/0x90 [ 861.224907][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.231233][T16456] RIP: 0023:0xf7fdc549 [ 861.235308][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 861.254913][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 861.263331][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 861.271308][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 861.279281][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.287251][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.295274][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.303260][T16456] Uninit was stored to memory at: [ 861.308294][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.314017][T16456] __msan_chain_origin+0x50/0x90 [ 861.318963][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.324074][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.329012][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.333520][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.338202][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.344450][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.350637][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.355841][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.360698][T16456] do_SYSENTER_32+0x73/0x90 [ 861.365205][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.371521][T16456] [ 861.373844][T16456] Uninit was stored to memory at: [ 861.378877][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.384607][T16456] __msan_chain_origin+0x50/0x90 [ 861.389576][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.394704][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.399660][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.404166][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.408878][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.414956][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.421120][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.426322][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.431180][T16456] do_SYSENTER_32+0x73/0x90 [ 861.435692][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.442005][T16456] [ 861.444332][T16456] Uninit was stored to memory at: [ 861.449364][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.455089][T16456] __msan_chain_origin+0x50/0x90 [ 861.460030][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.465165][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.470108][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.474621][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.479308][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.485381][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.491540][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.496744][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.501598][T16456] do_SYSENTER_32+0x73/0x90 [ 861.506106][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.512420][T16456] [ 861.514741][T16456] Uninit was stored to memory at: [ 861.519774][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.525500][T16456] __msan_chain_origin+0x50/0x90 [ 861.530455][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.535603][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.540542][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.545046][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.549828][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.555902][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.562064][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.567275][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.572124][T16456] do_SYSENTER_32+0x73/0x90 [ 861.576630][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.583386][T16456] [ 861.585707][T16456] Uninit was stored to memory at: [ 861.590737][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.596460][T16456] __msan_chain_origin+0x50/0x90 [ 861.601426][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.606540][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.611479][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.615983][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.620673][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.626745][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.632907][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.638108][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.642962][T16456] do_SYSENTER_32+0x73/0x90 [ 861.647471][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.653784][T16456] [ 861.656108][T16456] Uninit was stored to memory at: [ 861.661144][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.666868][T16456] __msan_chain_origin+0x50/0x90 [ 861.671811][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.676923][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.681858][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.686366][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.691051][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.697119][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.703279][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.708484][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.713348][T16456] do_SYSENTER_32+0x73/0x90 [ 861.717855][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.724171][T16456] [ 861.726493][T16456] Uninit was stored to memory at: [ 861.731523][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 861.737248][T16456] __msan_chain_origin+0x50/0x90 [ 861.742210][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 861.747323][T16456] get_compat_msghdr+0x108/0x2b0 [ 861.752260][T16456] do_recvmmsg+0xdbb/0x22b0 [ 861.756761][T16456] __sys_recvmmsg+0x5dd/0x610 [ 861.761444][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 861.767517][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 861.773676][T16456] __do_fast_syscall_32+0x129/0x180 [ 861.778883][T16456] do_fast_syscall_32+0x6a/0xc0 [ 861.783734][T16456] do_SYSENTER_32+0x73/0x90 [ 861.788242][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 861.794555][T16456] [ 861.796886][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 861.803647][T16456] do_recvmmsg+0xbf/0x22b0 [ 861.808063][T16456] do_recvmmsg+0xbf/0x22b0 [ 862.887811][T16463] not chained 370000 origins [ 862.892455][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 862.901122][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.911170][T16463] Call Trace: [ 862.914458][T16463] dump_stack+0x21c/0x280 [ 862.918787][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 862.924500][T16463] ? kfree_sensitive+0xda/0x120 [ 862.929345][T16463] ? kmsan_get_metadata+0x116/0x180 [ 862.934537][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 862.940078][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 862.945362][T16463] ? kmsan_get_metadata+0x116/0x180 [ 862.950556][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 862.956192][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 862.962257][T16463] ? _copy_from_user+0x201/0x310 [ 862.967191][T16463] ? kmsan_get_metadata+0x116/0x180 [ 862.972382][T16463] __msan_chain_origin+0x50/0x90 [ 862.977401][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 862.982518][T16463] get_compat_msghdr+0x108/0x2b0 [ 862.987451][T16463] do_recvmmsg+0xdbb/0x22b0 [ 862.991973][T16463] ? kmsan_get_metadata+0x116/0x180 [ 862.997166][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 863.002794][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 863.008089][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 863.012844][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 863.017602][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.022283][T16463] ? kmsan_get_metadata+0x116/0x180 [ 863.027478][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.033545][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.039692][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.044884][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.049728][T16463] do_SYSENTER_32+0x73/0x90 [ 863.054228][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.060542][T16463] RIP: 0023:0xf7fdc549 [ 863.064601][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 863.084198][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 863.092602][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 863.102303][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.110352][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.118310][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 863.126272][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.134241][T16463] Uninit was stored to memory at: [ 863.139260][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.144970][T16463] __msan_chain_origin+0x50/0x90 [ 863.149899][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.155000][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.160360][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.164868][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.169535][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.175615][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.181761][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.186950][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.191792][T16463] do_SYSENTER_32+0x73/0x90 [ 863.196288][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.202611][T16463] [ 863.204924][T16463] Uninit was stored to memory at: [ 863.209938][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.215752][T16463] __msan_chain_origin+0x50/0x90 [ 863.220679][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.225797][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.230720][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.235218][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.239886][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.246048][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.252194][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.257384][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.262226][T16463] do_SYSENTER_32+0x73/0x90 [ 863.266721][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.273026][T16463] [ 863.275339][T16463] Uninit was stored to memory at: [ 863.280374][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.286082][T16463] __msan_chain_origin+0x50/0x90 [ 863.291029][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.296146][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.301072][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.305564][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.310232][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.316290][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.322434][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.327621][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.332463][T16463] do_SYSENTER_32+0x73/0x90 [ 863.336975][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.343994][T16463] [ 863.346306][T16463] Uninit was stored to memory at: [ 863.351323][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.357046][T16463] __msan_chain_origin+0x50/0x90 [ 863.361976][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.367095][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.372020][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.376512][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.381179][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.387236][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.393379][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.398569][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.403415][T16463] do_SYSENTER_32+0x73/0x90 [ 863.407913][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.414218][T16463] [ 863.416530][T16463] Uninit was stored to memory at: [ 863.421546][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.427256][T16463] __msan_chain_origin+0x50/0x90 [ 863.432201][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.437303][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.442227][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.446715][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.451481][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.457535][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.463681][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.468870][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.473730][T16463] do_SYSENTER_32+0x73/0x90 [ 863.478230][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.484535][T16463] [ 863.486847][T16463] Uninit was stored to memory at: [ 863.491860][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.497569][T16463] __msan_chain_origin+0x50/0x90 [ 863.502502][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.507605][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.512529][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.517018][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.521683][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.527739][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.533884][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.539160][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.544020][T16463] do_SYSENTER_32+0x73/0x90 [ 863.548517][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.554823][T16463] [ 863.557137][T16463] Uninit was stored to memory at: [ 863.562153][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 863.567862][T16463] __msan_chain_origin+0x50/0x90 [ 863.572801][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 863.577903][T16463] get_compat_msghdr+0x108/0x2b0 [ 863.582829][T16463] do_recvmmsg+0xdbb/0x22b0 [ 863.587320][T16463] __sys_recvmmsg+0x5dd/0x610 [ 863.591989][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 863.598047][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 863.604193][T16463] __do_fast_syscall_32+0x129/0x180 [ 863.609381][T16463] do_fast_syscall_32+0x6a/0xc0 [ 863.614223][T16463] do_SYSENTER_32+0x73/0x90 [ 863.618717][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 863.625023][T16463] [ 863.627338][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 863.633999][T16463] do_recvmmsg+0xbf/0x22b0 [ 863.638401][T16463] do_recvmmsg+0xbf/0x22b0 [ 864.647852][T16456] not chained 380000 origins [ 864.652490][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 864.661160][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.671218][T16456] Call Trace: [ 864.674516][T16456] dump_stack+0x21c/0x280 [ 864.678896][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 864.684628][T16456] ? kfree_sensitive+0xda/0x120 [ 864.689491][T16456] ? kmsan_get_metadata+0x116/0x180 [ 864.694702][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 864.700260][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 864.705644][T16456] ? kmsan_get_metadata+0x116/0x180 [ 864.710852][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 864.716402][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 864.722474][T16456] ? _copy_from_user+0x201/0x310 [ 864.727418][T16456] ? kmsan_get_metadata+0x116/0x180 [ 864.732624][T16456] __msan_chain_origin+0x50/0x90 [ 864.737579][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 864.742720][T16456] get_compat_msghdr+0x108/0x2b0 [ 864.747672][T16456] do_recvmmsg+0xdbb/0x22b0 [ 864.752191][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 864.758016][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 864.763318][T16456] ? kmsan_get_metadata+0x116/0x180 [ 864.768526][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 864.774165][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 864.779452][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 864.784219][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 864.788997][T16456] __sys_recvmmsg+0x5dd/0x610 [ 864.793686][T16456] ? kmsan_get_metadata+0x116/0x180 [ 864.798897][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 864.805099][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 864.811346][T16456] __do_fast_syscall_32+0x129/0x180 [ 864.816558][T16456] do_fast_syscall_32+0x6a/0xc0 [ 864.821419][T16456] do_SYSENTER_32+0x73/0x90 [ 864.825933][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 864.832264][T16456] RIP: 0023:0xf7fdc549 [ 864.836335][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 864.855943][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 864.864361][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 864.872336][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.880305][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.888281][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 864.896259][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.904240][T16456] Uninit was stored to memory at: [ 864.909277][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 864.915005][T16456] __msan_chain_origin+0x50/0x90 [ 864.919945][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 864.925058][T16456] get_compat_msghdr+0x108/0x2b0 [ 864.929999][T16456] do_recvmmsg+0xdbb/0x22b0 [ 864.934501][T16456] __sys_recvmmsg+0x5dd/0x610 [ 864.939183][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 864.945281][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 864.951528][T16456] __do_fast_syscall_32+0x129/0x180 [ 864.956916][T16456] do_fast_syscall_32+0x6a/0xc0 [ 864.961773][T16456] do_SYSENTER_32+0x73/0x90 [ 864.966308][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 864.972640][T16456] [ 864.974968][T16456] Uninit was stored to memory at: [ 864.980000][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 864.985725][T16456] __msan_chain_origin+0x50/0x90 [ 864.990929][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 864.996131][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.001072][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.005576][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.010264][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.016799][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.022955][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.028159][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.033015][T16456] do_SYSENTER_32+0x73/0x90 [ 865.037530][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.043932][T16456] [ 865.046253][T16456] Uninit was stored to memory at: [ 865.051284][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 865.057004][T16456] __msan_chain_origin+0x50/0x90 [ 865.061945][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 865.067061][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.072001][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.076514][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.081196][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.087263][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.093595][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.098798][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.103654][T16456] do_SYSENTER_32+0x73/0x90 [ 865.108158][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.114493][T16456] [ 865.116815][T16456] Uninit was stored to memory at: [ 865.121842][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 865.127561][T16456] __msan_chain_origin+0x50/0x90 [ 865.132503][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 865.137613][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.142553][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.147059][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.151741][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.157811][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.163975][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.169177][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.174034][T16456] do_SYSENTER_32+0x73/0x90 [ 865.178549][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.184866][T16456] [ 865.187191][T16456] Uninit was stored to memory at: [ 865.192222][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 865.197942][T16456] __msan_chain_origin+0x50/0x90 [ 865.202880][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 865.207997][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.212938][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.217445][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.222134][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.228210][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.234374][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.239576][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.244437][T16456] do_SYSENTER_32+0x73/0x90 [ 865.248945][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.255257][T16456] [ 865.257580][T16456] Uninit was stored to memory at: [ 865.262732][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 865.268454][T16456] __msan_chain_origin+0x50/0x90 [ 865.273397][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 865.278513][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.283451][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.287955][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.292633][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.298702][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.304952][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.310158][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.315099][T16456] do_SYSENTER_32+0x73/0x90 [ 865.319610][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.325930][T16456] [ 865.328253][T16456] Uninit was stored to memory at: [ 865.333286][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 865.339007][T16456] __msan_chain_origin+0x50/0x90 [ 865.343949][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 865.349058][T16456] get_compat_msghdr+0x108/0x2b0 [ 865.353999][T16456] do_recvmmsg+0xdbb/0x22b0 [ 865.358500][T16456] __sys_recvmmsg+0x5dd/0x610 [ 865.363181][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 865.369261][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 865.375421][T16456] __do_fast_syscall_32+0x129/0x180 [ 865.380622][T16456] do_fast_syscall_32+0x6a/0xc0 [ 865.385581][T16456] do_SYSENTER_32+0x73/0x90 [ 865.390096][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 865.396499][T16456] [ 865.398824][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 865.405498][T16456] do_recvmmsg+0xbf/0x22b0 [ 865.409926][T16456] do_recvmmsg+0xbf/0x22b0 [ 866.229567][T16463] not chained 390000 origins [ 866.234199][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 866.242869][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.253022][T16463] Call Trace: [ 866.256319][T16463] dump_stack+0x21c/0x280 [ 866.260665][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 866.266394][T16463] ? kfree_sensitive+0xda/0x120 [ 866.271335][T16463] ? kmsan_get_metadata+0x116/0x180 [ 866.276538][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 866.282096][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 866.287393][T16463] ? kmsan_get_metadata+0x116/0x180 [ 866.292598][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 866.298153][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 866.304233][T16463] ? _copy_from_user+0x201/0x310 [ 866.309176][T16463] ? kmsan_get_metadata+0x116/0x180 [ 866.314381][T16463] __msan_chain_origin+0x50/0x90 [ 866.319416][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.324547][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.330132][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.334673][T16463] ? kmsan_get_metadata+0x116/0x180 [ 866.339881][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 866.345516][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 866.350812][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 866.355565][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 866.360322][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.364999][T16463] ? kmsan_get_metadata+0x116/0x180 [ 866.370374][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.376440][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.382594][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.387801][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.392647][T16463] do_SYSENTER_32+0x73/0x90 [ 866.397147][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.403462][T16463] RIP: 0023:0xf7fdc549 [ 866.407522][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 866.427202][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 866.435605][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 866.443567][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 866.451528][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 866.459503][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 866.467472][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 866.475440][T16463] Uninit was stored to memory at: [ 866.480572][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.486286][T16463] __msan_chain_origin+0x50/0x90 [ 866.491222][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.496332][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.501279][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.505784][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.510456][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.516517][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.522666][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.527860][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.532703][T16463] do_SYSENTER_32+0x73/0x90 [ 866.537216][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.543528][T16463] [ 866.545847][T16463] Uninit was stored to memory at: [ 866.550958][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.556671][T16463] __msan_chain_origin+0x50/0x90 [ 866.561603][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.566706][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.571638][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.576134][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.580804][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.586865][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.593024][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.598249][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.603099][T16463] do_SYSENTER_32+0x73/0x90 [ 866.607604][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.613912][T16463] [ 866.616232][T16463] Uninit was stored to memory at: [ 866.621252][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.626982][T16463] __msan_chain_origin+0x50/0x90 [ 866.631912][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.637018][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.641965][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.646472][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.651237][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.657296][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.663544][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.668748][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.673596][T16463] do_SYSENTER_32+0x73/0x90 [ 866.678203][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.684516][T16463] [ 866.686831][T16463] Uninit was stored to memory at: [ 866.691852][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.697565][T16463] __msan_chain_origin+0x50/0x90 [ 866.702496][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.707612][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.712543][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.717037][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.721705][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.727776][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.733922][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.739145][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.743990][T16463] do_SYSENTER_32+0x73/0x90 [ 866.748488][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.754793][T16463] [ 866.757109][T16463] Uninit was stored to memory at: [ 866.762129][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.767842][T16463] __msan_chain_origin+0x50/0x90 [ 866.772789][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.777894][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.782822][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.787330][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.792001][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.798179][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.804341][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.809529][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.814370][T16463] do_SYSENTER_32+0x73/0x90 [ 866.818864][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.825171][T16463] [ 866.827484][T16463] Uninit was stored to memory at: [ 866.832501][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.838207][T16463] __msan_chain_origin+0x50/0x90 [ 866.843155][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.848258][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.853304][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.857794][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.862480][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.868537][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.874680][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.879868][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.884728][T16463] do_SYSENTER_32+0x73/0x90 [ 866.889240][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.895545][T16463] [ 866.897859][T16463] Uninit was stored to memory at: [ 866.902903][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 866.908835][T16463] __msan_chain_origin+0x50/0x90 [ 866.913765][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 866.918867][T16463] get_compat_msghdr+0x108/0x2b0 [ 866.923794][T16463] do_recvmmsg+0xdbb/0x22b0 [ 866.928309][T16463] __sys_recvmmsg+0x5dd/0x610 [ 866.932979][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 866.939036][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 866.945178][T16463] __do_fast_syscall_32+0x129/0x180 [ 866.950367][T16463] do_fast_syscall_32+0x6a/0xc0 [ 866.955225][T16463] do_SYSENTER_32+0x73/0x90 [ 866.959721][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 866.966028][T16463] [ 866.968343][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 866.975017][T16463] do_recvmmsg+0xbf/0x22b0 [ 866.979434][T16463] do_recvmmsg+0xbf/0x22b0 [ 868.394939][T16463] not chained 400000 origins [ 868.399566][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 868.412571][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.422615][T16463] Call Trace: [ 868.425928][T16463] dump_stack+0x21c/0x280 [ 868.430269][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 868.435982][T16463] ? kfree_sensitive+0xda/0x120 [ 868.440826][T16463] ? kmsan_get_metadata+0x116/0x180 [ 868.446017][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 868.451560][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 868.456842][T16463] ? kmsan_get_metadata+0x116/0x180 [ 868.462034][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 868.467577][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 868.474071][T16463] ? _copy_from_user+0x201/0x310 [ 868.479005][T16463] ? kmsan_get_metadata+0x116/0x180 [ 868.484199][T16463] __msan_chain_origin+0x50/0x90 [ 868.489136][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.494263][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.499202][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.503726][T16463] ? kmsan_get_metadata+0x116/0x180 [ 