ipv4}}, 0x0) 10:41:05 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) 10:41:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 10:41:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) 10:41:06 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', 0x0) 10:41:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 10:41:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040), &(0x7f0000001700)=0x4) 10:41:06 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, 0x0, 0x0) 10:41:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:06 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000280), 0x10) 10:41:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f00000001c0)=0x8) [ 1553.954217][ T3126] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.960976][ T3126] ieee802154 phy1 wpan1: encryption failed: -22 10:41:07 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r0, 0x0, 0xffffff12, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 10:41:07 executing program 2: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 10:41:07 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000140)='cdg\x00', 0x4) 10:41:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) 10:41:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f00000010c0)={0x0, 0x7ff, 0x1, '+'}, 0x9) 10:41:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:08 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:41:08 executing program 2: r0 = fork() fork() wait4(r0, 0x0, 0x0, 0x0) 10:41:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0xc) 10:41:08 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="a777b0c7b74fffffffffffff86dd60a7d15500200000fe000000000000000000000000fbffbafe80"], 0x0) 10:41:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) 10:41:09 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 10:41:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) 10:41:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 10:41:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) r7 = dup2(r6, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x8}, 0x14) 10:41:10 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000480)={0x0, @in, 0x0, 0x0, 0x19a}, 0x98) 10:41:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000080)={0x0, 0x7fff}, 0x8) 10:41:10 executing program 5: select(0x40, &(0x7f0000000080)={0x6}, &(0x7f0000000200)={0x4}, &(0x7f0000000240)={0x4}, &(0x7f0000000280)={0x0, 0x2710}) 10:41:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) 10:41:10 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="b15bf689be74", @val, {@ipv4}}, 0x0) 10:41:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:11 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x80, 0x1c, 0x3}, 0x1c) 10:41:11 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)=0xc) 10:41:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) 10:41:11 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 10:41:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 10:41:11 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 10:41:11 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000040)="97", 0x1, 0x80, &(0x7f0000000080)={0x10, 0x2}, 0x2) 10:41:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) 10:41:12 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 10:41:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44) 10:41:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4d87a, 0x0, 0x0) 10:41:12 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f00000001c0), 0x8) 10:41:12 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 10:41:12 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000140), &(0x7f0000000200)=0xb0) 10:41:12 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0), &(0x7f0000001700)=0x4) 10:41:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4d87a, 0x0, 0x0) 10:41:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f00000010c0), 0x8) 10:41:13 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet(0x2, 0x5, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x29, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) 10:41:13 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) connect$inet6(r1, &(0x7f00000002c0)={0x1c, 0x1c, 0x1}, 0x1c) 10:41:13 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@prinfo={0x14}], 0x14}, 0x0) 10:41:13 executing program 0: semget(0x0, 0x1, 0x296) 10:41:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4d87a, 0x0, 0x0) 10:41:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) listen(r0, 0x0) 10:41:14 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r0, &(0x7f00000000c0)="ce", 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:41:14 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="b15bf689be74", @val, {@ipv4}}, 0x0) 10:41:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000400)={0x0, 0x2, "fd9f"}, &(0x7f0000000440)=0xa) 10:41:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000000c0), 0x14) 10:41:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x4d87a, 0x0, 0x0) 10:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) dup2(r0, r1) 10:41:14 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@un=@file={0xa}, 0xa) 10:41:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) 10:41:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, 