868.508920][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 868.514548][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 868.519849][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 868.524746][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 868.529529][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.534219][T16463] ? kmsan_get_metadata+0x116/0x180 [ 868.539420][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.545493][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.551646][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.556843][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.561690][T16463] do_SYSENTER_32+0x73/0x90 [ 868.566191][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.572515][T16463] RIP: 0023:0xf7fdc549 [ 868.576591][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 868.596185][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 868.604677][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 868.612654][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.620614][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.628573][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 868.636619][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.644586][T16463] Uninit was stored to memory at: [ 868.649692][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 868.655403][T16463] __msan_chain_origin+0x50/0x90 [ 868.660420][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.665522][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.670447][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.674939][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.679608][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.685677][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.691919][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.697112][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.701959][T16463] do_SYSENTER_32+0x73/0x90 [ 868.706463][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.712771][T16463] [ 868.715087][T16463] Uninit was stored to memory at: [ 868.720106][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 868.725819][T16463] __msan_chain_origin+0x50/0x90 [ 868.730765][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.735882][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.740814][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.745308][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.749983][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.756056][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.762210][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.767401][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.772251][T16463] do_SYSENTER_32+0x73/0x90 [ 868.776750][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.783143][T16463] [ 868.785455][T16463] Uninit was stored to memory at: [ 868.790571][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 868.796278][T16463] __msan_chain_origin+0x50/0x90 [ 868.801221][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.806409][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.811336][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.815842][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.820510][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.826566][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.832712][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.837902][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.842918][T16463] do_SYSENTER_32+0x73/0x90 [ 868.847429][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.853733][T16463] [ 868.856047][T16463] Uninit was stored to memory at: [ 868.861064][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 868.866772][T16463] __msan_chain_origin+0x50/0x90 [ 868.871813][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.876922][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.881848][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.886338][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.891006][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.897070][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.903214][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.908409][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.913258][T16463] do_SYSENTER_32+0x73/0x90 [ 868.917752][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.924057][T16463] [ 868.926368][T16463] Uninit was stored to memory at: [ 868.931384][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 868.937091][T16463] __msan_chain_origin+0x50/0x90 [ 868.942017][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 868.947118][T16463] get_compat_msghdr+0x108/0x2b0 [ 868.952042][T16463] do_recvmmsg+0xdbb/0x22b0 [ 868.956533][T16463] __sys_recvmmsg+0x5dd/0x610 [ 868.961200][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 868.967256][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 868.973398][T16463] __do_fast_syscall_32+0x129/0x180 [ 868.978587][T16463] do_fast_syscall_32+0x6a/0xc0 [ 868.983426][T16463] do_SYSENTER_32+0x73/0x90 [ 868.987921][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 868.994225][T16463] [ 868.996538][T16463] Uninit was stored to memory at: [ 869.001554][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 869.007261][T16463] __msan_chain_origin+0x50/0x90 [ 869.012192][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 869.017293][T16463] get_compat_msghdr+0x108/0x2b0 [ 869.022220][T16463] do_recvmmsg+0xdbb/0x22b0 [ 869.026711][T16463] __sys_recvmmsg+0x5dd/0x610 [ 869.031392][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.037449][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.043593][T16463] __do_fast_syscall_32+0x129/0x180 [ 869.048784][T16463] do_fast_syscall_32+0x6a/0xc0 [ 869.053799][T16463] do_SYSENTER_32+0x73/0x90 [ 869.058298][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.064602][T16463] [ 869.067011][T16463] Uninit was stored to memory at: [ 869.072028][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 869.077752][T16463] __msan_chain_origin+0x50/0x90 [ 869.082682][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 869.087783][T16463] get_compat_msghdr+0x108/0x2b0 [ 869.092710][T16463] do_recvmmsg+0xdbb/0x22b0 [ 869.097199][T16463] __sys_recvmmsg+0x5dd/0x610 [ 869.101868][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 869.107947][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 869.114093][T16463] __do_fast_syscall_32+0x129/0x180 [ 869.119285][T16463] do_fast_syscall_32+0x6a/0xc0 [ 869.124128][T16463] do_SYSENTER_32+0x73/0x90 [ 869.128627][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 869.134934][T16463] [ 869.137336][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 869.143996][T16463] do_recvmmsg+0xbf/0x22b0 [ 869.148484][T16463] do_recvmmsg+0xbf/0x22b0 [ 870.177639][T16456] not chained 410000 origins [ 870.182286][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 870.190965][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.201025][T16456] Call Trace: [ 870.204346][T16456] dump_stack+0x21c/0x280 [ 870.208705][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 870.214441][T16456] ? kfree_sensitive+0xda/0x120 [ 870.219301][T16456] ? kmsan_get_metadata+0x116/0x180 [ 870.224626][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 870.230183][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 870.235480][T16456] ? kmsan_get_metadata+0x116/0x180 [ 870.240774][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 870.246331][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 870.252410][T16456] ? _copy_from_user+0x201/0x310 [ 870.257368][T16456] ? kmsan_get_metadata+0x116/0x180 [ 870.262581][T16456] __msan_chain_origin+0x50/0x90 [ 870.267533][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.272674][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.277629][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.282150][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 870.287974][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 870.293281][T16456] ? kmsan_get_metadata+0x116/0x180 [ 870.298489][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 870.304224][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 870.309526][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 870.314300][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 870.319071][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.323761][T16456] ? kmsan_get_metadata+0x116/0x180 [ 870.328974][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.335061][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.341224][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.346438][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.351299][T16456] do_SYSENTER_32+0x73/0x90 [ 870.355825][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.362159][T16456] RIP: 0023:0xf7fdc549 [ 870.366237][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 870.385844][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 870.394259][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 870.402231][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.410293][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.418267][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 870.426239][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.434221][T16456] Uninit was stored to memory at: [ 870.439255][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.444980][T16456] __msan_chain_origin+0x50/0x90 [ 870.449923][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.455037][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.459977][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.464487][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.469195][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.475268][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.481428][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.486654][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.491513][T16456] do_SYSENTER_32+0x73/0x90 [ 870.496143][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.502459][T16456] [ 870.504784][T16456] Uninit was stored to memory at: [ 870.509816][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.515547][T16456] __msan_chain_origin+0x50/0x90 [ 870.520490][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.525726][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.530668][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.535176][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.539864][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.545940][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.552102][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.557308][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.562163][T16456] do_SYSENTER_32+0x73/0x90 [ 870.566677][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.573081][T16456] [ 870.575405][T16456] Uninit was stored to memory at: [ 870.580439][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.586166][T16456] __msan_chain_origin+0x50/0x90 [ 870.591106][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.596225][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.601166][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.605667][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.610342][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.616411][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.622568][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.627766][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.632613][T16456] do_SYSENTER_32+0x73/0x90 [ 870.637122][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.643438][T16456] [ 870.645759][T16456] Uninit was stored to memory at: [ 870.650788][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.656510][T16456] __msan_chain_origin+0x50/0x90 [ 870.661452][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.666562][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.671498][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.675999][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.680685][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.686754][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.692919][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.698123][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.703053][T16456] do_SYSENTER_32+0x73/0x90 [ 870.707585][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.713896][T16456] [ 870.716215][T16456] Uninit was stored to memory at: [ 870.721245][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.726967][T16456] __msan_chain_origin+0x50/0x90 [ 870.731907][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.737019][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.741958][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.746459][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.751138][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.757204][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.763560][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.768755][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.773602][T16456] do_SYSENTER_32+0x73/0x90 [ 870.778112][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.784421][T16456] [ 870.786738][T16456] Uninit was stored to memory at: [ 870.791762][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.797482][T16456] __msan_chain_origin+0x50/0x90 [ 870.802421][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.807530][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.812465][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.816965][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.821642][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.827709][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.833870][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.839072][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.843925][T16456] do_SYSENTER_32+0x73/0x90 [ 870.848434][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.854747][T16456] [ 870.857067][T16456] Uninit was stored to memory at: [ 870.862105][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 870.867826][T16456] __msan_chain_origin+0x50/0x90 [ 870.872763][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 870.877882][T16456] get_compat_msghdr+0x108/0x2b0 [ 870.882821][T16456] do_recvmmsg+0xdbb/0x22b0 [ 870.887320][T16456] __sys_recvmmsg+0x5dd/0x610 [ 870.891997][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 870.898064][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 870.904226][T16456] __do_fast_syscall_32+0x129/0x180 [ 870.909424][T16456] do_fast_syscall_32+0x6a/0xc0 [ 870.914288][T16456] do_SYSENTER_32+0x73/0x90 [ 870.918791][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 870.925104][T16456] [ 870.927428][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 870.934102][T16456] do_recvmmsg+0xbf/0x22b0 [ 870.938518][T16456] do_recvmmsg+0xbf/0x22b0 [ 872.187165][T16456] not chained 420000 origins [ 872.191801][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 872.200468][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.210519][T16456] Call Trace: [ 872.213818][T16456] dump_stack+0x21c/0x280 [ 872.218161][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 872.223893][T16456] ? kfree_sensitive+0xda/0x120 [ 872.228752][T16456] ? kmsan_get_metadata+0x116/0x180 [ 872.233958][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 872.239519][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 872.244817][T16456] ? kmsan_get_metadata+0x116/0x180 [ 872.250020][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 872.255571][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 872.261644][T16456] ? _copy_from_user+0x201/0x310 [ 872.266592][T16456] ? kmsan_get_metadata+0x116/0x180 [ 872.271795][T16456] __msan_chain_origin+0x50/0x90 [ 872.276740][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.281873][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.286820][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.291344][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 872.297166][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 872.302456][T16456] ? kmsan_get_metadata+0x116/0x180 [ 872.307649][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 872.313274][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 872.318560][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 872.323312][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 872.328071][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.332744][T16456] ? kmsan_get_metadata+0x116/0x180 [ 872.337938][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.344002][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.350150][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.355349][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.360194][T16456] do_SYSENTER_32+0x73/0x90 [ 872.364702][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.371016][T16456] RIP: 0023:0xf7fdc549 [ 872.375077][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 872.394675][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 872.403080][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 872.411041][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 872.418999][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 872.427047][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 872.435006][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.442975][T16456] Uninit was stored to memory at: [ 872.447997][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.453706][T16456] __msan_chain_origin+0x50/0x90 [ 872.458630][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.463731][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.468657][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.473146][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.477813][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.483869][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.490014][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.495200][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.500039][T16456] do_SYSENTER_32+0x73/0x90 [ 872.504563][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.510869][T16456] [ 872.513179][T16456] Uninit was stored to memory at: [ 872.518206][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.523922][T16456] __msan_chain_origin+0x50/0x90 [ 872.528854][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.533955][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.538887][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.543379][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.548067][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.554125][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.560286][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.565474][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.570315][T16456] do_SYSENTER_32+0x73/0x90 [ 872.574811][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.581131][T16456] [ 872.583447][T16456] Uninit was stored to memory at: [ 872.588463][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.594172][T16456] __msan_chain_origin+0x50/0x90 [ 872.599096][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.604198][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.609120][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.613610][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.618287][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.624344][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.630499][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.635685][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.640523][T16456] do_SYSENTER_32+0x73/0x90 [ 872.645018][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.651321][T16456] [ 872.653639][T16456] Uninit was stored to memory at: [ 872.658671][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.664393][T16456] __msan_chain_origin+0x50/0x90 [ 872.669326][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.674426][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.679353][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.683842][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.688512][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.694571][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.700717][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.706015][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.710857][T16456] do_SYSENTER_32+0x73/0x90 [ 872.715349][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.721654][T16456] [ 872.723964][T16456] Uninit was stored to memory at: [ 872.728977][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.734683][T16456] __msan_chain_origin+0x50/0x90 [ 872.739611][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.744714][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.749641][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.754131][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.758806][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.764862][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.771006][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.776195][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.781034][T16456] do_SYSENTER_32+0x73/0x90 [ 872.785527][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.791831][T16456] [ 872.794142][T16456] Uninit was stored to memory at: [ 872.799166][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.804872][T16456] __msan_chain_origin+0x50/0x90 [ 872.809802][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.814901][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.819836][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.824332][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.828997][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.835056][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.841203][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.846394][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.851237][T16456] do_SYSENTER_32+0x73/0x90 [ 872.855731][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.862038][T16456] [ 872.864352][T16456] Uninit was stored to memory at: [ 872.869369][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 872.875077][T16456] __msan_chain_origin+0x50/0x90 [ 872.880001][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 872.885124][T16456] get_compat_msghdr+0x108/0x2b0 [ 872.890078][T16456] do_recvmmsg+0xdbb/0x22b0 [ 872.894572][T16456] __sys_recvmmsg+0x5dd/0x610 [ 872.899325][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 872.905381][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 872.911530][T16456] __do_fast_syscall_32+0x129/0x180 [ 872.916721][T16456] do_fast_syscall_32+0x6a/0xc0 [ 872.921561][T16456] do_SYSENTER_32+0x73/0x90 [ 872.926062][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 872.932366][T16456] [ 872.934681][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 872.941341][T16456] do_recvmmsg+0xbf/0x22b0 [ 872.945744][T16456] do_recvmmsg+0xbf/0x22b0 [ 874.327556][T16463] not chained 430000 origins [ 874.332191][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 874.340855][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.350905][T16463] Call Trace: [ 874.354201][T16463] dump_stack+0x21c/0x280 [ 874.358540][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 874.364262][T16463] ? kfree_sensitive+0xda/0x120 [ 874.369114][T16463] ? kmsan_get_metadata+0x116/0x180 [ 874.374328][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 874.379879][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 874.385175][T16463] ? kmsan_get_metadata+0x116/0x180 [ 874.390380][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 874.395928][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 874.401998][T16463] ? _copy_from_user+0x201/0x310 [ 874.406941][T16463] ? kmsan_get_metadata+0x116/0x180 [ 874.412148][T16463] __msan_chain_origin+0x50/0x90 [ 874.417091][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.422223][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.427182][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.431722][T16463] ? kmsan_get_metadata+0x116/0x180 [ 874.436936][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 874.442577][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 874.447870][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 874.452636][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 874.457404][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.462092][T16463] ? kmsan_get_metadata+0x116/0x180 [ 874.467384][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.473461][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.479624][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.484833][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.489694][T16463] do_SYSENTER_32+0x73/0x90 [ 874.494209][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.500537][T16463] RIP: 0023:0xf7fdc549 [ 874.504607][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 874.524213][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 874.532631][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 874.540605][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.548572][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.556541][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 874.564511][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.572489][T16463] Uninit was stored to memory at: [ 874.577518][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.583236][T16463] __msan_chain_origin+0x50/0x90 [ 874.588169][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.593280][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.598217][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.602727][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.607405][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.613470][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.619624][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.624822][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.629673][T16463] do_SYSENTER_32+0x73/0x90 [ 874.634177][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.640490][T16463] [ 874.642812][T16463] Uninit was stored to memory at: [ 874.647843][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.653562][T16463] __msan_chain_origin+0x50/0x90 [ 874.658497][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.663611][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.668549][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.673049][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.677727][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.683789][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.689946][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.695151][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.700001][T16463] do_SYSENTER_32+0x73/0x90 [ 874.704510][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.710823][T16463] [ 874.713144][T16463] Uninit was stored to memory at: [ 874.718169][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.723897][T16463] __msan_chain_origin+0x50/0x90 [ 874.728836][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.733948][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.738885][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.743387][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.748069][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.754140][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.760291][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.765481][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.770326][T16463] do_SYSENTER_32+0x73/0x90 [ 874.774821][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.781124][T16463] [ 874.783445][T16463] Uninit was stored to memory at: [ 874.788462][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.794171][T16463] __msan_chain_origin+0x50/0x90 [ 874.799100][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.804199][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.809127][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.813617][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.818300][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.824361][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.830508][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.835696][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.840539][T16463] do_SYSENTER_32+0x73/0x90 [ 874.845035][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.851347][T16463] [ 874.853658][T16463] Uninit was stored to memory at: [ 874.858673][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.864381][T16463] __msan_chain_origin+0x50/0x90 [ 874.869328][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.874438][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.879363][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.883851][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.888516][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.894571][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.900712][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.905911][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.910747][T16463] do_SYSENTER_32+0x73/0x90 [ 874.915242][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.921543][T16463] [ 874.923853][T16463] Uninit was stored to memory at: [ 874.928864][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 874.934570][T16463] __msan_chain_origin+0x50/0x90 [ 874.939497][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 874.944606][T16463] get_compat_msghdr+0x108/0x2b0 [ 874.949532][T16463] do_recvmmsg+0xdbb/0x22b0 [ 874.954020][T16463] __sys_recvmmsg+0x5dd/0x610 [ 874.958683][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 874.964750][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 874.970892][T16463] __do_fast_syscall_32+0x129/0x180 [ 874.976076][T16463] do_fast_syscall_32+0x6a/0xc0 [ 874.980916][T16463] do_SYSENTER_32+0x73/0x90 [ 874.985421][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 874.991725][T16463] [ 874.994036][T16463] Uninit was stored to memory at: [ 874.999062][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 875.004767][T16463] __msan_chain_origin+0x50/0x90 [ 875.009704][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 875.014803][T16463] get_compat_msghdr+0x108/0x2b0 [ 875.019738][T16463] do_recvmmsg+0xdbb/0x22b0 [ 875.024237][T16463] __sys_recvmmsg+0x5dd/0x610 [ 875.028900][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 875.034957][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 875.041102][T16463] __do_fast_syscall_32+0x129/0x180 [ 875.046291][T16463] do_fast_syscall_32+0x6a/0xc0 [ 875.051133][T16463] do_SYSENTER_32+0x73/0x90 [ 875.055625][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 875.061927][T16463] [ 875.064238][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 875.070898][T16463] do_recvmmsg+0xbf/0x22b0 [ 875.075304][T16463] do_recvmmsg+0xbf/0x22b0 [ 876.051289][T16463] not chained 440000 origins [ 876.055923][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 876.064584][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.074639][T16463] Call Trace: [ 876.077940][T16463] dump_stack+0x21c/0x280 [ 876.082283][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 876.088010][T16463] ? kfree_sensitive+0xda/0x120 [ 876.092876][T16463] ? kmsan_get_metadata+0x116/0x180 [ 876.098076][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 876.103627][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 876.108923][T16463] ? kmsan_get_metadata+0x116/0x180 [ 876.114139][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 876.119693][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 876.125766][T16463] ? _copy_from_user+0x201/0x310 [ 876.130716][T16463] ? kmsan_get_metadata+0x116/0x180 [ 876.135918][T16463] __msan_chain_origin+0x50/0x90 [ 876.140861][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.145992][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.150941][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.155471][T16463] ? kmsan_get_metadata+0x116/0x180 [ 876.160672][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 876.166316][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 876.171610][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 876.176371][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 876.181143][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.185830][T16463] ? kmsan_get_metadata+0x116/0x180 [ 876.191038][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.197124][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.203325][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.208536][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.213392][T16463] do_SYSENTER_32+0x73/0x90 [ 876.217901][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.224235][T16463] RIP: 0023:0xf7fdc549 [ 876.228306][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 876.247909][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 876.256322][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 876.264293][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 876.272267][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 876.280237][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 876.288206][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 876.296187][T16463] Uninit was stored to memory at: [ 876.301222][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.306956][T16463] __msan_chain_origin+0x50/0x90 [ 876.311896][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.317014][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.321946][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.326446][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.331123][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.337191][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.343361][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.348559][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.353428][T16463] do_SYSENTER_32+0x73/0x90 [ 876.357931][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.364241][T16463] [ 876.366559][T16463] Uninit was stored to memory at: [ 876.371589][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.377309][T16463] __msan_chain_origin+0x50/0x90 [ 876.382249][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.387364][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.392298][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.396797][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.401479][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.407548][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.413703][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.418901][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.423749][T16463] do_SYSENTER_32+0x73/0x90 [ 876.428261][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.434575][T16463] [ 876.436894][T16463] Uninit was stored to memory at: [ 876.441925][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.447649][T16463] __msan_chain_origin+0x50/0x90 [ 876.452593][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.457703][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.462639][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.467147][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.471832][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.477901][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.484059][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.489255][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.494106][T16463] do_SYSENTER_32+0x73/0x90 [ 876.498614][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.504926][T16463] [ 876.507248][T16463] Uninit was stored to memory at: [ 876.512280][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.518000][T16463] __msan_chain_origin+0x50/0x90 [ 876.522940][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.528047][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.532993][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.537501][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.542182][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.548254][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.554418][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.559623][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.564471][T16463] do_SYSENTER_32+0x73/0x90 [ 876.568984][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.575293][T16463] [ 876.577621][T16463] Uninit was stored to memory at: [ 876.582656][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.588375][T16463] __msan_chain_origin+0x50/0x90 [ 876.593318][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.598448][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.603385][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.607883][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.612561][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.618637][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.624791][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.629989][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.634843][T16463] do_SYSENTER_32+0x73/0x90 [ 876.639466][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.645775][T16463] [ 876.648093][T16463] Uninit was stored to memory at: [ 876.653254][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.658981][T16463] __msan_chain_origin+0x50/0x90 [ 876.663918][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.669030][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.673963][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.678463][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.683140][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.689215][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.695374][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.700581][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.705434][T16463] do_SYSENTER_32+0x73/0x90 [ 876.709937][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.716246][T16463] [ 876.718563][T16463] Uninit was stored to memory at: [ 876.723589][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 876.729313][T16463] __msan_chain_origin+0x50/0x90 [ 876.734254][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 876.739361][T16463] get_compat_msghdr+0x108/0x2b0 [ 876.744300][T16463] do_recvmmsg+0xdbb/0x22b0 [ 876.748798][T16463] __sys_recvmmsg+0x5dd/0x610 [ 876.753477][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 876.759548][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 876.765704][T16463] __do_fast_syscall_32+0x129/0x180 [ 876.770902][T16463] do_fast_syscall_32+0x6a/0xc0 [ 876.775761][T16463] do_SYSENTER_32+0x73/0x90 [ 876.780269][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.786583][T16463] [ 876.788907][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 876.795591][T16463] do_recvmmsg+0xbf/0x22b0 [ 876.800003][T16463] do_recvmmsg+0xbf/0x22b0 [ 877.970990][T16456] not chained 450000 origins [ 877.975622][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 877.984290][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.994429][T16456] Call Trace: [ 877.997733][T16456] dump_stack+0x21c/0x280 [ 878.002080][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 878.007817][T16456] ? kfree_sensitive+0xda/0x120 [ 878.012679][T16456] ? kmsan_get_metadata+0x116/0x180 [ 878.017888][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 878.023442][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 878.028736][T16456] ? kmsan_get_metadata+0x116/0x180 [ 878.033944][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 878.039499][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 878.046447][T16456] ? _copy_from_user+0x201/0x310 [ 878.051400][T16456] ? kmsan_get_metadata+0x116/0x180 [ 878.056602][T16456] __msan_chain_origin+0x50/0x90 [ 878.061556][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.066688][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.071636][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.076145][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 878.081959][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 878.087256][T16456] ? kmsan_get_metadata+0x116/0x180 [ 878.092461][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 878.098102][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 878.103391][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 878.108158][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 878.112942][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.117628][T16456] ? kmsan_get_metadata+0x116/0x180 [ 878.122838][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.128916][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.135102][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.140326][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.145181][T16456] do_SYSENTER_32+0x73/0x90 [ 878.149691][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.156013][T16456] RIP: 0023:0xf7fdc549 [ 878.160082][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 878.179684][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 878.188111][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 878.196083][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.204060][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.212031][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 878.219999][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.228066][T16456] Uninit was stored to memory at: [ 878.233125][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.238843][T16456] __msan_chain_origin+0x50/0x90 [ 878.243782][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.248893][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.253831][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.258331][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.263010][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.269076][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.275227][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.280424][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.285276][T16456] do_SYSENTER_32+0x73/0x90 [ 878.289786][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.296103][T16456] [ 878.298421][T16456] Uninit was stored to memory at: [ 878.303450][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.309170][T16456] __msan_chain_origin+0x50/0x90 [ 878.314107][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.319217][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.324153][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.328658][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.333337][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.339400][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.345555][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.350764][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.355615][T16456] do_SYSENTER_32+0x73/0x90 [ 878.360121][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.366430][T16456] [ 878.368748][T16456] Uninit was stored to memory at: [ 878.373775][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.379492][T16456] __msan_chain_origin+0x50/0x90 [ 878.384432][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.389551][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.394484][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.398985][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.403663][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.409731][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.415887][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.421086][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.425942][T16456] do_SYSENTER_32+0x73/0x90 [ 878.430462][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.436771][T16456] [ 878.439087][T16456] Uninit was stored to memory at: [ 878.444114][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.449834][T16456] __msan_chain_origin+0x50/0x90 [ 878.454770][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.459876][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.464819][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.469325][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.474093][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.480158][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.486318][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.491520][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.496374][T16456] do_SYSENTER_32+0x73/0x90 [ 878.500881][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.507194][T16456] [ 878.509520][T16456] Uninit was stored to memory at: [ 878.514550][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.520270][T16456] __msan_chain_origin+0x50/0x90 [ 878.525314][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.530433][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.535367][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.539875][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.544559][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.550634][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.556796][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.561999][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.566850][T16456] do_SYSENTER_32+0x73/0x90 [ 878.571364][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.577682][T16456] [ 878.579999][T16456] Uninit was stored to memory at: [ 878.585029][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.590756][T16456] __msan_chain_origin+0x50/0x90 [ 878.595694][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.600825][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.605759][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.610265][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.614938][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.621008][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.627160][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.632363][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.637216][T16456] do_SYSENTER_32+0x73/0x90 [ 878.641723][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.648031][T16456] [ 878.650349][T16456] Uninit was stored to memory at: [ 878.655378][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 878.661095][T16456] __msan_chain_origin+0x50/0x90 [ 878.666034][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 878.671146][T16456] get_compat_msghdr+0x108/0x2b0 [ 878.676079][T16456] do_recvmmsg+0xdbb/0x22b0 [ 878.680580][T16456] __sys_recvmmsg+0x5dd/0x610 [ 878.685258][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 878.691325][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 878.697480][T16456] __do_fast_syscall_32+0x129/0x180 [ 878.702684][T16456] do_fast_syscall_32+0x6a/0xc0 [ 878.707543][T16456] do_SYSENTER_32+0x73/0x90 [ 878.712054][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 878.718396][T16456] [ 878.720717][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 878.727390][T16456] do_recvmmsg+0xbf/0x22b0 [ 878.731805][T16456] do_recvmmsg+0xbf/0x22b0 [ 879.427144][T16463] not chained 460000 origins [ 879.431780][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 879.440446][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.450498][T16463] Call Trace: [ 879.453796][T16463] dump_stack+0x21c/0x280 [ 879.458138][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 879.463861][T16463] ? kfree_sensitive+0xda/0x120 [ 879.468717][T16463] ? kmsan_get_metadata+0x116/0x180 [ 879.473914][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 879.479452][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 879.484736][T16463] ? kmsan_get_metadata+0x116/0x180 [ 879.489929][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 879.495465][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 879.501524][T16463] ? _copy_from_user+0x201/0x310 [ 879.506455][T16463] ? kmsan_get_metadata+0x116/0x180 [ 879.511664][T16463] __msan_chain_origin+0x50/0x90 [ 879.516596][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.521820][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.526762][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.531288][T16463] ? kmsan_get_metadata+0x116/0x180 [ 879.536491][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 879.542125][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 879.547405][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 879.552160][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 879.556926][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.561621][T16463] ? kmsan_get_metadata+0x116/0x180 [ 879.566816][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.572891][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.579053][T16463] __do_fast_syscall_32+0x129/0x180 [ 879.584247][T16463] do_fast_syscall_32+0x6a/0xc0 [ 879.589091][T16463] do_SYSENTER_32+0x73/0x90 [ 879.593588][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.599901][T16463] RIP: 0023:0xf7fdc549 [ 879.603958][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 879.623547][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 879.631959][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 879.639928][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 879.647886][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 879.655847][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 879.663820][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 879.671805][T16463] Uninit was stored to memory at: [ 879.676829][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 879.682540][T16463] __msan_chain_origin+0x50/0x90 [ 879.687468][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.692581][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.697518][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.702107][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.706777][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.712843][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.718993][T16463] __do_fast_syscall_32+0x129/0x180 [ 879.724185][T16463] do_fast_syscall_32+0x6a/0xc0 [ 879.729028][T16463] do_SYSENTER_32+0x73/0x90 [ 879.733528][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.739835][T16463] [ 879.742148][T16463] Uninit was stored to memory at: [ 879.747163][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 879.752871][T16463] __msan_chain_origin+0x50/0x90 [ 879.757804][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.762903][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.767829][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.772321][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.777000][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.783062][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.789215][T16463] __do_fast_syscall_32+0x129/0x180 [ 879.794409][T16463] do_fast_syscall_32+0x6a/0xc0 [ 879.799249][T16463] do_SYSENTER_32+0x73/0x90 [ 879.803743][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.810047][T16463] [ 879.812358][T16463] Uninit was stored to memory at: [ 879.817378][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 879.823089][T16463] __msan_chain_origin+0x50/0x90 [ 879.828015][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.833114][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.838036][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.842524][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.847192][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.853250][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.859393][T16463] __do_fast_syscall_32+0x129/0x180 [ 879.864579][T16463] do_fast_syscall_32+0x6a/0xc0 [ 879.869419][T16463] do_SYSENTER_32+0x73/0x90 [ 879.873912][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.880213][T16463] [ 879.882523][T16463] Uninit was stored to memory at: [ 879.887537][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 879.893246][T16463] __msan_chain_origin+0x50/0x90 [ 879.898170][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.903274][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.908196][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.912687][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.917352][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.923406][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.929552][T16463] __do_fast_syscall_32+0x129/0x180 [ 879.934825][T16463] do_fast_syscall_32+0x6a/0xc0 [ 879.939664][T16463] do_SYSENTER_32+0x73/0x90 [ 879.944155][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 879.950458][T16463] [ 879.952769][T16463] Uninit was stored to memory at: [ 879.957790][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 879.963499][T16463] __msan_chain_origin+0x50/0x90 [ 879.968426][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 879.973538][T16463] get_compat_msghdr+0x108/0x2b0 [ 879.978460][T16463] do_recvmmsg+0xdbb/0x22b0 [ 879.982949][T16463] __sys_recvmmsg+0x5dd/0x610 [ 879.987613][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 879.993668][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 879.999818][T16463] __do_fast_syscall_32+0x129/0x180 [ 880.005006][T16463] do_fast_syscall_32+0x6a/0xc0 [ 880.009845][T16463] do_SYSENTER_32+0x73/0x90 [ 880.014338][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.020640][T16463] [ 880.022949][T16463] Uninit was stored to memory at: [ 880.027973][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 880.033694][T16463] __msan_chain_origin+0x50/0x90 [ 880.038631][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 880.043731][T16463] get_compat_msghdr+0x108/0x2b0 [ 880.048661][T16463] do_recvmmsg+0xdbb/0x22b0 [ 880.053151][T16463] __sys_recvmmsg+0x5dd/0x610 [ 880.057815][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.063868][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.070020][T16463] __do_fast_syscall_32+0x129/0x180 [ 880.075206][T16463] do_fast_syscall_32+0x6a/0xc0 [ 880.080053][T16463] do_SYSENTER_32+0x73/0x90 [ 880.084546][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.090851][T16463] [ 880.093160][T16463] Uninit was stored to memory at: [ 880.098172][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 880.103879][T16463] __msan_chain_origin+0x50/0x90 [ 880.108823][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 880.114008][T16463] get_compat_msghdr+0x108/0x2b0 [ 880.118945][T16463] do_recvmmsg+0xdbb/0x22b0 [ 880.123434][T16463] __sys_recvmmsg+0x5dd/0x610 [ 880.128100][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 880.134170][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 880.140313][T16463] __do_fast_syscall_32+0x129/0x180 [ 880.145499][T16463] do_fast_syscall_32+0x6a/0xc0 [ 880.150337][T16463] do_SYSENTER_32+0x73/0x90 [ 880.154830][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.161133][T16463] [ 880.163445][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 880.170105][T16463] do_recvmmsg+0xbf/0x22b0 [ 880.174505][T16463] do_recvmmsg+0xbf/0x22b0 [ 881.495685][T16463] not chained 470000 origins [ 881.500322][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 881.508988][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.519043][T16463] Call Trace: [ 881.522347][T16463] dump_stack+0x21c/0x280 [ 881.526690][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 881.532419][T16463] ? kfree_sensitive+0xda/0x120 [ 881.537281][T16463] ? kmsan_get_metadata+0x116/0x180 [ 881.542485][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 881.548036][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 881.553336][T16463] ? kmsan_get_metadata+0x116/0x180 [ 881.558540][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 881.564092][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 881.570165][T16463] ? _copy_from_user+0x201/0x310 [ 881.575112][T16463] ? kmsan_get_metadata+0x116/0x180 [ 881.580313][T16463] __msan_chain_origin+0x50/0x90 [ 881.585254][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 881.590385][T16463] get_compat_msghdr+0x108/0x2b0 [ 881.595335][T16463] do_recvmmsg+0xdbb/0x22b0 [ 881.599872][T16463] ? kmsan_get_metadata+0x116/0x180 [ 881.605072][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 881.610706][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 881.616002][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 881.620765][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 881.625531][T16463] __sys_recvmmsg+0x5dd/0x610 [ 881.630229][T16463] ? kmsan_get_metadata+0x116/0x180 [ 881.635433][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.641510][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.647756][T16463] __do_fast_syscall_32+0x129/0x180 [ 881.652966][T16463] do_fast_syscall_32+0x6a/0xc0 [ 881.657821][T16463] do_SYSENTER_32+0x73/0x90 [ 881.662336][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.668660][T16463] RIP: 0023:0xf7fdc549 [ 881.672729][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.692417][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 881.700829][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 881.708797][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.716769][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.724740][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 881.732714][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.740690][T16463] Uninit was stored to memory at: [ 881.745716][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 881.751440][T16463] __msan_chain_origin+0x50/0x90 [ 881.756380][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 881.761493][T16463] get_compat_msghdr+0x108/0x2b0 [ 881.766429][T16463] do_recvmmsg+0xdbb/0x22b0 [ 881.770935][T16463] __sys_recvmmsg+0x5dd/0x610 [ 881.775612][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.781682][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.787835][T16463] __do_fast_syscall_32+0x129/0x180 [ 881.793034][T16463] do_fast_syscall_32+0x6a/0xc0 [ 881.797882][T16463] do_SYSENTER_32+0x73/0x90 [ 881.802388][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.808698][T16463] [ 881.811015][T16463] Uninit was stored to memory at: [ 881.816048][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 881.821770][T16463] __msan_chain_origin+0x50/0x90 [ 881.826715][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 881.831830][T16463] get_compat_msghdr+0x108/0x2b0 [ 881.836786][T16463] do_recvmmsg+0xdbb/0x22b0 [ 881.841286][T16463] __sys_recvmmsg+0x5dd/0x610 [ 881.845963][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.852027][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.858183][T16463] __do_fast_syscall_32+0x129/0x180 [ 881.863386][T16463] do_fast_syscall_32+0x6a/0xc0 [ 881.868242][T16463] do_SYSENTER_32+0x73/0x90 [ 881.872751][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.879065][T16463] [ 881.881386][T16463] Uninit was stored to memory at: [ 881.886412][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 881.892129][T16463] __msan_chain_origin+0x50/0x90 [ 881.897088][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 881.902199][T16463] get_compat_msghdr+0x108/0x2b0 [ 881.907137][T16463] do_recvmmsg+0xdbb/0x22b0 [ 881.911640][T16463] __sys_recvmmsg+0x5dd/0x610 [ 881.916321][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.922394][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.928547][T16463] __do_fast_syscall_32+0x129/0x180 [ 881.933746][T16463] do_fast_syscall_32+0x6a/0xc0 [ 881.938595][T16463] do_SYSENTER_32+0x73/0x90 [ 881.943101][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 881.949412][T16463] [ 881.951736][T16463] Uninit was stored to memory at: [ 881.956762][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 881.962484][T16463] __msan_chain_origin+0x50/0x90 [ 881.967419][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 881.972528][T16463] get_compat_msghdr+0x108/0x2b0 [ 881.977460][T16463] do_recvmmsg+0xdbb/0x22b0 [ 881.981960][T16463] __sys_recvmmsg+0x5dd/0x610 [ 881.986637][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 881.992706][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 881.998865][T16463] __do_fast_syscall_32+0x129/0x180 [ 882.004061][T16463] do_fast_syscall_32+0x6a/0xc0 [ 882.008913][T16463] do_SYSENTER_32+0x73/0x90 [ 882.013420][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.019739][T16463] [ 882.022057][T16463] Uninit was stored to memory at: [ 882.027085][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 882.032803][T16463] __msan_chain_origin+0x50/0x90 [ 882.037738][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 882.042848][T16463] get_compat_msghdr+0x108/0x2b0 [ 882.047786][T16463] do_recvmmsg+0xdbb/0x22b0 [ 882.052286][T16463] __sys_recvmmsg+0x5dd/0x610 [ 882.056962][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.063028][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.069182][T16463] __do_fast_syscall_32+0x129/0x180 [ 882.074387][T16463] do_fast_syscall_32+0x6a/0xc0 [ 882.079238][T16463] do_SYSENTER_32+0x73/0x90 [ 882.083748][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.090059][T16463] [ 882.092377][T16463] Uninit was stored to memory at: [ 882.097404][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 882.103121][T16463] __msan_chain_origin+0x50/0x90 [ 882.108058][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 882.113166][T16463] get_compat_msghdr+0x108/0x2b0 [ 882.118103][T16463] do_recvmmsg+0xdbb/0x22b0 [ 882.122606][T16463] __sys_recvmmsg+0x5dd/0x610 [ 882.127288][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.133355][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.139511][T16463] __do_fast_syscall_32+0x129/0x180 [ 882.144705][T16463] do_fast_syscall_32+0x6a/0xc0 [ 882.149555][T16463] do_SYSENTER_32+0x73/0x90 [ 882.154059][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.160373][T16463] [ 882.162695][T16463] Uninit was stored to memory at: [ 882.167720][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 882.173441][T16463] __msan_chain_origin+0x50/0x90 [ 882.178378][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 882.183489][T16463] get_compat_msghdr+0x108/0x2b0 [ 882.188419][T16463] do_recvmmsg+0xdbb/0x22b0 [ 882.192919][T16463] __sys_recvmmsg+0x5dd/0x610 [ 882.197599][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 882.203667][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 882.209824][T16463] __do_fast_syscall_32+0x129/0x180 [ 882.215020][T16463] do_fast_syscall_32+0x6a/0xc0 [ 882.219867][T16463] do_SYSENTER_32+0x73/0x90 [ 882.224377][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 882.230689][T16463] [ 882.233010][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 882.239682][T16463] do_recvmmsg+0xbf/0x22b0 [ 882.244096][T16463] do_recvmmsg+0xbf/0x22b0 [ 883.173126][T16456] not chained 480000 origins [ 883.177754][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 883.186420][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.196473][T16456] Call Trace: [ 