0x0, 0x0) 10:41:15 executing program 2: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 10:41:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x4d87a, 0x0, 0x0) 10:41:15 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0), &(0x7f0000001700)=0x4) 10:41:15 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="861083e538c2a9f7070000000000000000000000de9fab15", 0x18}], 0x1}}], 0x1, 0x0) 10:41:15 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x107, 0x13, 0x0, 0x0) 10:41:15 executing program 4: socket(0x2, 0xa, 0x9) 10:41:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x4d87a, 0x0, 0x0) 10:41:16 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000003240)={&(0x7f0000001e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002ec0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002f00)=[{0x28, 0x0, 0x0, "0b2f1f35d5f963937d6c2664e2a205244e"}], 0x28}, 0x0) 10:41:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan1\x00'}) 10:41:16 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 10:41:16 executing program 5: bpf$MAP_CREATE(0xf, 0x0, 0x0) 10:41:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x28, &(0x7f0000000040), 0x8) 10:41:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x0) 10:41:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000002c0)) 10:41:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 10:41:17 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f0000001400), 0xffffffffffffffff) 10:41:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x6, &(0x7f0000000040)={0x1}, 0x8) 10:41:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x28, &(0x7f0000000040), 0x8) 10:41:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x0) 10:41:17 executing program 2: bpf$MAP_CREATE(0x1d, &(0x7f0000001bc0), 0x40) 10:41:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x5, &(0x7f0000000040)={0x1}, 0x8) 10:41:17 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 10:41:17 executing program 5: socketpair(0x2c, 0x3, 0xcd9d, &(0x7f0000000000)) 10:41:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x28, &(0x7f0000000040), 0x8) 10:41:18 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003cc0)=0xffffffffffffffff, 0x4) 10:41:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f00000001c0)={'gre0\x00', 0x0}) 10:41:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x0) 10:41:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r0, &(0x7f0000004380)=[{{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) 10:41:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, @mcast1, @mcast2}}) 10:41:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x28, &(0x7f0000000040), 0x8) 10:41:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xf, &(0x7f0000000040), 0x8) 10:41:18 executing program 0: socketpair(0x26, 0x5, 0x66f8, &(0x7f0000000000)) 10:41:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x2c, &(0x7f0000000040), 0x8) 10:41:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0xc0189436, 0x0) 10:41:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80) 10:41:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x8, 0x4) 10:41:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) 10:41:19 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0x0) 10:41:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x45, &(0x7f0000000040), 0x8) 10:41:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x40) 10:41:19 executing program 5: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="8600080000000000008b0f6266aa27b958019929bac74dc5", 0x18}], 0x1}}], 0x1, 0x0) 10:41:19 executing program 4: bpf$MAP_CREATE(0x9, 0x0, 0x0) 10:41:19 executing program 0: bpf$MAP_CREATE(0x1c, &(0x7f0000001bc0), 0x40) 10:41:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80) 10:41:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) 10:41:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x2f, &(0x7f0000000040), 0x8) 10:41:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x0) 10:41:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x20000810) 10:41:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6b1, &(0x7f0000000000), 0x4) 10:41:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040), 0x8) 10:41:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@jumbo, @ra]}}}], 0x28}, 0x20000810) 10:41:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 10:41:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x2d, &(0x7f0000000040)={0x1}, 0x8) 10:41:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x2d, &(0x7f0000000040), 0x8) 10:41:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x21, &(0x7f0000000040), 0x8) 10:41:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x1600bd61, &(0x7f0000000040)={0x1}, 0x8) 10:41:21 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000001bc0), 0x40) pipe(&(0x7f0000000180)) 10:41:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5460, 0x0) 10:41:21 executing program 5: bpf$MAP_CREATE(0x11, 0x0, 0x0) 10:41:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 10:41:21 executing program 4: socketpair(0x10, 0x2, 0x14, &(0x7f0000000000)) 10:41:21 executing program 1: bpf$MAP_CREATE(0x17, &(0x7f0000001bc0), 0x40) 10:41:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x13, 0x0, &(0x7f00000000c0)) 10:41:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f00000001c0)={'gre0\x00', 0x0}) 10:41:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x1600bd60, 0x0, &(0x7f00000000c0)) 10:41:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:41:22 executing program 1: socket$inet6(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/27, 0x1000000, 0x1000, 0x0, 0x1}, 0x20) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 10:41:22 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 10:41:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000002e80)=[{{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x24000825) 10:41:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="e1284d470c3a20157f9e4c4e44a196fb826ef457069c78a314a3205c5cb586a1830914c581b1d4d11527dfebb6f3c5a96829cc2c6174310bbff1489fe2ab94fa06eb98f2a17288ea2606d29d9dc57b839cf563fe02e7266ecc6cbad503f72d3ca93735020d688a91e85acda54072877e2ad42ea02a3d54cc78b7434b6072c879b6f0081e4c97448b7637fd85457372b0dc321923886ca5034c8995", &(0x7f0000000200)=@udp6=r1, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x0, 0x1d, 0x0, 0x0, 0x20, @loopback, @local, 0x20, 0x8000, 0x6, 0x9}}) r4 = socket$inet6(0xa, 0x6, 0x2e3d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x9, 0x3, 0x1f, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x80, 0x8, 0x3}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x80, 0xff, 0x4, 0x48, @empty, @mcast2, 0x8000, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x4, 0x1d, 0x5, 0xfff, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x80, 0x9, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) 10:41:22 executing program 5: pipe(&(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000300)="6e1cb27e1c6d6e2241730c0ef7ae14de5a2c5f0bcbacd408b42def51439a342ea2bf5fd2b36e20e04ebcf15a50a7e6fa5d49612a8e12018089f18e67db997d002ccab3881981c6646adebd94515de0fd229dd4f54ec7baa40c8eae34a840ee32e9c2645677123b334666394e89", &(0x7f0000000200)=@udp}, 0x5b) 10:41:23 executing program 4: r0 = socket(0x11, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) 10:41:23 executing program 3: bpf$MAP_CREATE(0x14, 0x0, 0x0) 10:41:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 10:41:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x6, 0x101}, 0x14}}, 0x0) 10:41:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="e1284d470c3a20157f9e4c4e44a196fb826ef457069c78a314a3205c5cb586a1830914c581b1d4d11527dfebb6f3c5a96829cc2c6174310bbff1489fe2ab94fa06eb98f2a17288ea2606d29d9dc57b839cf563fe02e7266ecc6cbad503f72d3ca93735020d688a91e85acda54072877e2ad42ea02a3d54cc78b7434b6072c879b6f0081e4c97448b7637fd85457372b0dc321923886ca5034c8995", &(0x7f0000000200)=@udp6=r1, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x0, 0x1d, 0x0, 0x0, 0x20, @loopback, @local, 0x20, 0x8000, 0x6, 0x9}}) r4 = socket$inet6(0xa, 0x6, 0x2e3d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x9, 0x3, 0x1f, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x80, 0x8, 0x3}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x80, 0xff, 0x4, 0x48, @empty, @mcast2, 0x8000, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x4, 0x1d, 0x5, 0xfff, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x80, 0x9, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) 10:41:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x94, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x54, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="3188e297c10c2c"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe08, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xe04, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_IE={0xde3, 0x2a, [@measure_req={0x26, 0xddd, {0x0, 0x0, 0x0, "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"}}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) 10:41:24 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c40)={&(0x7f0000001c00)='./file0\x00'}, 0x10) 10:41:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2, 0x7, 0x1}}) 10:41:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x18}}], 0x18}, 0x0) 10:41:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000180)={@broadcast, @broadcast, @broadcast}, &(0x7f0000000200)=0xffffff10) 10:41:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:41:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="e1284d470c3a20157f9e4c4e44a196fb826ef457069c78a314a3205c5cb586a1830914c581b1d4d11527dfebb6f3c5a96829cc2c6174310bbff1489fe2ab94fa06eb98f2a17288ea2606d29d9dc57b839cf563fe02e7266ecc6cbad503f72d3ca93735020d688a91e85acda54072877e2ad42ea02a3d54cc78b7434b6072c879b6f0081e4c97448b7637fd85457372b0dc321923886ca5034c8995", &(0x7f0000000200)=@udp6=r1, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x0, 0x1d, 0x0, 0x0, 0x20, @loopback, @local, 0x20, 0x8000, 0x6, 0x9}}) r4 = socket$inet6(0xa, 0x6, 0x2e3d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x9, 0x3, 0x1f, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x80, 0x8, 0x3}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x80, 0xff, 0x4, 0x48, @empty, @mcast2, 0x8000, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x4, 0x1d, 0x5, 0xfff, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x80, 0x9, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) 10:41:25 executing program 4: bpf$MAP_CREATE(0x23, 0x0, 0x0) 