883.199776][T16456] dump_stack+0x21c/0x280 [ 883.204127][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 883.209855][T16456] ? kfree_sensitive+0xda/0x120 [ 883.214714][T16456] ? kmsan_get_metadata+0x116/0x180 [ 883.219923][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 883.225483][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 883.230790][T16456] ? kmsan_get_metadata+0x116/0x180 [ 883.235997][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 883.241551][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 883.247631][T16456] ? _copy_from_user+0x201/0x310 [ 883.252594][T16456] ? kmsan_get_metadata+0x116/0x180 [ 883.257802][T16456] __msan_chain_origin+0x50/0x90 [ 883.262753][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.267887][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.272837][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.277355][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 883.283183][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 883.288491][T16456] ? kmsan_get_metadata+0x116/0x180 [ 883.293700][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 883.299340][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 883.304629][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 883.309395][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 883.314165][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.318857][T16456] ? kmsan_get_metadata+0x116/0x180 [ 883.324068][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.330260][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.336423][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.341632][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.346490][T16456] do_SYSENTER_32+0x73/0x90 [ 883.351005][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.357332][T16456] RIP: 0023:0xf7fdc549 [ 883.361429][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 883.381033][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 883.389453][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 883.397427][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.405399][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.413370][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 883.421346][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.429326][T16456] Uninit was stored to memory at: [ 883.434360][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.440089][T16456] __msan_chain_origin+0x50/0x90 [ 883.445030][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.450148][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.455087][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.459585][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.464263][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.470338][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.476499][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.481703][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.486556][T16456] do_SYSENTER_32+0x73/0x90 [ 883.491066][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.497380][T16456] [ 883.499704][T16456] Uninit was stored to memory at: [ 883.504739][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.510462][T16456] __msan_chain_origin+0x50/0x90 [ 883.515402][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.520518][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.525459][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.529968][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.534653][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.540727][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.546886][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.552085][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.556940][T16456] do_SYSENTER_32+0x73/0x90 [ 883.561454][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.567776][T16456] [ 883.570098][T16456] Uninit was stored to memory at: [ 883.575130][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.580851][T16456] __msan_chain_origin+0x50/0x90 [ 883.585792][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.590907][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.595846][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.600347][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.605029][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.611111][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.617271][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.622479][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.627338][T16456] do_SYSENTER_32+0x73/0x90 [ 883.631940][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.638254][T16456] [ 883.640579][T16456] Uninit was stored to memory at: [ 883.645608][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.651333][T16456] __msan_chain_origin+0x50/0x90 [ 883.656276][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.661394][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.666332][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.670893][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.675583][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.681654][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.687810][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.693012][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.697864][T16456] do_SYSENTER_32+0x73/0x90 [ 883.702375][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.708689][T16456] [ 883.711012][T16456] Uninit was stored to memory at: [ 883.716041][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.721847][T16456] __msan_chain_origin+0x50/0x90 [ 883.726787][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.731899][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.736832][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.741334][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.746010][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.752079][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.758243][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.763444][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.768300][T16456] do_SYSENTER_32+0x73/0x90 [ 883.772822][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.779136][T16456] [ 883.781463][T16456] Uninit was stored to memory at: [ 883.786489][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.792208][T16456] __msan_chain_origin+0x50/0x90 [ 883.797142][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.802257][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.807192][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.811692][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.816374][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.822448][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.828601][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.833806][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.838658][T16456] do_SYSENTER_32+0x73/0x90 [ 883.843165][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.849477][T16456] [ 883.851796][T16456] Uninit was stored to memory at: [ 883.856828][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 883.862544][T16456] __msan_chain_origin+0x50/0x90 [ 883.867488][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 883.872604][T16456] get_compat_msghdr+0x108/0x2b0 [ 883.877539][T16456] do_recvmmsg+0xdbb/0x22b0 [ 883.882045][T16456] __sys_recvmmsg+0x5dd/0x610 [ 883.886723][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 883.892793][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 883.898947][T16456] __do_fast_syscall_32+0x129/0x180 [ 883.904147][T16456] do_fast_syscall_32+0x6a/0xc0 [ 883.909000][T16456] do_SYSENTER_32+0x73/0x90 [ 883.913504][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 883.919815][T16456] [ 883.922137][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 883.928820][T16456] do_recvmmsg+0xbf/0x22b0 [ 883.933237][T16456] do_recvmmsg+0xbf/0x22b0 [ 885.314237][T16456] not chained 490000 origins [ 885.318871][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 885.327538][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.337611][T16456] Call Trace: [ 885.340905][T16456] dump_stack+0x21c/0x280 [ 885.345250][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 885.350976][T16456] ? kfree_sensitive+0xda/0x120 [ 885.355832][T16456] ? kmsan_get_metadata+0x116/0x180 [ 885.361036][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 885.366586][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 885.371880][T16456] ? kmsan_get_metadata+0x116/0x180 [ 885.377085][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 885.382641][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 885.388717][T16456] ? _copy_from_user+0x201/0x310 [ 885.393661][T16456] ? kmsan_get_metadata+0x116/0x180 [ 885.398892][T16456] __msan_chain_origin+0x50/0x90 [ 885.403841][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.408971][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.413917][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.418424][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 885.424259][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 885.429556][T16456] ? kmsan_get_metadata+0x116/0x180 [ 885.434756][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 885.440398][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 885.445683][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 885.450452][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 885.455224][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.459911][T16456] ? kmsan_get_metadata+0x116/0x180 [ 885.465114][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.471190][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.477353][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.482699][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.487559][T16456] do_SYSENTER_32+0x73/0x90 [ 885.492072][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.498400][T16456] RIP: 0023:0xf7fdc549 [ 885.502471][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 885.522076][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 885.530503][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 885.538481][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 885.546455][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.554428][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 885.562401][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.570376][T16456] Uninit was stored to memory at: [ 885.575419][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.581143][T16456] __msan_chain_origin+0x50/0x90 [ 885.586088][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.591199][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.596136][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.600638][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.605315][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.611389][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.617546][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.622745][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.627598][T16456] do_SYSENTER_32+0x73/0x90 [ 885.632108][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.638423][T16456] [ 885.640748][T16456] Uninit was stored to memory at: [ 885.645779][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.651500][T16456] __msan_chain_origin+0x50/0x90 [ 885.656439][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.661548][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.666482][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.670980][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.675753][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.681824][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.687978][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.693213][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.698065][T16456] do_SYSENTER_32+0x73/0x90 [ 885.702569][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.708880][T16456] [ 885.711206][T16456] Uninit was stored to memory at: [ 885.716242][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.721967][T16456] __msan_chain_origin+0x50/0x90 [ 885.726911][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.732024][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.736960][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.741468][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.746150][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.752224][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.758385][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.763583][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.768433][T16456] do_SYSENTER_32+0x73/0x90 [ 885.772939][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.779250][T16456] [ 885.781571][T16456] Uninit was stored to memory at: [ 885.786598][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.792319][T16456] __msan_chain_origin+0x50/0x90 [ 885.797254][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.802365][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.807299][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.811802][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.816481][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.822550][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.828711][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.833912][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.838763][T16456] do_SYSENTER_32+0x73/0x90 [ 885.843270][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.849581][T16456] [ 885.851910][T16456] Uninit was stored to memory at: [ 885.856939][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.862665][T16456] __msan_chain_origin+0x50/0x90 [ 885.867598][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.872710][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.877650][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.882207][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.886886][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.892952][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.899123][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.904330][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.909189][T16456] do_SYSENTER_32+0x73/0x90 [ 885.913725][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.920036][T16456] [ 885.922358][T16456] Uninit was stored to memory at: [ 885.927388][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 885.933107][T16456] __msan_chain_origin+0x50/0x90 [ 885.938042][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 885.943156][T16456] get_compat_msghdr+0x108/0x2b0 [ 885.948091][T16456] do_recvmmsg+0xdbb/0x22b0 [ 885.952592][T16456] __sys_recvmmsg+0x5dd/0x610 [ 885.957278][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 885.963348][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 885.969502][T16456] __do_fast_syscall_32+0x129/0x180 [ 885.974699][T16456] do_fast_syscall_32+0x6a/0xc0 [ 885.979552][T16456] do_SYSENTER_32+0x73/0x90 [ 885.984059][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 885.990374][T16456] [ 885.992697][T16456] Uninit was stored to memory at: [ 885.997723][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 886.003440][T16456] __msan_chain_origin+0x50/0x90 [ 886.008377][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 886.013490][T16456] get_compat_msghdr+0x108/0x2b0 [ 886.018426][T16456] do_recvmmsg+0xdbb/0x22b0 [ 886.022927][T16456] __sys_recvmmsg+0x5dd/0x610 [ 886.027601][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 886.033670][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 886.039832][T16456] __do_fast_syscall_32+0x129/0x180 [ 886.045031][T16456] do_fast_syscall_32+0x6a/0xc0 [ 886.049884][T16456] do_SYSENTER_32+0x73/0x90 [ 886.054391][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 886.060703][T16456] [ 886.063022][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 886.069691][T16456] do_recvmmsg+0xbf/0x22b0 [ 886.074102][T16456] do_recvmmsg+0xbf/0x22b0 [ 887.274151][T16456] not chained 500000 origins [ 887.278808][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 887.287475][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.297529][T16456] Call Trace: [ 887.300865][T16456] dump_stack+0x21c/0x280 [ 887.305208][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 887.310934][T16456] ? kfree_sensitive+0xda/0x120 [ 887.315788][T16456] ? kmsan_get_metadata+0x116/0x180 [ 887.320991][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 887.326552][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 887.331847][T16456] ? kmsan_get_metadata+0x116/0x180 [ 887.337046][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 887.342606][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 887.348679][T16456] ? _copy_from_user+0x201/0x310 [ 887.353620][T16456] ? kmsan_get_metadata+0x116/0x180 [ 887.358820][T16456] __msan_chain_origin+0x50/0x90 [ 887.363875][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.369002][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.373950][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.378460][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 887.384281][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 887.389577][T16456] ? kmsan_get_metadata+0x116/0x180 [ 887.394782][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 887.400419][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 887.405711][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 887.410479][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 887.415248][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.419931][T16456] ? kmsan_get_metadata+0x116/0x180 [ 887.425140][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.431222][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.437381][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.442587][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.447439][T16456] do_SYSENTER_32+0x73/0x90 [ 887.451950][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.458275][T16456] RIP: 0023:0xf7fdc549 [ 887.462346][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 887.481948][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 887.490366][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 887.498341][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.506398][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.514369][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 887.522342][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.530322][T16456] Uninit was stored to memory at: [ 887.535360][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.541090][T16456] __msan_chain_origin+0x50/0x90 [ 887.546031][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.551145][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.556086][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.560586][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.565268][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.571336][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.577488][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.582686][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.587534][T16456] do_SYSENTER_32+0x73/0x90 [ 887.592040][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.598707][T16456] [ 887.601030][T16456] Uninit was stored to memory at: [ 887.606059][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.611782][T16456] __msan_chain_origin+0x50/0x90 [ 887.616723][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.621836][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.626774][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.631286][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.635966][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.642038][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.648197][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.653401][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.658254][T16456] do_SYSENTER_32+0x73/0x90 [ 887.662760][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.669076][T16456] [ 887.671482][T16456] Uninit was stored to memory at: [ 887.676509][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.682235][T16456] __msan_chain_origin+0x50/0x90 [ 887.687176][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.692291][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.697231][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.701731][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.706411][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.712481][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.718638][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.723838][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.728689][T16456] do_SYSENTER_32+0x73/0x90 [ 887.733194][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.739550][T16456] [ 887.741878][T16456] Uninit was stored to memory at: [ 887.746905][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.752624][T16456] __msan_chain_origin+0x50/0x90 [ 887.757561][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.762674][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.767607][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.772106][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.776781][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.782850][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.789008][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.794216][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.799069][T16456] do_SYSENTER_32+0x73/0x90 [ 887.803580][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.809891][T16456] [ 887.812214][T16456] Uninit was stored to memory at: [ 887.817249][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.822966][T16456] __msan_chain_origin+0x50/0x90 [ 887.827904][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.833018][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.837955][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.842460][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.847141][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.853214][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.859372][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.864572][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.869423][T16456] do_SYSENTER_32+0x73/0x90 [ 887.873931][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.880243][T16456] [ 887.882564][T16456] Uninit was stored to memory at: [ 887.887589][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.893310][T16456] __msan_chain_origin+0x50/0x90 [ 887.898254][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.903367][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.908306][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.912807][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.917485][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.923549][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 887.929706][T16456] __do_fast_syscall_32+0x129/0x180 [ 887.934905][T16456] do_fast_syscall_32+0x6a/0xc0 [ 887.939759][T16456] do_SYSENTER_32+0x73/0x90 [ 887.944274][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 887.950584][T16456] [ 887.952905][T16456] Uninit was stored to memory at: [ 887.957935][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 887.963653][T16456] __msan_chain_origin+0x50/0x90 [ 887.968591][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 887.973700][T16456] get_compat_msghdr+0x108/0x2b0 [ 887.978639][T16456] do_recvmmsg+0xdbb/0x22b0 [ 887.983142][T16456] __sys_recvmmsg+0x5dd/0x610 [ 887.987822][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 887.993895][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 888.000051][T16456] __do_fast_syscall_32+0x129/0x180 [ 888.005250][T16456] do_fast_syscall_32+0x6a/0xc0 [ 888.010101][T16456] do_SYSENTER_32+0x73/0x90 [ 888.014607][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 888.020917][T16456] [ 888.023241][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 888.029912][T16456] do_recvmmsg+0xbf/0x22b0 [ 888.034323][T16456] do_recvmmsg+0xbf/0x22b0 [ 889.456301][T16463] not chained 510000 origins [ 889.460930][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 889.469596][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.479647][T16463] Call Trace: [ 889.482946][T16463] dump_stack+0x21c/0x280 [ 889.487291][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 889.493015][T16463] ? kfree_sensitive+0xda/0x120 [ 889.497874][T16463] ? kmsan_get_metadata+0x116/0x180 [ 889.503075][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 889.508628][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 889.513921][T16463] ? kmsan_get_metadata+0x116/0x180 [ 889.519130][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 889.524679][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 889.530752][T16463] ? _copy_from_user+0x201/0x310 [ 889.535793][T16463] ? kmsan_get_metadata+0x116/0x180 [ 889.540995][T16463] __msan_chain_origin+0x50/0x90 [ 889.545938][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 889.551067][T16463] get_compat_msghdr+0x108/0x2b0 [ 889.556017][T16463] do_recvmmsg+0xdbb/0x22b0 [ 889.560546][T16463] ? kmsan_get_metadata+0x116/0x180 [ 889.565752][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 889.571388][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 889.576677][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 889.581443][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 889.586214][T16463] __sys_recvmmsg+0x5dd/0x610 [ 889.590902][T16463] ? kmsan_get_metadata+0x116/0x180 [ 889.596108][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 889.602186][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 889.608344][T16463] __do_fast_syscall_32+0x129/0x180 [ 889.613548][T16463] do_fast_syscall_32+0x6a/0xc0 [ 889.618407][T16463] do_SYSENTER_32+0x73/0x90 [ 889.622920][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 889.629362][T16463] RIP: 0023:0xf7fdc549 [ 889.633440][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 889.653046][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 889.661458][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 889.669427][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.677397][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.685370][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 889.693345][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.701319][T16463] Uninit was stored to memory at: [ 889.706457][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 889.712182][T16463] __msan_chain_origin+0x50/0x90 [ 889.717121][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 889.722237][T16463] get_compat_msghdr+0x108/0x2b0 [ 889.727174][T16463] do_recvmmsg+0xdbb/0x22b0 [ 889.731680][T16463] __sys_recvmmsg+0x5dd/0x610 [ 889.736362][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 889.742427][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 889.748589][T16463] __do_fast_syscall_32+0x129/0x180 [ 889.753789][T16463] do_fast_syscall_32+0x6a/0xc0 [ 889.758640][T16463] do_SYSENTER_32+0x73/0x90 [ 889.763141][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 889.769454][T16463] [ 889.771772][T16463] Uninit was stored to memory at: [ 889.776803][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 889.782526][T16463] __msan_chain_origin+0x50/0x90 [ 889.787467][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 889.792578][T16463] get_compat_msghdr+0x108/0x2b0 [ 889.797517][T16463] do_recvmmsg+0xdbb/0x22b0 [ 889.802012][T16463] __sys_recvmmsg+0x5dd/0x610 [ 889.806690][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 889.812762][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 889.818920][T16463] __do_fast_syscall_32+0x129/0x180 [ 889.824117][T16463] do_fast_syscall_32+0x6a/0xc0 [ 889.828977][T16463] do_SYSENTER_32+0x73/0x90 [ 889.833480][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 889.839796][T16463] [ 889.842117][T16463] Uninit was stored to memory at: [ 889.847146][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 889.852867][T16463] __msan_chain_origin+0x50/0x90 [ 889.857805][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 889.862913][T16463] get_compat_msghdr+0x108/0x2b0 [ 889.867850][T16463] do_recvmmsg+0xdbb/0x22b0 [ 889.872354][T16463] __sys_recvmmsg+0x5dd/0x610 [ 889.877031][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 889.883098][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 889.889253][T16463] __do_fast_syscall_32+0x129/0x180 [ 889.894452][T16463] do_fast_syscall_32+0x6a/0xc0 [ 889.899308][T16463] do_SYSENTER_32+0x73/0x90 [ 889.903823][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 889.910139][T16463] [ 889.912458][T16463] Uninit was stored to memory at: [ 889.917492][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 889.923218][T16463] __msan_chain_origin+0x50/0x90 [ 889.928161][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 889.933270][T16463] get_compat_msghdr+0x108/0x2b0 [ 889.938206][T16463] do_recvmmsg+0xdbb/0x22b0 [ 889.942708][T16463] __sys_recvmmsg+0x5dd/0x610 [ 889.947385][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 889.953452][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 889.959604][T16463] __do_fast_syscall_32+0x129/0x180 [ 889.964803][T16463] do_fast_syscall_32+0x6a/0xc0 [ 889.969659][T16463] do_SYSENTER_32+0x73/0x90 [ 889.974163][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 889.980473][T16463] [ 889.982792][T16463] Uninit was stored to memory at: [ 889.987836][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 889.993556][T16463] __msan_chain_origin+0x50/0x90 [ 889.998493][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 890.003603][T16463] get_compat_msghdr+0x108/0x2b0 [ 890.008542][T16463] do_recvmmsg+0xdbb/0x22b0 [ 890.013044][T16463] __sys_recvmmsg+0x5dd/0x610 [ 890.017723][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 890.023792][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 890.029949][T16463] __do_fast_syscall_32+0x129/0x180 [ 890.035158][T16463] do_fast_syscall_32+0x6a/0xc0 [ 890.040028][T16463] do_SYSENTER_32+0x73/0x90 [ 890.044544][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 890.050855][T16463] [ 890.053182][T16463] Uninit was stored to memory at: [ 890.058215][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 890.063941][T16463] __msan_chain_origin+0x50/0x90 [ 890.068889][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 890.074002][T16463] get_compat_msghdr+0x108/0x2b0 [ 890.078939][T16463] do_recvmmsg+0xdbb/0x22b0 [ 890.083438][T16463] __sys_recvmmsg+0x5dd/0x610 [ 890.088119][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 890.094187][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 890.100349][T16463] __do_fast_syscall_32+0x129/0x180 [ 890.105557][T16463] do_fast_syscall_32+0x6a/0xc0 [ 890.110412][T16463] do_SYSENTER_32+0x73/0x90 [ 890.114928][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 890.121242][T16463] [ 890.123563][T16463] Uninit was stored to memory at: [ 890.128591][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 890.134311][T16463] __msan_chain_origin+0x50/0x90 [ 890.139247][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 890.144360][T16463] get_compat_msghdr+0x108/0x2b0 [ 890.149317][T16463] do_recvmmsg+0xdbb/0x22b0 [ 890.153822][T16463] __sys_recvmmsg+0x5dd/0x610 [ 890.158506][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 