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x29, &(0x7f0000000040)={0x1}, 0x8) 10:41:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="e1284d470c3a20157f9e4c4e44a196fb826ef457069c78a314a3205c5cb586a1830914c581b1d4d11527dfebb6f3c5a96829cc2c6174310bbff1489fe2ab94fa06eb98f2a17288ea2606d29d9dc57b839cf563fe02e7266ecc6cbad503f72d3ca93735020d688a91e85acda54072877e2ad42ea02a3d54cc78b7434b6072c879b6f0081e4c97448b7637fd85457372b0dc321923886ca5034c8995", &(0x7f0000000200)=@udp6=r1, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x0, 0x1d, 0x0, 0x0, 0x20, @loopback, @local, 0x20, 0x8000, 0x6, 0x9}}) r4 = socket$inet6(0xa, 0x6, 0x2e3d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x9, 0x3, 0x1f, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x80, 0x8, 0x3}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x80, 0xff, 0x4, 0x48, @empty, @mcast2, 0x8000, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x4, 0x1d, 0x5, 0xfff, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x80, 0x9, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) 10:41:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x9, &(0x7f0000000040)={0x1}, 0x8) 10:41:26 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc5, &(0x7f00000000c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:41:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000040)={0x3, 'vlan0\x00'}) 10:41:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'vlan0\x00'}) 10:41:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @dev}}}}) 10:41:26 executing program 2: socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) 10:41:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x10, &(0x7f0000000040), 0x8) 10:41:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, 0x0) 10:41:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="da941be41a57"}, 0x10) 10:41:27 executing program 1: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), 0xffffffffffffffdc) 10:41:27 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:41:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000100)) 10:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xe, &(0x7f0000000040), 0x8) 10:41:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000040), 0x8) 10:41:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @private0, @private2}}) 10:41:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x7, 0x0, &(0x7f00000000c0)) 10:41:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b}, 0x40) 10:41:28 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x2c, 0x0, 0x0, 0x70bd28, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}}, 0x4008800) 10:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xc) 10:41:28 executing program 4: bpf$MAP_CREATE(0xa, 0x0, 0x0) 10:41:28 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) 10:41:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="c758585e8cc7dc770713130ef1ae78295fbd217d3372df6dddee36c51fbb5954da02f73141f7e2b07f199c4c6d6cc57be653b2b1030c376d6ca7a907d30b8679e2fb6661c3430ea79ccdc4646ac078f3adb5d50926aa3f670003c8eb6b496f4f60f87ac64178f995ef85fe311e9bbc3edc18311ef244d81a68d56b7eba17", 0x7e}, {&(0x7f0000000140)='6', 0x1}], 0x2}, 0x0) 10:41:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 10:41:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) 10:41:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f00000000c0)) 10:41:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x7, &(0x7f0000000040), 0x8) 10:41:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000000)={'erspan0\x00', 0x0}) 10:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x31, &(0x7f0000000040), 0x8) 10:41:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6bf, &(0x7f0000000000), 0x4) 10:41:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x2e, &(0x7f0000000040), 0x8) 10:41:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) 10:41:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x80, 0x2, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x44, 0x8, "25813b721ce3"}, @generic={0x7, 0xe, "1896fb27ca5224202766d6a6"}]}}}}}) 10:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x24, &(0x7f0000000040)={0x1}, 0x8) 10:41:29 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000004280), 0xffffffffffffffff) 10:41:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x14, 0x31, 0x101}, 0x14}}, 0x0) 10:41:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) 10:41:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x1600bd63, 0x0, &(0x7f00000000c0)) 10:41:30 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 10:41:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x3, 0x0) 10:41:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}, 0x0) 10:41:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 10:41:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) 10:41:30 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000001bc0), 0x40) 10:41:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x33, &(0x7f0000000040), 0x8) 10:41:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x9, 0x9a, 0x81}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001280)={&(0x7f0000001240)='./file0\x00', r0}, 0x10) 10:41:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x4010040c000) 10:41:31 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002540), 0x2a}, 0x40) 10:41:31 executing program 1: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="b95b03b77e030000009e40f086dd1fff060000003a00ffe077fbac141412e0000001c699da153f08a0e6e380f60108f683317585d747fd1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000003c0)}, 0x20) 10:41:31 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x6, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 10:41:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb000000}, @jmp={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:41:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair(0x26, 0x2, 0x0, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xf00}, 0xc000) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x1, @empty}, 0x80, 0x0}, 0x20008844) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x1ffffd, @mcast2, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="097e29bb6160322e86ea4143545a1ab1a91400250234364f0ea7ef1c0beeecdaa7e9225f47d0c4b728f8ab3f8c5cf45575bc4a006f0772e81bb3f6c5653e8840d39c59e73a4d1a881cc120e758444d75e37f1f8fc8589c2e0d3307000537e58880e41f5a60"], 0x38}, 0xd090c24d8aa01fe0) socketpair(0x22, 0x0, 0x3, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b708010000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:41:31 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b06, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\x06\x00\x00\x00\x7f\x00\x00\x00\x00\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d') 10:41:32 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 10:41:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x9, 0x9a, 0x81}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 10:41:32 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x1, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) [ 1579.086796][T28105] ===================================================== [ 1579.093796][T28105] BUG: KMSAN: uninit-value in br_dev_xmit+0x88f/0x1b40 [ 1579.100898][T28105] CPU: 0 PID: 28105 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 1579.109722][T28105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.119809][T28105] Call Trace: [ 1579.123214][T28105] dump_stack+0x24c/0x2e0 [ 1579.127679][T28105] kmsan_report+0xfb/0x1e0 [ 1579.132222][T28105] __msan_warning+0x5c/0xa0 [ 1579.136761][T28105] br_dev_xmit+0x88f/0x1b40 [ 1579.141396][T28105] ? br_net_exit+0x250/0x250 [ 1579.146035][T28105] xmit_one+0x2b6/0x760 [ 1579.150253][T28105] __dev_queue_xmit+0x3432/0x4600 [ 1579.155345][T28105] dev_queue_xmit+0x4b/0x60 [ 1579.159911][T28105] __bpf_redirect+0x1461/0x16b0 [ 1579.164980][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.170346][T28105] bpf_clone_redirect+0x4a1/0x660 [ 1579.175458][T28105] ___bpf_prog_run+0x2b78/0xb950 [ 1579.180444][T28105] ? bpf_csum_level+0x760/0x760 [ 1579.185339][T28105] __bpf_prog_run512+0x12e/0x190 [ 1579.190323][T28105] ? kmsan_set_origin_checked+0xa2/0x100 [ 1579.196003][T28105] ? __msan_instrument_asm_store+0x22/0x130 [ 1579.202145][T28105] ? __msan_get_context_state+0x9/0x20 [ 1579.207651][T28105] ? irqentry_exit+0x12/0x50 [ 1579.212296][T28105] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 1579.218304][T28105] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1579.224879][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.230123][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.235375][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.241232][T28105] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1579.247432][T28105] ? ktime_get+0x390/0x470 [ 1579.251965][T28105] ? kmsan_get_metadata+0x4f/0x180 [ 1579.257222][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.263089][T28105] ? __bpf_prog_run480+0x190/0x190 [ 1579.268249][T28105] bpf_test_run+0x53f/0xe60 [ 1579.272979][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.278824][T28105] bpf_prog_test_run_skb+0x1914/0x3500 [ 1579.284432][T28105] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1579.290368][T28105] __do_sys_bpf+0xbe6f/0x1aba0 [ 1579.295172][T28105] ? ctx_sched_in+0x975/0x980 [ 1579.299890][T28105] ? __msan_instrument_asm_store+0x22/0x130 [ 1579.305817][T28105] ? __msan_get_context_state+0x9/0x20 [ 1579.311312][T28105] ? irqentry_exit+0x12/0x50 [ 1579.315929][T28105] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 1579.321812][T28105] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1579.328037][T28105] ? kmsan_set_origin_checked+0xa2/0x100 [ 1579.333718][T28105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1579.339908][T28105] ? __msan_instrument_asm_store+0x104/0x130 [ 1579.345929][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.351256][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.356486][T28105] __se_sys_bpf+0x8e/0xa0 [ 1579.360841][T28105] __ia32_sys_bpf+0x4a/0x70 [ 1579.365364][T28105] __do_fast_syscall_32+0x127/0x180 [ 1579.370588][T28105] do_fast_syscall_32+0x77/0xd0 [ 1579.375466][T28105] do_SYSENTER_32+0x73/0x90 [ 1579.380009][T28105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.386363][T28105] RIP: 0023:0xf7f5f549 [ 1579.390448][T28105] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1579.410353][T28105] RSP: 002b:00000000f55595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1579.418805][T28105] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0 [ 1579.426807][T28105] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.434805][T28105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.442803][T28105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1579.450890][T28105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.458898][T28105] [ 1579.461242][T28105] Uninit was created at: [ 1579.465493][T28105] kmsan_internal_poison_shadow+0x66/0xd0 [ 1579.471266][T28105] kmsan_slab_alloc+0x8e/0xe0 [ 1579.475975][T28105] __kmalloc_node_track_caller+0xa4f/0x1470 [ 1579.481919][T28105] pskb_expand_head+0x25e/0x1e20 [ 1579.486890][T28105] skb_ensure_writable+0x4cf/0x590 [ 1579.492211][T28105] bpf_clone_redirect+0x25d/0x660 [ 1579.497263][T28105] ___bpf_prog_run+0x2b78/0xb950 [ 1579.502245][T28105] __bpf_prog_run512+0x12e/0x190 [ 1579.507209][T28105] bpf_test_run+0x53f/0xe60 [ 1579.511730][T28105] bpf_prog_test_run_skb+0x1914/0x3500 [ 1579.517209][T28105] __do_sys_bpf+0xbe6f/0x1aba0 [ 1579.521991][T28105] __se_sys_bpf+0x8e/0xa0 [ 1579.526335][T28105] __ia32_sys_bpf+0x4a/0x70 [ 1579.530853][T28105] __do_fast_syscall_32+0x127/0x180 [ 1579.536070][T28105] do_fast_syscall_32+0x77/0xd0 [ 1579.540939][T28105] do_SYSENTER_32+0x73/0x90 [ 1579.545472][T28105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.551814][T28105] ===================================================== [ 1579.558797][T28105] Disabling lock debugging due to kernel taint [ 1579.565006][T28105] Kernel panic - not syncing: panic_on_kmsan set ... [ 1579.571696][T28105] CPU: 0 PID: 28105 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1579.581987][T28105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.592095][T28105] Call Trace: [ 1579.595421][T28105] dump_stack+0x24c/0x2e0 [ 1579.599786][T28105] panic+0x4c6/0xea7 [ 1579.603725][T28105] ? add_taint+0x17c/0x210 [ 1579.608160][T28105] kmsan_report+0x1de/0x1e0 [ 1579.612692][T28105] __msan_warning+0x5c/0xa0 [ 1579.617213][T28105] br_dev_xmit+0x88f/0x1b40 [ 1579.621745][T28105] ? br_net_exit+0x250/0x250 [ 1579.626382][T28105] xmit_one+0x2b6/0x760 [ 1579.630566][T28105] __dev_queue_xmit+0x3432/0x4600 [ 1579.635736][T28105] dev_queue_xmit+0x4b/0x60 [ 1579.640367][T28105] __bpf_redirect+0x1461/0x16b0 [ 1579.645340][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.650567][T28105] bpf_clone_redirect+0x4a1/0x660 [ 1579.655711][T28105] ___bpf_prog_run+0x2b78/0xb950 [ 1579.660674][T28105] ? bpf_csum_level+0x760/0x760 [ 1579.665551][T28105] __bpf_prog_run512+0x12e/0x190 [ 1579.670516][T28105] ? kmsan_set_origin_checked+0xa2/0x100 [ 1579.676168][T28105] ? __msan_instrument_asm_store+0x22/0x130 [ 1579.682079][T28105] ? __msan_get_context_state+0x9/0x20 [ 1579.687649][T28105] ? irqentry_exit+0x12/0x50 [ 1579.692259][T28105] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 1579.698098][T28105] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1579.704291][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.709541][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.714760][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.720592][T28105] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1579.726761][T28105] ? ktime_get+0x390/0x470 [ 1579.731197][T28105] ? kmsan_get_metadata+0x4f/0x180 [ 1579.736327][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.742170][T28105] ? __bpf_prog_run480+0x190/0x190 [ 1579.747304][T28105] bpf_test_run+0x53f/0xe60 [ 1579.751848][T28105] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.757689][T28105] bpf_prog_test_run_skb+0x1914/0x3500 [ 1579.763209][T28105] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 1579.769158][T28105] __do_sys_bpf+0xbe6f/0x1aba0 [ 1579.773972][T28105] ? ctx_sched_in+0x975/0x980 [ 1579.778671][T28105] ? __msan_instrument_asm_store+0x22/0x130 [ 1579.784578][T28105] ? __msan_get_context_state+0x9/0x20 [ 1579.790075][T28105] ? irqentry_exit+0x12/0x50 [ 1579.794685][T28105] ? sysvec_apic_timer_interrupt+0x86/0xf0 [ 1579.800520][T28105] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1579.806713][T28105] ? kmsan_set_origin_checked+0xa2/0x100 [ 1579.812454][T28105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1579.818563][T28105] ? __msan_instrument_asm_store+0x104/0x130 [ 1579.824568][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.829801][T28105] ? kmsan_get_metadata+0x116/0x180 [ 1579.835074][T28105] __se_sys_bpf+0x8e/0xa0 [ 1579.839438][T28105] __ia32_sys_bpf+0x4a/0x70 [ 1579.843964][T28105] __do_fast_syscall_32+0x127/0x180 [ 1579.849202][T28105] do_fast_syscall_32+0x77/0xd0 [ 1579.854092][T28105] do_SYSENTER_32+0x73/0x90 [ 1579.858625][T28105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.865063][T28105] RIP: 0023:0xf7f5f549 [ 1579.869179][T28105] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1579.888807][T28105] RSP: 002b:00000000f55595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1579.897264][T28105] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0 [ 1579.905266][T28105] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.913354][T28105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.921354][T28105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1579.929371][T28105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.938512][T28105] Kernel Offset: disabled [ 1579.942862][T28105] Rebooting in 86400 seconds..