890.164574][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 890.170730][T16463] __do_fast_syscall_32+0x129/0x180 [ 890.175928][T16463] do_fast_syscall_32+0x6a/0xc0 [ 890.180782][T16463] do_SYSENTER_32+0x73/0x90 [ 890.185289][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 890.191864][T16463] [ 890.194186][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 890.200861][T16463] do_recvmmsg+0xbf/0x22b0 [ 890.205274][T16463] do_recvmmsg+0xbf/0x22b0 [ 891.155224][T16463] not chained 520000 origins [ 891.159899][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 891.168562][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.178609][T16463] Call Trace: [ 891.181907][T16463] dump_stack+0x21c/0x280 [ 891.186250][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 891.191973][T16463] ? kfree_sensitive+0xda/0x120 [ 891.196828][T16463] ? kmsan_get_metadata+0x116/0x180 [ 891.202029][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 891.207586][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 891.212878][T16463] ? kmsan_get_metadata+0x116/0x180 [ 891.218084][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 891.223635][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 891.229708][T16463] ? _copy_from_user+0x201/0x310 [ 891.234652][T16463] ? kmsan_get_metadata+0x116/0x180 [ 891.239853][T16463] __msan_chain_origin+0x50/0x90 [ 891.244799][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.249934][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.254879][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.259425][T16463] ? kmsan_get_metadata+0x116/0x180 [ 891.264632][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 891.270272][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 891.275587][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 891.280351][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 891.285119][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.289807][T16463] ? kmsan_get_metadata+0x116/0x180 [ 891.295010][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.301089][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.307253][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.312459][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.317316][T16463] do_SYSENTER_32+0x73/0x90 [ 891.321831][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.328153][T16463] RIP: 0023:0xf7fdc549 [ 891.332223][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 891.351825][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 891.360242][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 891.368213][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 891.376189][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.384163][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 891.392131][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 891.400104][T16463] Uninit was stored to memory at: [ 891.405136][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.410857][T16463] __msan_chain_origin+0x50/0x90 [ 891.415792][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.420905][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.425840][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.430341][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.435019][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.441088][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.447246][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.452449][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.457298][T16463] do_SYSENTER_32+0x73/0x90 [ 891.461807][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.468126][T16463] [ 891.470450][T16463] Uninit was stored to memory at: [ 891.475475][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.481196][T16463] __msan_chain_origin+0x50/0x90 [ 891.486135][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.491243][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.496174][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.500685][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.505369][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.511440][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.517591][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.522791][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.527641][T16463] do_SYSENTER_32+0x73/0x90 [ 891.532165][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.538481][T16463] [ 891.540806][T16463] Uninit was stored to memory at: [ 891.545837][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.551562][T16463] __msan_chain_origin+0x50/0x90 [ 891.556502][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.561873][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.566813][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.571316][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.575998][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.582068][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.588224][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.593429][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.598278][T16463] do_SYSENTER_32+0x73/0x90 [ 891.602786][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.609096][T16463] [ 891.611416][T16463] Uninit was stored to memory at: [ 891.616446][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.622171][T16463] __msan_chain_origin+0x50/0x90 [ 891.627112][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.632225][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.637167][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.641672][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.646352][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.652422][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.658578][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.663777][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.668630][T16463] do_SYSENTER_32+0x73/0x90 [ 891.673133][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.679450][T16463] [ 891.681767][T16463] Uninit was stored to memory at: [ 891.686794][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.692513][T16463] __msan_chain_origin+0x50/0x90 [ 891.697452][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.702672][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.707614][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.712126][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.716808][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.722873][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.729029][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.734226][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.739077][T16463] do_SYSENTER_32+0x73/0x90 [ 891.743582][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.749899][T16463] [ 891.752222][T16463] Uninit was stored to memory at: [ 891.757247][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.762966][T16463] __msan_chain_origin+0x50/0x90 [ 891.767902][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.773014][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.777951][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.782454][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.787128][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.793206][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.799362][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.804560][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.809412][T16463] do_SYSENTER_32+0x73/0x90 [ 891.813915][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.820226][T16463] [ 891.822548][T16463] Uninit was stored to memory at: [ 891.827578][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 891.833299][T16463] __msan_chain_origin+0x50/0x90 [ 891.838237][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 891.843375][T16463] get_compat_msghdr+0x108/0x2b0 [ 891.848327][T16463] do_recvmmsg+0xdbb/0x22b0 [ 891.852833][T16463] __sys_recvmmsg+0x5dd/0x610 [ 891.857508][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 891.863573][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 891.869730][T16463] __do_fast_syscall_32+0x129/0x180 [ 891.875015][T16463] do_fast_syscall_32+0x6a/0xc0 [ 891.879867][T16463] do_SYSENTER_32+0x73/0x90 [ 891.884372][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 891.890683][T16463] [ 891.893006][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 891.899679][T16463] do_recvmmsg+0xbf/0x22b0 [ 891.904093][T16463] do_recvmmsg+0xbf/0x22b0 [ 892.692016][T16463] not chained 530000 origins [ 892.696650][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 892.705322][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.715376][T16463] Call Trace: [ 892.718677][T16463] dump_stack+0x21c/0x280 [ 892.723023][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 892.728759][T16463] ? kfree_sensitive+0xda/0x120 [ 892.733618][T16463] ? kmsan_get_metadata+0x116/0x180 [ 892.738821][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 892.744381][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 892.749687][T16463] ? kmsan_get_metadata+0x116/0x180 [ 892.754936][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 892.760525][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 892.766604][T16463] ? _copy_from_user+0x201/0x310 [ 892.771548][T16463] ? kmsan_get_metadata+0x116/0x180 [ 892.776750][T16463] __msan_chain_origin+0x50/0x90 [ 892.781702][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 892.786834][T16463] get_compat_msghdr+0x108/0x2b0 [ 892.791785][T16463] do_recvmmsg+0xdbb/0x22b0 [ 892.796327][T16463] ? kmsan_get_metadata+0x116/0x180 [ 892.801535][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 892.807184][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 892.812477][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 892.817242][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 892.822011][T16463] __sys_recvmmsg+0x5dd/0x610 [ 892.826698][T16463] ? kmsan_get_metadata+0x116/0x180 [ 892.831904][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 892.838106][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 892.844270][T16463] __do_fast_syscall_32+0x129/0x180 [ 892.849485][T16463] do_fast_syscall_32+0x6a/0xc0 [ 892.854347][T16463] do_SYSENTER_32+0x73/0x90 [ 892.858860][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 892.865182][T16463] RIP: 0023:0xf7fdc549 [ 892.869261][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 892.888978][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 892.897399][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 892.905379][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.913357][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.921331][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 892.929313][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.937302][T16463] Uninit was stored to memory at: [ 892.942344][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 892.948071][T16463] __msan_chain_origin+0x50/0x90 [ 892.953015][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 892.958130][T16463] get_compat_msghdr+0x108/0x2b0 [ 892.963066][T16463] do_recvmmsg+0xdbb/0x22b0 [ 892.967578][T16463] __sys_recvmmsg+0x5dd/0x610 [ 892.972259][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 892.978335][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 892.984493][T16463] __do_fast_syscall_32+0x129/0x180 [ 892.989697][T16463] do_fast_syscall_32+0x6a/0xc0 [ 892.994553][T16463] do_SYSENTER_32+0x73/0x90 [ 892.999079][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.005395][T16463] [ 893.007718][T16463] Uninit was stored to memory at: [ 893.012753][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.018481][T16463] __msan_chain_origin+0x50/0x90 [ 893.023424][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.028537][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.033475][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.037977][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.042660][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.048732][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.054893][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.060095][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.064947][T16463] do_SYSENTER_32+0x73/0x90 [ 893.069455][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.075765][T16463] [ 893.078087][T16463] Uninit was stored to memory at: [ 893.083115][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.088833][T16463] __msan_chain_origin+0x50/0x90 [ 893.093771][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.098880][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.103815][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.108329][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.113007][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.119074][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.125228][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.130457][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.135310][T16463] do_SYSENTER_32+0x73/0x90 [ 893.139814][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.146129][T16463] [ 893.148449][T16463] Uninit was stored to memory at: [ 893.153501][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.159223][T16463] __msan_chain_origin+0x50/0x90 [ 893.164165][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.169279][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.174216][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.178717][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.183398][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.189468][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.195633][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.200842][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.205697][T16463] do_SYSENTER_32+0x73/0x90 [ 893.210205][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.216545][T16463] [ 893.218862][T16463] Uninit was stored to memory at: [ 893.223891][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.229611][T16463] __msan_chain_origin+0x50/0x90 [ 893.234555][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.239684][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.244627][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.249127][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.253810][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.259875][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.266032][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.271233][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.276084][T16463] do_SYSENTER_32+0x73/0x90 [ 893.280621][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.286937][T16463] [ 893.289257][T16463] Uninit was stored to memory at: [ 893.294287][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.300008][T16463] __msan_chain_origin+0x50/0x90 [ 893.304946][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.310056][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.315023][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.319524][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.324202][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.330273][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.336427][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.341631][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.346484][T16463] do_SYSENTER_32+0x73/0x90 [ 893.350992][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.357303][T16463] [ 893.359627][T16463] Uninit was stored to memory at: [ 893.364658][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 893.370378][T16463] __msan_chain_origin+0x50/0x90 [ 893.375315][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 893.380430][T16463] get_compat_msghdr+0x108/0x2b0 [ 893.385365][T16463] do_recvmmsg+0xdbb/0x22b0 [ 893.389955][T16463] __sys_recvmmsg+0x5dd/0x610 [ 893.394638][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 893.400705][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 893.406860][T16463] __do_fast_syscall_32+0x129/0x180 [ 893.412057][T16463] do_fast_syscall_32+0x6a/0xc0 [ 893.416908][T16463] do_SYSENTER_32+0x73/0x90 [ 893.421421][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 893.427731][T16463] [ 893.430052][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 893.436721][T16463] do_recvmmsg+0xbf/0x22b0 [ 893.441135][T16463] do_recvmmsg+0xbf/0x22b0 [ 894.780977][T16463] not chained 540000 origins [ 894.785619][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 894.794288][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.804340][T16463] Call Trace: [ 894.807642][T16463] dump_stack+0x21c/0x280 [ 894.811995][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 894.817727][T16463] ? kfree_sensitive+0xda/0x120 [ 894.822581][T16463] ? kmsan_get_metadata+0x116/0x180 [ 894.827786][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 894.833350][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 894.838645][T16463] ? kmsan_get_metadata+0x116/0x180 [ 894.843852][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 894.849404][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 894.855484][T16463] ? _copy_from_user+0x201/0x310 [ 894.860431][T16463] ? kmsan_get_metadata+0x116/0x180 [ 894.865635][T16463] __msan_chain_origin+0x50/0x90 [ 894.870584][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 894.875718][T16463] get_compat_msghdr+0x108/0x2b0 [ 894.880675][T16463] do_recvmmsg+0xdbb/0x22b0 [ 894.885210][T16463] ? kmsan_get_metadata+0x116/0x180 [ 894.890422][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 894.896063][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 894.901357][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 894.906130][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 894.910906][T16463] __sys_recvmmsg+0x5dd/0x610 [ 894.915596][T16463] ? kmsan_get_metadata+0x116/0x180 [ 894.920804][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 894.926883][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 894.933043][T16463] __do_fast_syscall_32+0x129/0x180 [ 894.938255][T16463] do_fast_syscall_32+0x6a/0xc0 [ 894.943123][T16463] do_SYSENTER_32+0x73/0x90 [ 894.947636][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 894.953963][T16463] RIP: 0023:0xf7fdc549 [ 894.958035][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 894.977654][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 894.986071][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 894.994048][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.002051][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.010036][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 895.018007][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.025985][T16463] Uninit was stored to memory at: [ 895.031021][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.036747][T16463] __msan_chain_origin+0x50/0x90 [ 895.041690][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.046802][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.051741][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.056243][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.060920][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.066987][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.073143][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.078350][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.083204][T16463] do_SYSENTER_32+0x73/0x90 [ 895.087713][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.094026][T16463] [ 895.096347][T16463] Uninit was stored to memory at: [ 895.101377][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.107131][T16463] __msan_chain_origin+0x50/0x90 [ 895.112072][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.117191][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.122128][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.126632][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.131317][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.137384][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.144066][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.149272][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.154135][T16463] do_SYSENTER_32+0x73/0x90 [ 895.158642][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.164954][T16463] [ 895.167278][T16463] Uninit was stored to memory at: [ 895.172312][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.178032][T16463] __msan_chain_origin+0x50/0x90 [ 895.182971][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.188090][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.193034][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.197543][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.202222][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.208293][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.214454][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.219653][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.224509][T16463] do_SYSENTER_32+0x73/0x90 [ 895.229016][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.235331][T16463] [ 895.237655][T16463] Uninit was stored to memory at: [ 895.242687][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.248409][T16463] __msan_chain_origin+0x50/0x90 [ 895.253355][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.258469][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.263405][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.267908][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.272586][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.278656][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.284814][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.290015][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.294866][T16463] do_SYSENTER_32+0x73/0x90 [ 895.299371][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.306206][T16463] [ 895.308525][T16463] Uninit was stored to memory at: [ 895.313552][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.319271][T16463] __msan_chain_origin+0x50/0x90 [ 895.324204][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.329357][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.334292][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.338793][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.343471][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.349545][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.355700][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.360899][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.365749][T16463] do_SYSENTER_32+0x73/0x90 [ 895.370257][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.376567][T16463] [ 895.378887][T16463] Uninit was stored to memory at: [ 895.383919][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.389641][T16463] __msan_chain_origin+0x50/0x90 [ 895.394583][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.399697][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.404637][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.409139][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.413832][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.419913][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.426078][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.431278][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.436132][T16463] do_SYSENTER_32+0x73/0x90 [ 895.440640][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.446954][T16463] [ 895.449274][T16463] Uninit was stored to memory at: [ 895.454303][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 895.460028][T16463] __msan_chain_origin+0x50/0x90 [ 895.464972][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 895.470087][T16463] get_compat_msghdr+0x108/0x2b0 [ 895.475024][T16463] do_recvmmsg+0xdbb/0x22b0 [ 895.479526][T16463] __sys_recvmmsg+0x5dd/0x610 [ 895.484207][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 895.490280][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 895.496436][T16463] __do_fast_syscall_32+0x129/0x180 [ 895.501638][T16463] do_fast_syscall_32+0x6a/0xc0 [ 895.506496][T16463] do_SYSENTER_32+0x73/0x90 [ 895.511006][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 895.517321][T16463] [ 895.519643][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 895.526517][T16463] do_recvmmsg+0xbf/0x22b0 [ 895.530929][T16463] do_recvmmsg+0xbf/0x22b0 [ 896.721175][T16456] not chained 550000 origins [ 896.725815][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 896.734480][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.744531][T16456] Call Trace: [ 896.747829][T16456] dump_stack+0x21c/0x280 [ 896.752174][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 896.757933][T16456] ? kfree_sensitive+0xda/0x120 [ 896.762787][T16456] ? kmsan_get_metadata+0x116/0x180 [ 896.767992][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 896.773546][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 896.778844][T16456] ? kmsan_get_metadata+0x116/0x180 [ 896.784054][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 896.789604][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 896.795676][T16456] ? _copy_from_user+0x201/0x310 [ 896.800621][T16456] ? kmsan_get_metadata+0x116/0x180 [ 896.805824][T16456] __msan_chain_origin+0x50/0x90 [ 896.810769][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 896.815907][T16456] get_compat_msghdr+0x108/0x2b0 [ 896.820856][T16456] do_recvmmsg+0xdbb/0x22b0 [ 896.825370][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 896.831193][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 896.836490][T16456] ? kmsan_get_metadata+0x116/0x180 [ 896.841699][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 896.847343][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 896.852631][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 896.857394][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 896.862165][T16456] __sys_recvmmsg+0x5dd/0x610 [ 896.866853][T16456] ? kmsan_get_metadata+0x116/0x180 [ 896.872070][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 896.878154][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 896.884317][T16456] __do_fast_syscall_32+0x129/0x180 [ 896.889526][T16456] do_fast_syscall_32+0x6a/0xc0 [ 896.894388][T16456] do_SYSENTER_32+0x73/0x90 [ 896.898902][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 896.905225][T16456] RIP: 0023:0xf7fdc549 [ 896.909304][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 896.928907][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 896.937321][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 896.945292][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 896.953263][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 896.961237][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 896.969210][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 896.977188][T16456] Uninit was stored to memory at: [ 896.982223][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 896.987951][T16456] __msan_chain_origin+0x50/0x90 [ 896.992895][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 896.998013][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.002953][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.007457][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.012137][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.018206][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.024369][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.029578][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.034428][T16456] do_SYSENTER_32+0x73/0x90 [ 897.038943][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.045254][T16456] [ 897.047574][T16456] Uninit was stored to memory at: [ 897.052612][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.058342][T16456] __msan_chain_origin+0x50/0x90 [ 897.063310][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.068420][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.073357][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.077865][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.082547][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.088618][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.094772][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.099975][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.104829][T16456] do_SYSENTER_32+0x73/0x90 [ 897.109338][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.115649][T16456] [ 897.117971][T16456] Uninit was stored to memory at: [ 897.123008][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.128728][T16456] __msan_chain_origin+0x50/0x90 [ 897.133664][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.138773][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.143707][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.148206][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.152892][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.158963][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.165116][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.170319][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.175170][T16456] do_SYSENTER_32+0x73/0x90 [ 897.179677][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.185989][T16456] [ 897.188313][T16456] Uninit was stored to memory at: [ 897.193354][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.199072][T16456] __msan_chain_origin+0x50/0x90 [ 897.204007][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.209116][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.214051][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.218558][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.223240][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.229307][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.235461][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.240659][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.245508][T16456] do_SYSENTER_32+0x73/0x90 [ 897.250018][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.256330][T16456] [ 897.258649][T16456] Uninit was stored to memory at: [ 897.263674][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.269397][T16456] __msan_chain_origin+0x50/0x90 [ 897.274352][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.279465][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.284418][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.288919][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.293595][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.299663][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.305818][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.311025][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.315872][T16456] do_SYSENTER_32+0x73/0x90 [ 897.320376][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.326690][T16456] [ 897.329014][T16456] Uninit was stored to memory at: [ 897.334044][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.339767][T16456] __msan_chain_origin+0x50/0x90 [ 897.344741][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.349858][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.354798][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.359308][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.363988][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.370058][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.376215][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.381414][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.386269][T16456] do_SYSENTER_32+0x73/0x90 [ 897.390775][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.397089][T16456] [ 897.399413][T16456] Uninit was stored to memory at: [ 897.404442][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 897.410161][T16456] __msan_chain_origin+0x50/0x90 [ 897.415110][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 897.420242][T16456] get_compat_msghdr+0x108/0x2b0 [ 897.425184][T16456] do_recvmmsg+0xdbb/0x22b0 [ 897.429690][T16456] __sys_recvmmsg+0x5dd/0x610 [ 897.434369][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 897.440439][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 897.446600][T16456] __do_fast_syscall_32+0x129/0x180 [ 897.451810][T16456] do_fast_syscall_32+0x6a/0xc0 [ 897.456673][T16456] do_SYSENTER_32+0x73/0x90 [ 897.461182][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 897.467494][T16456] [ 897.469825][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 897.476503][T16456] do_recvmmsg+0xbf/0x22b0 [ 897.480931][T16456] do_recvmmsg+0xbf/0x22b0 [ 898.677488][T16463] not chained 560000 origins [ 898.682160][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 898.690842][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.700898][T16463] Call Trace: [ 898.704208][T16463] dump_stack+0x21c/0x280 [ 898.708553][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 898.714282][T16463] ? kfree_sensitive+0xda/0x120 [ 898.719141][T16463] ? kmsan_get_metadata+0x116/0x180 [ 898.724344][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 898.729900][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 898.735205][T16463] ? kmsan_get_metadata+0x116/0x180 [ 898.740411][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 898.745961][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 898.752034][T16463] ? _copy_from_user+0x201/0x310 [ 898.756981][T16463] ? kmsan_get_metadata+0x116/0x180 [ 898.762188][T16463] __msan_chain_origin+0x50/0x90 [ 898.767144][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 898.772372][T16463] get_compat_msghdr+0x108/0x2b0 [ 898.777318][T16463] do_recvmmsg+0xdbb/0x22b0 [ 898.781881][T16463] ? kmsan_get_metadata+0x116/0x180 [ 898.787089][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 898.792728][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 898.798018][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 898.802784][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 898.807554][T16463] __sys_recvmmsg+0x5dd/0x610 [ 898.812252][T16463] ? kmsan_get_metadata+0x116/0x180 [ 898.817464][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 898.823562][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 898.829724][T16463] __do_fast_syscall_32+0x129/0x180 [ 898.834933][T16463] do_fast_syscall_32+0x6a/0xc0 [ 898.839791][T16463] do_SYSENTER_32+0x73/0x90 [ 898.844305][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 898.850629][T16463] RIP: 0023:0xf7fdc549 [ 898.854704][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 898.874308][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 898.882726][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 898.890725][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 898.898702][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 898.906691][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 898.914675][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 898.922660][T16463] Uninit was stored to memory at: [ 898.927696][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 898.933420][T16463] __msan_chain_origin+0x50/0x90 [ 898.938363][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 898.943477][T16463] get_compat_msghdr+0x108/0x2b0 [ 898.948415][T16463] do_recvmmsg+0xdbb/0x22b0 [ 898.952916][T16463] __sys_recvmmsg+0x5dd/0x610 [ 898.957595][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 898.963664][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 898.969820][T16463] __do_fast_syscall_32+0x129/0x180 [ 898.975020][T16463] do_fast_syscall_32+0x6a/0xc0 [ 898.979872][T16463] do_SYSENTER_32+0x73/0x90 [ 898.984382][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 898.990697][T16463] [ 898.993018][T16463] Uninit was stored to memory at: [ 898.998050][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.003774][T16463] __msan_chain_origin+0x50/0x90 [ 899.008805][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.013922][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.018860][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.023362][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.028047][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.034115][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.040271][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.045465][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.050315][T16463] do_SYSENTER_32+0x73/0x90 [ 899.054822][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.061136][T16463] [ 899.063462][T16463] Uninit was stored to memory at: [ 899.068486][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.074202][T16463] __msan_chain_origin+0x50/0x90 [ 899.079141][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.084261][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.089198][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.093697][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.098374][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.104441][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.110596][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.115795][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.120646][T16463] do_SYSENTER_32+0x73/0x90 [ 899.125148][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.131466][T16463] [ 899.133787][T16463] Uninit was stored to memory at: [ 899.138817][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.144537][T16463] __msan_chain_origin+0x50/0x90 [ 899.149479][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.154589][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.159524][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.164028][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.168710][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.174780][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.180934][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.186132][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.190986][T16463] do_SYSENTER_32+0x73/0x90 [ 899.195667][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.201988][T16463] [ 899.204312][T16463] Uninit was stored to memory at: [ 899.209341][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.215060][T16463] __msan_chain_origin+0x50/0x90 [ 899.220000][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.225117][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.230057][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.234563][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.239251][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.245360][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.251607][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.256808][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.261658][T16463] do_SYSENTER_32+0x73/0x90 [ 899.266172][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.272484][T16463] [ 899.274803][T16463] Uninit was stored to memory at: [ 899.279831][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.285552][T16463] __msan_chain_origin+0x50/0x90 [ 899.290491][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.295600][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.300532][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.305033][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.309712][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.315784][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.321938][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.327146][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.332005][T16463] do_SYSENTER_32+0x73/0x90 [ 899.336509][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.342820][T16463] [ 899.345142][T16463] Uninit was stored to memory at: [ 899.350168][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 899.355885][T16463] __msan_chain_origin+0x50/0x90 [ 899.360823][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 899.365934][T16463] get_compat_msghdr+0x108/0x2b0 [ 899.370870][T16463] do_recvmmsg+0xdbb/0x22b0 [ 899.375373][T16463] __sys_recvmmsg+0x5dd/0x610 [ 899.380052][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 899.386133][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 899.392288][T16463] __do_fast_syscall_32+0x129/0x180 [ 899.397486][T16463] do_fast_syscall_32+0x6a/0xc0 [ 899.402338][T16463] do_SYSENTER_32+0x73/0x90 [ 899.406849][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 899.413163][T16463] [ 899.415484][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 899.422161][T16463] do_recvmmsg+0xbf/0x22b0 [ 899.426573][T16463] do_recvmmsg+0xbf/0x22b0 [ 900.627484][T16463] not chained 570000 origins [ 900.632116][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 900.640957][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.651007][T16463] Call Trace: [ 900.654306][T16463] dump_stack+0x21c/0x280 [ 900.658654][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 900.664415][T16463] ? do_user_addr_fault+0x106b/0x16a0 [ 900.669819][T16463] ? kmsan_get_metadata+0x116/0x180 [ 900.675022][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 900.680579][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 900.686655][T16463] ? _copy_from_user+0x201/0x310 [ 900.691607][T16463] ? kmsan_get_metadata+0x116/0x180 [ 900.696812][T16463] __msan_chain_origin+0x50/0x90 [ 900.701760][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 900.706911][T16463] get_compat_msghdr+0x108/0x2b0 [ 900.711863][T16463] do_recvmmsg+0xdbb/0x22b0 [ 900.716396][T16463] ? kmsan_get_metadata+0x116/0x180 [ 900.721600][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 900.727237][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 900.732526][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 900.737290][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 900.742059][T16463] __sys_recvmmsg+0x5dd/0x610 [ 900.746755][T16463] ? kmsan_get_metadata+0x116/0x180 [ 900.751963][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 900.758039][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 900.764202][T16463] __do_fast_syscall_32+0x129/0x180 [ 900.769412][T16463] do_fast_syscall_32+0x6a/0xc0 [ 900.774266][T16463] do_SYSENTER_32+0x73/0x90 [ 900.778777][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 900.785105][T16463] RIP: 0023:0xf7fdc549 [ 900.789176][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 900.808776][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 900.817189][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 900.825160][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 900.833130][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 900.841104][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 900.849076][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 900.857060][T16463] Uninit was stored to memory at: [ 900.862105][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 900.867828][T16463] __msan_chain_origin+0x50/0x90 [ 900.872934][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 900.878046][T16463] get_compat_msghdr+0x108/0x2b0 [ 900.882987][T16463] do_recvmmsg+0xdbb/0x22b0 [ 900.887490][T16463] __sys_recvmmsg+0x5dd/0x610 [ 900.892170][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 900.898243][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 900.904399][T16463] __do_fast_syscall_32+0x129/0x180 [ 900.909598][T16463] do_fast_syscall_32+0x6a/0xc0 [ 900.914446][T16463] do_SYSENTER_32+0x73/0x90 [ 900.918989][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 900.925300][T16463] [ 900.927621][T16463] Uninit was stored to memory at: [ 900.932645][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 900.938366][T16463] __msan_chain_origin+0x50/0x90 [ 900.943311][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 900.948424][T16463] get_compat_msghdr+0x108/0x2b0 [ 900.953359][T16463] do_recvmmsg+0xdbb/0x22b0 [ 900.957863][T16463] __sys_recvmmsg+0x5dd/0x610 [ 900.962542][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 900.968608][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 900.974759][T16463] __do_fast_syscall_32+0x129/0x180 [ 900.979956][T16463] do_fast_syscall_32+0x6a/0xc0 [ 900.984809][T16463] do_SYSENTER_32+0x73/0x90 [ 900.989321][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 900.995635][T16463] [ 900.997954][T16463] Uninit was stored to memory at: [ 901.002981][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 901.008708][T16463] __msan_chain_origin+0x50/0x90 [ 901.013643][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 901.018753][T16463] get_compat_msghdr+0x108/0x2b0 [ 901.023689][T16463] do_recvmmsg+0xdbb/0x22b0 [ 901.028194][T16463] __sys_recvmmsg+0x5dd/0x610 [ 901.032873][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 901.038942][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 901.045104][T16463] __do_fast_syscall_32+0x129/0x180 [ 901.050304][T16463] do_fast_syscall_32+0x6a/0xc0 [ 901.055157][T16463] do_SYSENTER_32+0x73/0x90 [ 901.059664][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 901.065996][T16463] [ 901.068326][T16463] Uninit was stored to memory at: [ 901.073354][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 901.079078][T16463] __msan_chain_origin+0x50/0x90 [ 901.084016][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 901.089130][T16463] get_compat_msghdr+0x108/0x2b0 [ 901.094067][T16463] do_recvmmsg+0xdbb/0x22b0 [ 901.098564][T16463] __sys_recvmmsg+0x5dd/0x610 [ 901.103249][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 901.109321][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 901.115475][T16463] __do_fast_syscall_32+0x129/0x180 [ 901.120672][T16463] do_fast_syscall_32+0x6a/0xc0 [ 901.125528][T16463] do_SYSENTER_32+0x73/0x90 [ 901.130034][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 901.136350][T16463] [ 901.138671][T16463] Uninit was stored to memory at: [ 901.143699][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 901.149415][T16463] __msan_chain_origin+0x50/0x90 [ 901.154352][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 901.159461][T16463] get_compat_msghdr+0x108/0x2b0 [ 901.164397][T16463] do_recvmmsg+0xdbb/0x22b0 [ 901.168902][T16463] __sys_recvmmsg+0x5dd/0x610 [ 901.173579][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 901.179648][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 901.185804][T16463] __do_fast_syscall_32+0x129/0x180 [ 901.191003][T16463] do_fast_syscall_32+0x6a/0xc0 [ 901.195853][T16463] do_SYSENTER_32+0x73/0x90 [ 901.200358][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 901.206680][T16463] [ 901.209002][T16463] Uninit was stored to memory at: [ 901.214027][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 901.219750][T16463] __msan_chain_origin+0x50/0x90 [ 901.224686][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 901.229796][T16463] get_compat_msghdr+0x108/0x2b0 [ 901.234729][T16463] do_recvmmsg+0xdbb/0x22b0 [ 901.239234][T16463] __sys_recvmmsg+0x5dd/0x610 [ 901.243914][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 901.249982][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 901.256138][T16463] __do_fast_syscall_32+0x129/0x180 [ 901.261336][T16463] do_fast_syscall_32+0x6a/0xc0 [ 901.266188][T16463] do_SYSENTER_32+0x73/0x90 [ 901.270703][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 901.277014][T16463] [ 901.279340][T16463] Uninit was stored to memory at: [ 901.284369][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 901.290088][T16463] __msan_chain_origin+0x50/0x90 [ 901.295025][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 901.300137][T16463] get_compat_msghdr+0x108/0x2b0 [ 901.305076][T16463] do_recvmmsg+0xdbb/0x22b0 [ 901.309579][T16463] __sys_recvmmsg+0x5dd/0x610 [ 901.314258][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 901.320329][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 901.326486][T16463] __do_fast_syscall_32+0x129/0x180 [ 901.331688][T16463] do_fast_syscall_32+0x6a/0xc0 [ 901.336536][T16463] do_SYSENTER_32+0x73/0x90 [ 901.341044][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 901.347353][T16463] [ 901.349677][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 901.356358][T16463] do_recvmmsg+0xbf/0x22b0 [ 901.360772][T16463] do_recvmmsg+0xbf/0x22b0 [ 902.364110][T16456] not chained 580000 origins [ 902.368742][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 902.377406][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.387462][T16456] Call Trace: [ 902.390759][T16456] dump_stack+0x21c/0x280 [ 902.395097][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 902.400822][T16456] ? kfree_sensitive+0xda/0x120 [ 902.405679][T16456] ? kmsan_get_metadata+0x116/0x180 [ 902.410898][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 902.416448][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 902.421740][T16456] ? kmsan_get_metadata+0x116/0x180 [ 902.426943][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 902.432499][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 902.438581][T16456] ? _copy_from_user+0x201/0x310 [ 902.443531][T16456] ? kmsan_get_metadata+0x116/0x180 [ 902.448745][T16456] __msan_chain_origin+0x50/0x90 [ 902.453702][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.458834][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.463789][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.468307][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 902.474139][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 902.479449][T16456] ? kmsan_get_metadata+0x116/0x180 [ 902.484656][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 902.490307][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 902.495618][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 902.500401][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 902.505177][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.509872][T16456] ? kmsan_get_metadata+0x116/0x180 [ 902.515089][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.521171][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.527340][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.532554][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.537409][T16456] do_SYSENTER_32+0x73/0x90 [ 902.541924][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.548257][T16456] RIP: 0023:0xf7fdc549 [ 902.552326][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 902.571935][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 902.580348][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 902.588320][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 902.596292][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.604261][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 902.612237][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 902.620215][T16456] Uninit was stored to memory at: [ 902.625252][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.630977][T16456] __msan_chain_origin+0x50/0x90 [ 902.635915][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.641030][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.645988][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.650500][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.655186][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.661261][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.667419][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.672620][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.677472][T16456] do_SYSENTER_32+0x73/0x90 [ 902.681979][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.688295][T16456] [ 902.690620][T16456] Uninit was stored to memory at: [ 902.695646][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.701371][T16456] __msan_chain_origin+0x50/0x90 [ 902.706315][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.711431][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.716366][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.720864][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.725547][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.731616][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.737771][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.742969][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.747818][T16456] do_SYSENTER_32+0x73/0x90 [ 902.752323][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.758626][T16456] [ 902.760937][T16456] Uninit was stored to memory at: [ 902.765950][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.771658][T16456] __msan_chain_origin+0x50/0x90 [ 902.776600][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.781697][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.786808][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.791301][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.795965][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.802021][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.808165][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.813364][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.818237][T16456] do_SYSENTER_32+0x73/0x90 [ 902.822737][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.829043][T16456] [ 902.831358][T16456] Uninit was stored to memory at: [ 902.836383][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.842092][T16456] __msan_chain_origin+0x50/0x90 [ 902.847022][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.852122][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.857045][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.861534][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.866198][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.872253][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.878397][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.883584][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.888422][T16456] do_SYSENTER_32+0x73/0x90 [ 902.892915][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.899216][T16456] [ 902.901527][T16456] Uninit was stored to memory at: [ 902.906538][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.912244][T16456] __msan_chain_origin+0x50/0x90 [ 902.917168][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.922268][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.927190][T16456] do_recvmmsg+0xdbb/0x22b0 [ 902.931681][T16456] __sys_recvmmsg+0x5dd/0x610 [ 902.936350][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 902.942405][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 902.948545][T16456] __do_fast_syscall_32+0x129/0x180 [ 902.953733][T16456] do_fast_syscall_32+0x6a/0xc0 [ 902.958573][T16456] do_SYSENTER_32+0x73/0x90 [ 902.963064][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 902.969454][T16456] [ 902.971763][T16456] Uninit was stored to memory at: [ 902.976773][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 902.982487][T16456] __msan_chain_origin+0x50/0x90 [ 902.987413][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 902.992524][T16456] get_compat_msghdr+0x108/0x2b0 [ 902.997447][T16456] do_recvmmsg+0xdbb/0x22b0 [ 903.001936][T16456] __sys_recvmmsg+0x5dd/0x610 [ 903.006615][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 903.012668][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 903.018814][T16456] __do_fast_syscall_32+0x129/0x180 [ 903.024005][T16456] do_fast_syscall_32+0x6a/0xc0 [ 903.028843][T16456] do_SYSENTER_32+0x73/0x90 [ 903.033336][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 903.039639][T16456] [ 903.041950][T16456] Uninit was stored to memory at: [ 903.046961][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 903.052666][T16456] __msan_chain_origin+0x50/0x90 [ 903.057596][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 903.062698][T16456] get_compat_msghdr+0x108/0x2b0 [ 903.067621][T16456] do_recvmmsg+0xdbb/0x22b0 [ 903.072108][T16456] __sys_recvmmsg+0x5dd/0x610 [ 903.076771][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 903.082826][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 903.088966][T16456] __do_fast_syscall_32+0x129/0x180 [ 903.094153][T16456] do_fast_syscall_32+0x6a/0xc0 [ 903.098992][T16456] do_SYSENTER_32+0x73/0x90 [ 903.103485][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 903.109799][T16456] [ 903.112109][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 903.118767][T16456] do_recvmmsg+0xbf/0x22b0 [ 903.123168][T16456] do_recvmmsg+0xbf/0x22b0 [ 904.194019][T16463] not chained 590000 origins [ 904.198649][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 904.207315][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.217364][T16463] Call Trace: [ 904.220668][T16463] dump_stack+0x21c/0x280 [ 904.225010][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 904.230738][T16463] ? kfree_sensitive+0xda/0x120 [ 904.235596][T16463] ? kmsan_get_metadata+0x116/0x180 [ 904.240802][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 904.246355][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 904.251649][T16463] ? kmsan_get_metadata+0x116/0x180 [ 904.256852][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 904.262404][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 904.268480][T16463] ? _copy_from_user+0x201/0x310 [ 904.273428][T16463] ? kmsan_get_metadata+0x116/0x180 [ 904.278635][T16463] __msan_chain_origin+0x50/0x90 [ 904.283577][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.288707][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.293657][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.298196][T16463] ? kmsan_get_metadata+0x116/0x180 [ 904.303402][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 904.309037][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 904.314325][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 904.319087][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 904.323861][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.328555][T16463] ? kmsan_get_metadata+0x116/0x180 [ 904.333785][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.339861][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.346021][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.351230][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.356091][T16463] do_SYSENTER_32+0x73/0x90 [ 904.360605][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.366932][T16463] RIP: 0023:0xf7fdc549 [ 904.371001][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 904.390604][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 904.399020][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 904.406997][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.414966][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 904.422934][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 904.430903][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 904.438881][T16463] Uninit was stored to memory at: [ 904.443950][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.449674][T16463] __msan_chain_origin+0x50/0x90 [ 904.454619][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.459734][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.464671][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.469177][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.473860][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.479934][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.486094][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.491297][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.496154][T16463] do_SYSENTER_32+0x73/0x90 [ 904.500661][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.506976][T16463] [ 904.509296][T16463] Uninit was stored to memory at: [ 904.514335][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.520054][T16463] __msan_chain_origin+0x50/0x90 [ 904.525000][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.530118][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.535054][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.539556][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.544234][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.550303][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.556461][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.561661][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.566515][T16463] do_SYSENTER_32+0x73/0x90 [ 904.571038][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.577352][T16463] [ 904.579676][T16463] Uninit was stored to memory at: [ 904.584721][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.590442][T16463] __msan_chain_origin+0x50/0x90 [ 904.595379][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.600487][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.605420][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.609921][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.614597][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.620661][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.626825][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.632030][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.636885][T16463] do_SYSENTER_32+0x73/0x90 [ 904.641390][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.647700][T16463] [ 904.650022][T16463] Uninit was stored to memory at: [ 904.655049][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.660774][T16463] __msan_chain_origin+0x50/0x90 [ 904.665720][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.670836][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.675787][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.680289][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.684965][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.691042][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.697213][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.702416][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.707271][T16463] do_SYSENTER_32+0x73/0x90 [ 904.711871][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.718179][T16463] [ 904.720497][T16463] Uninit was stored to memory at: [ 904.725527][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.731250][T16463] __msan_chain_origin+0x50/0x90 [ 904.736190][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.741300][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.746235][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.750733][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.755407][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.761466][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.767616][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.772807][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.777646][T16463] do_SYSENTER_32+0x73/0x90 [ 904.782140][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.788445][T16463] [ 904.790756][T16463] Uninit was stored to memory at: [ 904.795772][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.801491][T16463] __msan_chain_origin+0x50/0x90 [ 904.806417][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.811517][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.816455][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.820953][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.825621][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.831689][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.837836][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.843053][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.847920][T16463] do_SYSENTER_32+0x73/0x90 [ 904.852412][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.858734][T16463] [ 904.861047][T16463] Uninit was stored to memory at: [ 904.866063][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 904.871798][T16463] __msan_chain_origin+0x50/0x90 [ 904.876724][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 904.881829][T16463] get_compat_msghdr+0x108/0x2b0 [ 904.886753][T16463] do_recvmmsg+0xdbb/0x22b0 [ 904.891253][T16463] __sys_recvmmsg+0x5dd/0x610 [ 904.895942][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 904.901996][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 904.908139][T16463] __do_fast_syscall_32+0x129/0x180 [ 904.913340][T16463] do_fast_syscall_32+0x6a/0xc0 [ 904.918179][T16463] do_SYSENTER_32+0x73/0x90 [ 904.922671][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 904.928975][T16463] [ 904.931286][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 904.937964][T16463] do_recvmmsg+0xbf/0x22b0 [ 904.942363][T16463] do_recvmmsg+0xbf/0x22b0 [ 906.041613][T16456] not chained 600000 origins [ 906.046250][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 906.054918][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.064969][T16456] Call Trace: [ 906.068262][T16456] dump_stack+0x21c/0x280 [ 906.072596][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 906.078319][T16456] ? kfree_sensitive+0xda/0x120 [ 906.083161][T16456] ? kmsan_get_metadata+0x116/0x180 [ 906.088353][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 906.093891][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 906.099171][T16456] ? kmsan_get_metadata+0x116/0x180 [ 906.104359][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 906.109896][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 906.115954][T16456] ? _copy_from_user+0x201/0x310 [ 906.120888][T16456] ? kmsan_get_metadata+0x116/0x180 [ 906.126075][T16456] __msan_chain_origin+0x50/0x90 [ 906.131005][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.136125][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.141059][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.145556][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 906.151364][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 906.156645][T16456] ? kmsan_get_metadata+0x116/0x180 [ 906.161840][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 906.167471][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 906.172748][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 906.177497][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 906.182251][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.186931][T16456] ? kmsan_get_metadata+0x116/0x180 [ 906.192128][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.198190][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.204350][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.209549][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.214418][T16456] do_SYSENTER_32+0x73/0x90 [ 906.218916][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.225228][T16456] RIP: 0023:0xf7fdc549 [ 906.229287][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 906.248876][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 906.257275][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 906.265233][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 906.273190][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 906.281147][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 906.289106][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 906.297069][T16456] Uninit was stored to memory at: [ 906.302086][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.307795][T16456] __msan_chain_origin+0x50/0x90 [ 906.312724][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.317822][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.322743][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.327232][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.331898][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.337951][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.344091][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.349276][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.354115][T16456] do_SYSENTER_32+0x73/0x90 [ 906.358607][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.364908][T16456] [ 906.367217][T16456] Uninit was stored to memory at: [ 906.372230][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.377937][T16456] __msan_chain_origin+0x50/0x90 [ 906.382862][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.387960][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.392881][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.397368][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.402034][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.408092][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.414232][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.419419][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.424260][T16456] do_SYSENTER_32+0x73/0x90 [ 906.428753][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.435054][T16456] [ 906.437362][T16456] Uninit was stored to memory at: [ 906.442375][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.448079][T16456] __msan_chain_origin+0x50/0x90 [ 906.453002][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.458101][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.463024][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.467511][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.472178][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.478249][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.484391][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.489585][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.494423][T16456] do_SYSENTER_32+0x73/0x90 [ 906.498921][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.505223][T16456] [ 906.507533][T16456] Uninit was stored to memory at: [ 906.512547][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.518272][T16456] __msan_chain_origin+0x50/0x90 [ 906.523201][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.528307][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.533240][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.537739][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.542683][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.548753][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.554909][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.560105][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.564952][T16456] do_SYSENTER_32+0x73/0x90 [ 906.569447][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.575762][T16456] [ 906.578076][T16456] Uninit was stored to memory at: [ 906.583089][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.588795][T16456] __msan_chain_origin+0x50/0x90 [ 906.593718][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.598816][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.603739][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.608235][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.612900][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.618959][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.625100][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.630284][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.635122][T16456] do_SYSENTER_32+0x73/0x90 [ 906.639616][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.645916][T16456] [ 906.648231][T16456] Uninit was stored to memory at: [ 906.653248][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.658954][T16456] __msan_chain_origin+0x50/0x90 [ 906.663878][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.668976][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.673899][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.678395][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.683072][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.689130][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.695279][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.700472][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.705324][T16456] do_SYSENTER_32+0x73/0x90 [ 906.709821][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.716131][T16456] [ 906.718443][T16456] Uninit was stored to memory at: [ 906.723467][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 906.729178][T16456] __msan_chain_origin+0x50/0x90 [ 906.734103][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 906.739203][T16456] get_compat_msghdr+0x108/0x2b0 [ 906.744129][T16456] do_recvmmsg+0xdbb/0x22b0 [ 906.748621][T16456] __sys_recvmmsg+0x5dd/0x610 [ 906.753292][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 906.759364][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 906.765506][T16456] __do_fast_syscall_32+0x129/0x180 [ 906.770712][T16456] do_fast_syscall_32+0x6a/0xc0 [ 906.775549][T16456] do_SYSENTER_32+0x73/0x90 [ 906.780044][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.786346][T16456] [ 906.788668][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 906.795329][T16456] do_recvmmsg+0xbf/0x22b0 [ 906.799732][T16456] do_recvmmsg+0xbf/0x22b0 [ 908.197038][T16463] not chained 610000 origins [ 908.201668][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 908.210332][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.220379][T16463] Call Trace: [ 908.223680][T16463] dump_stack+0x21c/0x280 [ 908.228024][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 908.233748][T16463] ? kfree_sensitive+0xda/0x120 [ 908.238603][T16463] ? kmsan_get_metadata+0x116/0x180 [ 908.243803][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 908.249358][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 908.254648][T16463] ? kmsan_get_metadata+0x116/0x180 [ 908.259852][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 908.265401][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 908.271479][T16463] ? _copy_from_user+0x201/0x310 [ 908.276426][T16463] ? kmsan_get_metadata+0x116/0x180 [ 908.281629][T16463] __msan_chain_origin+0x50/0x90 [ 908.286573][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.291701][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.296648][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.301182][T16463] ? kmsan_get_metadata+0x116/0x180 [ 908.306383][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 908.312023][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 908.317319][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 908.322086][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 908.326851][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.331541][T16463] ? kmsan_get_metadata+0x116/0x180 [ 908.336746][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.342825][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.348984][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.354182][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.359029][T16463] do_SYSENTER_32+0x73/0x90 [ 908.363528][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.369840][T16463] RIP: 0023:0xf7fdc549 [ 908.373898][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 908.393491][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 908.401902][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 908.409863][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 908.417826][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 908.425788][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 908.433747][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 908.441713][T16463] Uninit was stored to memory at: [ 908.446732][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.452438][T16463] __msan_chain_origin+0x50/0x90 [ 908.457379][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.462479][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.467404][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.471894][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.476572][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.482634][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.488790][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.493979][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.498818][T16463] do_SYSENTER_32+0x73/0x90 [ 908.503342][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.509647][T16463] [ 908.511958][T16463] Uninit was stored to memory at: [ 908.516984][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.522693][T16463] __msan_chain_origin+0x50/0x90 [ 908.527710][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.532817][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.537747][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.542242][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.546914][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.552970][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.559113][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.564307][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.569146][T16463] do_SYSENTER_32+0x73/0x90 [ 908.573640][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.579944][T16463] [ 908.582262][T16463] Uninit was stored to memory at: [ 908.587279][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.592986][T16463] __msan_chain_origin+0x50/0x90 [ 908.597912][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.603009][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.607930][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.612419][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.617084][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.623137][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.629280][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.634466][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.639304][T16463] do_SYSENTER_32+0x73/0x90 [ 908.643797][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.650101][T16463] [ 908.652409][T16463] Uninit was stored to memory at: [ 908.657421][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.663128][T16463] __msan_chain_origin+0x50/0x90 [ 908.668053][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.673150][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.678072][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.682574][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.687245][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.693302][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.699448][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.704648][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.709492][T16463] do_SYSENTER_32+0x73/0x90 [ 908.713989][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.720291][T16463] [ 908.722605][T16463] Uninit was stored to memory at: [ 908.727621][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.733332][T16463] __msan_chain_origin+0x50/0x90 [ 908.738262][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.743361][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.748288][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.752778][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.757444][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.763499][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.769642][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.774828][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.779669][T16463] do_SYSENTER_32+0x73/0x90 [ 908.784163][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.790467][T16463] [ 908.792777][T16463] Uninit was stored to memory at: [ 908.797793][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.803497][T16463] __msan_chain_origin+0x50/0x90 [ 908.808436][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.813531][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.818452][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.822953][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.827616][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.833677][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.839819][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.845005][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.849845][T16463] do_SYSENTER_32+0x73/0x90 [ 908.854336][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.860639][T16463] [ 908.862956][T16463] Uninit was stored to memory at: [ 908.867973][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 908.873688][T16463] __msan_chain_origin+0x50/0x90 [ 908.878614][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 908.883710][T16463] get_compat_msghdr+0x108/0x2b0 [ 908.888631][T16463] do_recvmmsg+0xdbb/0x22b0 [ 908.893132][T16463] __sys_recvmmsg+0x5dd/0x610 [ 908.897799][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 908.903867][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 908.910008][T16463] __do_fast_syscall_32+0x129/0x180 [ 908.915198][T16463] do_fast_syscall_32+0x6a/0xc0 [ 908.920035][T16463] do_SYSENTER_32+0x73/0x90 [ 908.924528][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 908.930829][T16463] [ 908.933139][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 908.939797][T16463] do_recvmmsg+0xbf/0x22b0 [ 908.944202][T16463] do_recvmmsg+0xbf/0x22b0 [ 909.907457][T16463] not chained 620000 origins [ 909.912096][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 909.920753][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.930794][T16463] Call Trace: [ 909.934078][T16463] dump_stack+0x21c/0x280 [ 909.938406][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 909.944121][T16463] ? kfree_sensitive+0xda/0x120 [ 909.948962][T16463] ? kmsan_get_metadata+0x116/0x180 [ 909.954156][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 909.959699][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 909.964978][T16463] ? kmsan_get_metadata+0x116/0x180 [ 909.970168][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 909.975706][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 909.981765][T16463] ? _copy_from_user+0x201/0x310 [ 909.986696][T16463] ? kmsan_get_metadata+0x116/0x180 [ 909.991883][T16463] __msan_chain_origin+0x50/0x90 [ 909.996815][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.001928][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.006948][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.011465][T16463] ? kmsan_get_metadata+0x116/0x180 [ 910.016653][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 910.022288][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 910.027564][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 910.032340][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 910.037094][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.041767][T16463] ? kmsan_get_metadata+0x116/0x180 [ 910.046960][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.053037][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.059190][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.064382][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.069224][T16463] do_SYSENTER_32+0x73/0x90 [ 910.073722][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.080179][T16463] RIP: 0023:0xf7fdc549 [ 910.084244][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 910.103858][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 910.112279][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 910.120249][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 910.128249][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 910.136219][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 910.144184][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 910.152159][T16463] Uninit was stored to memory at: [ 910.157179][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.162888][T16463] __msan_chain_origin+0x50/0x90 [ 910.167831][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.172929][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.177853][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.182344][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.187008][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.193062][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.199204][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.204391][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.209232][T16463] do_SYSENTER_32+0x73/0x90 [ 910.213725][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.220200][T16463] [ 910.222508][T16463] Uninit was stored to memory at: [ 910.227521][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.233233][T16463] __msan_chain_origin+0x50/0x90 [ 910.238159][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.243257][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.248191][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.252680][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.257344][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.263397][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.269564][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.274750][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.279588][T16463] do_SYSENTER_32+0x73/0x90 [ 910.284080][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.290383][T16463] [ 910.292695][T16463] Uninit was stored to memory at: [ 910.297720][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.303426][T16463] __msan_chain_origin+0x50/0x90 [ 910.308351][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.313449][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.318383][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.322870][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.327533][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.333592][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.339732][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.344915][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.349755][T16463] do_SYSENTER_32+0x73/0x90 [ 910.354247][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.360549][T16463] [ 910.362860][T16463] Uninit was stored to memory at: [ 910.367872][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.373577][T16463] __msan_chain_origin+0x50/0x90 [ 910.378503][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.383600][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.388523][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.393011][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.397676][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.403729][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.409882][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.415078][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.419916][T16463] do_SYSENTER_32+0x73/0x90 [ 910.424409][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.430709][T16463] [ 910.433020][T16463] Uninit was stored to memory at: [ 910.438041][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.443751][T16463] __msan_chain_origin+0x50/0x90 [ 910.448682][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.453782][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.458704][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.463191][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.467859][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.473911][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.480053][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.485239][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.490096][T16463] do_SYSENTER_32+0x73/0x90 [ 910.494592][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.500896][T16463] [ 910.503206][T16463] Uninit was stored to memory at: [ 910.508259][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.513984][T16463] __msan_chain_origin+0x50/0x90 [ 910.518920][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.524020][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.529071][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.533567][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.538251][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.544310][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.550460][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.555653][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.560496][T16463] do_SYSENTER_32+0x73/0x90 [ 910.564989][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.571292][T16463] [ 910.573602][T16463] Uninit was stored to memory at: [ 910.578619][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 910.584341][T16463] __msan_chain_origin+0x50/0x90 [ 910.589269][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 910.594369][T16463] get_compat_msghdr+0x108/0x2b0 [ 910.599296][T16463] do_recvmmsg+0xdbb/0x22b0 [ 910.603782][T16463] __sys_recvmmsg+0x5dd/0x610 [ 910.608451][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 910.614513][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 910.620659][T16463] __do_fast_syscall_32+0x129/0x180 [ 910.625846][T16463] do_fast_syscall_32+0x6a/0xc0 [ 910.630687][T16463] do_SYSENTER_32+0x73/0x90 [ 910.635194][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 910.641496][T16463] [ 910.643807][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 910.650477][T16463] do_recvmmsg+0xbf/0x22b0 [ 910.654882][T16463] do_recvmmsg+0xbf/0x22b0 [ 911.706445][T16456] not chained 630000 origins [ 911.711080][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 911.719744][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.729792][T16456] Call Trace: [ 911.733085][T16456] dump_stack+0x21c/0x280 [ 911.737422][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 911.743239][T16456] ? kfree_sensitive+0xda/0x120 [ 911.748095][T16456] ? kmsan_get_metadata+0x116/0x180 [ 911.753297][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 911.758848][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 911.764144][T16456] ? kmsan_get_metadata+0x116/0x180 [ 911.769347][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 911.774895][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 911.780968][T16456] ? _copy_from_user+0x201/0x310 [ 911.785913][T16456] ? kmsan_get_metadata+0x116/0x180 [ 911.791130][T16456] __msan_chain_origin+0x50/0x90 [ 911.796084][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 911.801216][T16456] get_compat_msghdr+0x108/0x2b0 [ 911.806167][T16456] do_recvmmsg+0xdbb/0x22b0 [ 911.810679][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 911.816497][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 911.821792][T16456] ? kmsan_get_metadata+0x116/0x180 [ 911.826997][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 911.832633][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 911.837918][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 911.842677][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 911.847443][T16456] __sys_recvmmsg+0x5dd/0x610 [ 911.852135][T16456] ? kmsan_get_metadata+0x116/0x180 [ 911.857339][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 911.863440][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 911.869600][T16456] __do_fast_syscall_32+0x129/0x180 [ 911.874803][T16456] do_fast_syscall_32+0x6a/0xc0 [ 911.879660][T16456] do_SYSENTER_32+0x73/0x90 [ 911.884169][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 911.890491][T16456] RIP: 0023:0xf7fdc549 [ 911.894559][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 911.914160][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 911.922571][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 911.930542][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.938510][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.946481][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 911.954451][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.962428][T16456] Uninit was stored to memory at: [ 911.967461][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 911.973179][T16456] __msan_chain_origin+0x50/0x90 [ 911.978115][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 911.983230][T16456] get_compat_msghdr+0x108/0x2b0 [ 911.988166][T16456] do_recvmmsg+0xdbb/0x22b0 [ 911.992666][T16456] __sys_recvmmsg+0x5dd/0x610 [ 911.997339][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.003410][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.009569][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.014766][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.019619][T16456] do_SYSENTER_32+0x73/0x90 [ 912.024130][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.030442][T16456] [ 912.032761][T16456] Uninit was stored to memory at: [ 912.037784][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.043501][T16456] __msan_chain_origin+0x50/0x90 [ 912.048441][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.053551][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.058488][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.062987][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.067665][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.073731][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.079891][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.085093][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.089951][T16456] do_SYSENTER_32+0x73/0x90 [ 912.094457][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.100770][T16456] [ 912.103090][T16456] Uninit was stored to memory at: [ 912.108126][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.113847][T16456] __msan_chain_origin+0x50/0x90 [ 912.118785][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.123897][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.128827][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.133327][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.138004][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.144079][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.150237][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.155434][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.160288][T16456] do_SYSENTER_32+0x73/0x90 [ 912.164793][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.171111][T16456] [ 912.173432][T16456] Uninit was stored to memory at: [ 912.178457][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.186173][T16456] __msan_chain_origin+0x50/0x90 [ 912.191114][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.196225][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.201158][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.205656][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.210336][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.216404][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.222559][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.227757][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.232606][T16456] do_SYSENTER_32+0x73/0x90 [ 912.237112][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.243425][T16456] [ 912.245743][T16456] Uninit was stored to memory at: [ 912.250772][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.256491][T16456] __msan_chain_origin+0x50/0x90 [ 912.261430][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.266538][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.271471][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.275968][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.280650][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.286719][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.292876][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.298073][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.302925][T16456] do_SYSENTER_32+0x73/0x90 [ 912.307432][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.313743][T16456] [ 912.316063][T16456] Uninit was stored to memory at: [ 912.321097][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.326813][T16456] __msan_chain_origin+0x50/0x90 [ 912.331750][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.336863][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.341796][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.346294][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.350970][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.357035][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.363189][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.368388][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.373237][T16456] do_SYSENTER_32+0x73/0x90 [ 912.377743][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.384053][T16456] [ 912.386372][T16456] Uninit was stored to memory at: [ 912.391396][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 912.397119][T16456] __msan_chain_origin+0x50/0x90 [ 912.402054][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 912.407165][T16456] get_compat_msghdr+0x108/0x2b0 [ 912.412105][T16456] do_recvmmsg+0xdbb/0x22b0 [ 912.416606][T16456] __sys_recvmmsg+0x5dd/0x610 [ 912.421282][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.427348][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.433499][T16456] __do_fast_syscall_32+0x129/0x180 [ 912.438699][T16456] do_fast_syscall_32+0x6a/0xc0 [ 912.443550][T16456] do_SYSENTER_32+0x73/0x90 [ 912.448062][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.454374][T16456] [ 912.456690][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 912.463467][T16456] do_recvmmsg+0xbf/0x22b0 [ 912.467882][T16456] do_recvmmsg+0xbf/0x22b0 [ 913.311409][T16463] not chained 640000 origins [ 913.316037][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 913.324704][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.334754][T16463] Call Trace: [ 913.338052][T16463] dump_stack+0x21c/0x280 [ 913.342394][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 913.348141][T16463] ? kfree_sensitive+0xda/0x120 [ 913.352999][T16463] ? kmsan_get_metadata+0x116/0x180 [ 913.358201][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 913.363770][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 913.369066][T16463] ? kmsan_get_metadata+0x116/0x180 [ 913.374273][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 913.379854][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 913.385933][T16463] ? _copy_from_user+0x201/0x310 [ 913.390879][T16463] ? kmsan_get_metadata+0x116/0x180 [ 913.396083][T16463] __msan_chain_origin+0x50/0x90 [ 913.401037][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.406181][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.411130][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.415669][T16463] ? kmsan_get_metadata+0x116/0x180 [ 913.420909][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 913.426552][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 913.431851][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 913.436615][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 913.441383][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.446099][T16463] ? kmsan_get_metadata+0x116/0x180 [ 913.451307][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.457385][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.463545][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.468754][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.473614][T16463] do_SYSENTER_32+0x73/0x90 [ 913.478129][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.484457][T16463] RIP: 0023:0xf7fdc549 [ 913.488617][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 913.508223][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 913.516654][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 913.524632][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.532646][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.540618][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 913.548591][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.556570][T16463] Uninit was stored to memory at: [ 913.561602][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.567326][T16463] __msan_chain_origin+0x50/0x90 [ 913.572269][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.577378][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.582319][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.586825][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.591516][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.597587][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.603745][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.608956][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.613810][T16463] do_SYSENTER_32+0x73/0x90 [ 913.618322][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.624635][T16463] [ 913.626959][T16463] Uninit was stored to memory at: [ 913.631996][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.637722][T16463] __msan_chain_origin+0x50/0x90 [ 913.642663][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.647796][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.652735][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.657243][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.661928][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.667998][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.674156][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.679363][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.684214][T16463] do_SYSENTER_32+0x73/0x90 [ 913.688723][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.695044][T16463] [ 913.697368][T16463] Uninit was stored to memory at: [ 913.702400][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.708130][T16463] __msan_chain_origin+0x50/0x90 [ 913.713069][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.718182][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.723120][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.727626][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.732309][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.738383][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.744542][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.749745][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.754599][T16463] do_SYSENTER_32+0x73/0x90 [ 913.759111][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.765422][T16463] [ 913.767741][T16463] Uninit was stored to memory at: [ 913.772770][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.778488][T16463] __msan_chain_origin+0x50/0x90 [ 913.783423][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.788543][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.793478][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.797983][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.802662][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.808816][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.814980][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.820183][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.825039][T16463] do_SYSENTER_32+0x73/0x90 [ 913.829546][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.835856][T16463] [ 913.838174][T16463] Uninit was stored to memory at: [ 913.843205][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.848936][T16463] __msan_chain_origin+0x50/0x90 [ 913.853886][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.859000][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.863939][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.868447][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.873122][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.879199][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.885356][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.890557][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.895407][T16463] do_SYSENTER_32+0x73/0x90 [ 913.899916][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.906233][T16463] [ 913.908558][T16463] Uninit was stored to memory at: [ 913.913587][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.919313][T16463] __msan_chain_origin+0x50/0x90 [ 913.924253][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.929365][T16463] get_compat_msghdr+0x108/0x2b0 [ 913.934306][T16463] do_recvmmsg+0xdbb/0x22b0 [ 913.938809][T16463] __sys_recvmmsg+0x5dd/0x610 [ 913.943489][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.949562][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.955721][T16463] __do_fast_syscall_32+0x129/0x180 [ 913.960924][T16463] do_fast_syscall_32+0x6a/0xc0 [ 913.965783][T16463] do_SYSENTER_32+0x73/0x90 [ 913.970286][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.976595][T16463] [ 913.978913][T16463] Uninit was stored to memory at: [ 913.983946][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 913.989667][T16463] __msan_chain_origin+0x50/0x90 [ 913.994606][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 913.999718][T16463] get_compat_msghdr+0x108/0x2b0 [ 914.004659][T16463] do_recvmmsg+0xdbb/0x22b0 [ 914.009162][T16463] __sys_recvmmsg+0x5dd/0x610 [ 914.013867][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.019941][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.026096][T16463] __do_fast_syscall_32+0x129/0x180 [ 914.031304][T16463] do_fast_syscall_32+0x6a/0xc0 [ 914.036153][T16463] do_SYSENTER_32+0x73/0x90 [ 914.040659][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.046970][T16463] [ 914.049292][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 914.055963][T16463] do_recvmmsg+0xbf/0x22b0 [ 914.060374][T16463] do_recvmmsg+0xbf/0x22b0 [ 915.515993][T16456] not chained 650000 origins [ 915.520633][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 915.529301][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.539472][T16456] Call Trace: [ 915.542772][T16456] dump_stack+0x21c/0x280 [ 915.547115][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 915.552839][T16456] ? kfree_sensitive+0xda/0x120 [ 915.557690][T16456] ? kmsan_get_metadata+0x116/0x180 [ 915.562891][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 915.568451][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 915.573745][T16456] ? kmsan_get_metadata+0x116/0x180 [ 915.578948][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 915.584501][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 915.590583][T16456] ? _copy_from_user+0x201/0x310 [ 915.595524][T16456] ? kmsan_get_metadata+0x116/0x180 [ 915.600726][T16456] __msan_chain_origin+0x50/0x90 [ 915.605670][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 915.610803][T16456] get_compat_msghdr+0x108/0x2b0 [ 915.615758][T16456] do_recvmmsg+0xdbb/0x22b0 [ 915.620273][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 915.626091][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 915.631391][T16456] ? kmsan_get_metadata+0x116/0x180 [ 915.636592][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 915.642229][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 915.647527][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 915.652295][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 915.657053][T16456] __sys_recvmmsg+0x5dd/0x610 [ 915.661728][T16456] ? kmsan_get_metadata+0x116/0x180 [ 915.666921][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.672990][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.679145][T16456] __do_fast_syscall_32+0x129/0x180 [ 915.684352][T16456] do_fast_syscall_32+0x6a/0xc0 [ 915.689210][T16456] do_SYSENTER_32+0x73/0x90 [ 915.693711][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.700027][T16456] RIP: 0023:0xf7fdc549 [ 915.704087][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 915.723680][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 915.732086][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 915.740048][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.748007][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.755969][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 915.763932][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.771899][T16456] Uninit was stored to memory at: [ 915.776916][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 915.782624][T16456] __msan_chain_origin+0x50/0x90 [ 915.787548][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 915.792646][T16456] get_compat_msghdr+0x108/0x2b0 [ 915.797572][T16456] do_recvmmsg+0xdbb/0x22b0 [ 915.802060][T16456] __sys_recvmmsg+0x5dd/0x610 [ 915.806729][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.812784][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.818938][T16456] __do_fast_syscall_32+0x129/0x180 [ 915.824123][T16456] do_fast_syscall_32+0x6a/0xc0 [ 915.828962][T16456] do_SYSENTER_32+0x73/0x90 [ 915.833458][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.839759][T16456] [ 915.842068][T16456] Uninit was stored to memory at: [ 915.847080][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 915.852787][T16456] __msan_chain_origin+0x50/0x90 [ 915.857718][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 915.862816][T16456] get_compat_msghdr+0x108/0x2b0 [ 915.867740][T16456] do_recvmmsg+0xdbb/0x22b0 [ 915.872227][T16456] __sys_recvmmsg+0x5dd/0x610 [ 915.876893][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.882948][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.889092][T16456] __do_fast_syscall_32+0x129/0x180 [ 915.894279][T16456] do_fast_syscall_32+0x6a/0xc0 [ 915.899116][T16456] do_SYSENTER_32+0x73/0x90 [ 915.903610][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.909913][T16456] [ 915.912223][T16456] Uninit was stored to memory at: [ 915.917234][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 915.922950][T16456] __msan_chain_origin+0x50/0x90 [ 915.927877][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 915.932975][T16456] get_compat_msghdr+0x108/0x2b0 [ 915.937899][T16456] do_recvmmsg+0xdbb/0x22b0 [ 915.942389][T16456] __sys_recvmmsg+0x5dd/0x610 [ 915.947053][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.953106][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.959247][T16456] __do_fast_syscall_32+0x129/0x180 [ 915.964432][T16456] do_fast_syscall_32+0x6a/0xc0 [ 915.969271][T16456] do_SYSENTER_32+0x73/0x90 [ 915.973764][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.980067][T16456] [ 915.982378][T16456] Uninit was stored to memory at: [ 915.987390][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 915.993094][T16456] __msan_chain_origin+0x50/0x90 [ 915.998018][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 916.003130][T16456] get_compat_msghdr+0x108/0x2b0 [ 916.008051][T16456] do_recvmmsg+0xdbb/0x22b0 [ 916.012539][T16456] __sys_recvmmsg+0x5dd/0x610 [ 916.017204][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.023259][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.029401][T16456] __do_fast_syscall_32+0x129/0x180 [ 916.034585][T16456] do_fast_syscall_32+0x6a/0xc0 [ 916.039426][T16456] do_SYSENTER_32+0x73/0x90 [ 916.043919][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.050220][T16456] [ 916.052529][T16456] Uninit was stored to memory at: [ 916.057542][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 916.063249][T16456] __msan_chain_origin+0x50/0x90 [ 916.068173][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 916.073270][T16456] get_compat_msghdr+0x108/0x2b0 [ 916.078193][T16456] do_recvmmsg+0xdbb/0x22b0 [ 916.082692][T16456] __sys_recvmmsg+0x5dd/0x610 [ 916.087364][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.093428][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.099569][T16456] __do_fast_syscall_32+0x129/0x180 [ 916.104754][T16456] do_fast_syscall_32+0x6a/0xc0 [ 916.109592][T16456] do_SYSENTER_32+0x73/0x90 [ 916.114085][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.120388][T16456] [ 916.122699][T16456] Uninit was stored to memory at: [ 916.127720][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 916.133426][T16456] __msan_chain_origin+0x50/0x90 [ 916.138350][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 916.143447][T16456] get_compat_msghdr+0x108/0x2b0 [ 916.148369][T16456] do_recvmmsg+0xdbb/0x22b0 [ 916.152869][T16456] __sys_recvmmsg+0x5dd/0x610 [ 916.157535][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.163588][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.169728][T16456] __do_fast_syscall_32+0x129/0x180 [ 916.174914][T16456] do_fast_syscall_32+0x6a/0xc0 [ 916.179751][T16456] do_SYSENTER_32+0x73/0x90 [ 916.184244][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.190547][T16456] [ 916.192855][T16456] Uninit was stored to memory at: [ 916.197867][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 916.203576][T16456] __msan_chain_origin+0x50/0x90 [ 916.208499][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 916.213596][T16456] get_compat_msghdr+0x108/0x2b0 [ 916.218516][T16456] do_recvmmsg+0xdbb/0x22b0 [ 916.223005][T16456] __sys_recvmmsg+0x5dd/0x610 [ 916.227670][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.233728][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.239872][T16456] __do_fast_syscall_32+0x129/0x180 [ 916.245057][T16456] do_fast_syscall_32+0x6a/0xc0 [ 916.249896][T16456] do_SYSENTER_32+0x73/0x90 [ 916.254388][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.260693][T16456] [ 916.263006][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 916.269661][T16456] do_recvmmsg+0xbf/0x22b0 [ 916.274064][T16456] do_recvmmsg+0xbf/0x22b0 [ 917.449871][T16456] not chained 660000 origins [ 917.454496][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 917.463155][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.473196][T16456] Call Trace: [ 917.476481][T16456] dump_stack+0x21c/0x280 [ 917.480824][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 917.486543][T16456] ? kfree_sensitive+0xda/0x120 [ 917.491394][T16456] ? kmsan_get_metadata+0x116/0x180 [ 917.496592][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 917.502136][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 917.507425][T16456] ? kmsan_get_metadata+0x116/0x180 [ 917.512618][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 917.518161][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 917.524223][T16456] ? _copy_from_user+0x201/0x310 [ 917.529158][T16456] ? kmsan_get_metadata+0x116/0x180 [ 917.534347][T16456] __msan_chain_origin+0x50/0x90 [ 917.539278][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 917.544396][T16456] get_compat_msghdr+0x108/0x2b0 [ 917.549335][T16456] do_recvmmsg+0xdbb/0x22b0 [ 917.553837][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 917.559645][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 917.564932][T16456] ? kmsan_get_metadata+0x116/0x180 [ 917.570127][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 917.575755][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 917.581033][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 917.585787][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 917.590554][T16456] __sys_recvmmsg+0x5dd/0x610 [ 917.595255][T16456] ? kmsan_get_metadata+0x116/0x180 [ 917.600457][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.606525][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.612676][T16456] __do_fast_syscall_32+0x129/0x180 [ 917.617874][T16456] do_fast_syscall_32+0x6a/0xc0 [ 917.622723][T16456] do_SYSENTER_32+0x73/0x90 [ 917.627223][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.633542][T16456] RIP: 0023:0xf7fdc549 [ 917.637609][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 917.657211][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 917.665633][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 917.673603][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.681608][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.689574][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 917.697538][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.706202][T16456] Uninit was stored to memory at: [ 917.711234][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 917.716972][T16456] __msan_chain_origin+0x50/0x90 [ 917.721907][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 917.727015][T16456] get_compat_msghdr+0x108/0x2b0 [ 917.731947][T16456] do_recvmmsg+0xdbb/0x22b0 [ 917.736443][T16456] __sys_recvmmsg+0x5dd/0x610 [ 917.741118][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.747186][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.753346][T16456] __do_fast_syscall_32+0x129/0x180 [ 917.758544][T16456] do_fast_syscall_32+0x6a/0xc0 [ 917.763394][T16456] do_SYSENTER_32+0x73/0x90 [ 917.767897][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.774207][T16456] [ 917.776527][T16456] Uninit was stored to memory at: [ 917.781553][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 917.787271][T16456] __msan_chain_origin+0x50/0x90 [ 917.792203][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 917.797337][T16456] get_compat_msghdr+0x108/0x2b0 [ 917.802267][T16456] do_recvmmsg+0xdbb/0x22b0 [ 917.806763][T16456] __sys_recvmmsg+0x5dd/0x610 [ 917.811436][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.817540][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.823688][T16456] __do_fast_syscall_32+0x129/0x180 [ 917.828881][T16456] do_fast_syscall_32+0x6a/0xc0 [ 917.833728][T16456] do_SYSENTER_32+0x73/0x90 [ 917.838233][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.844544][T16456] [ 917.846863][T16456] Uninit was stored to memory at: [ 917.851888][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 917.857603][T16456] __msan_chain_origin+0x50/0x90 [ 917.862536][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 917.867642][T16456] get_compat_msghdr+0x108/0x2b0 [ 917.872572][T16456] do_recvmmsg+0xdbb/0x22b0 [ 917.877072][T16456] __sys_recvmmsg+0x5dd/0x610 [ 917.881748][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.887811][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.893965][T16456] __do_fast_syscall_32+0x129/0x180 [ 917.899161][T16456] do_fast_syscall_32+0x6a/0xc0 [ 917.904008][T16456] do_SYSENTER_32+0x73/0x90 [ 917.908512][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.914825][T16456] [ 917.917145][T16456] Uninit was stored to memory at: [ 917.922171][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 917.927886][T16456] __msan_chain_origin+0x50/0x90 [ 917.932863][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 917.937970][T16456] get_compat_msghdr+0x108/0x2b0 [ 917.942903][T16456] do_recvmmsg+0xdbb/0x22b0 [ 917.947404][T16456] __sys_recvmmsg+0x5dd/0x610 [ 917.952078][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.958175][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.964327][T16456] __do_fast_syscall_32+0x129/0x180 [ 917.969616][T16456] do_fast_syscall_32+0x6a/0xc0 [ 917.974470][T16456] do_SYSENTER_32+0x73/0x90 [ 917.978979][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.985293][T16456] [ 917.987613][T16456] Uninit was stored to memory at: [ 917.992640][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 917.998707][T16456] __msan_chain_origin+0x50/0x90 [ 918.003645][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 918.008753][T16456] get_compat_msghdr+0x108/0x2b0 [ 918.013689][T16456] do_recvmmsg+0xdbb/0x22b0 [ 918.018192][T16456] __sys_recvmmsg+0x5dd/0x610 [ 918.022866][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.029024][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.035175][T16456] __do_fast_syscall_32+0x129/0x180 [ 918.040382][T16456] do_fast_syscall_32+0x6a/0xc0 [ 918.045230][T16456] do_SYSENTER_32+0x73/0x90 [ 918.049735][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.056214][T16456] [ 918.058536][T16456] Uninit was stored to memory at: [ 918.063564][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 918.069286][T16456] __msan_chain_origin+0x50/0x90 [ 918.074224][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 918.079335][T16456] get_compat_msghdr+0x108/0x2b0 [ 918.084271][T16456] do_recvmmsg+0xdbb/0x22b0 [ 918.088775][T16456] __sys_recvmmsg+0x5dd/0x610 [ 918.093453][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.099516][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.105676][T16456] __do_fast_syscall_32+0x129/0x180 [ 918.110874][T16456] do_fast_syscall_32+0x6a/0xc0 [ 918.115724][T16456] do_SYSENTER_32+0x73/0x90 [ 918.120360][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.126721][T16456] [ 918.129048][T16456] Uninit was stored to memory at: [ 918.134076][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 918.139796][T16456] __msan_chain_origin+0x50/0x90 [ 918.144734][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 918.149846][T16456] get_compat_msghdr+0x108/0x2b0 [ 918.154781][T16456] do_recvmmsg+0xdbb/0x22b0 [ 918.159280][T16456] __sys_recvmmsg+0x5dd/0x610 [ 918.164042][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.170116][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.176269][T16456] __do_fast_syscall_32+0x129/0x180 [ 918.181472][T16456] do_fast_syscall_32+0x6a/0xc0 [ 918.186325][T16456] do_SYSENTER_32+0x73/0x90 [ 918.190848][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.197164][T16456] [ 918.199491][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 918.206161][T16456] do_recvmmsg+0xbf/0x22b0 [ 918.210578][T16456] do_recvmmsg+0xbf/0x22b0 [ 919.373261][T16456] not chained 670000 origins [ 919.377907][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 919.386584][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.396658][T16456] Call Trace: [ 919.399976][T16456] dump_stack+0x21c/0x280 [ 919.404323][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 919.410059][T16456] ? kfree_sensitive+0xda/0x120 [ 919.414914][T16456] ? kmsan_get_metadata+0x116/0x180 [ 919.420227][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 919.425793][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 919.431139][T16456] ? kmsan_get_metadata+0x116/0x180 [ 919.436343][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 919.441895][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 919.447972][T16456] ? _copy_from_user+0x201/0x310 [ 919.452917][T16456] ? kmsan_get_metadata+0x116/0x180 [ 919.458120][T16456] __msan_chain_origin+0x50/0x90 [ 919.463219][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.468373][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.473474][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.477999][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 919.483958][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 919.489264][T16456] ? kmsan_get_metadata+0x116/0x180 [ 919.494469][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 919.500111][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 919.505405][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 919.510174][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 919.514945][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.519788][T16456] ? kmsan_get_metadata+0x116/0x180 [ 919.524998][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.531080][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.537241][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.542535][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.547400][T16456] do_SYSENTER_32+0x73/0x90 [ 919.551912][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.558243][T16456] RIP: 0023:0xf7fdc549 [ 919.562462][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 919.582336][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 919.590754][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 919.598728][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.606829][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 919.614802][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 919.622780][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 919.630759][T16456] Uninit was stored to memory at: [ 919.635792][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.641509][T16456] __msan_chain_origin+0x50/0x90 [ 919.646466][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.651584][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.656520][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.661169][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.665949][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.672163][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.678330][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.683535][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.688395][T16456] do_SYSENTER_32+0x73/0x90 [ 919.692992][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.699318][T16456] [ 919.701648][T16456] Uninit was stored to memory at: [ 919.706704][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.712429][T16456] __msan_chain_origin+0x50/0x90 [ 919.717369][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.722576][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.727603][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.732156][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.736838][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.742983][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.749151][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.754350][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.759219][T16456] do_SYSENTER_32+0x73/0x90 [ 919.763730][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.770046][T16456] [ 919.772446][T16456] Uninit was stored to memory at: [ 919.777494][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.783213][T16456] __msan_chain_origin+0x50/0x90 [ 919.788176][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.793460][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.798527][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.803030][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.807775][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.813930][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.820149][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.825352][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.830275][T16456] do_SYSENTER_32+0x73/0x90 [ 919.834871][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.841264][T16456] [ 919.843617][T16456] Uninit was stored to memory at: [ 919.848734][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.854544][T16456] __msan_chain_origin+0x50/0x90 [ 919.859482][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.864594][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.869530][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.874029][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.878708][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.884774][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.890933][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.896134][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.900986][T16456] do_SYSENTER_32+0x73/0x90 [ 919.905495][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.911808][T16456] [ 919.914131][T16456] Uninit was stored to memory at: [ 919.919157][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.925091][T16456] __msan_chain_origin+0x50/0x90 [ 919.930033][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 919.935146][T16456] get_compat_msghdr+0x108/0x2b0 [ 919.940081][T16456] do_recvmmsg+0xdbb/0x22b0 [ 919.944584][T16456] __sys_recvmmsg+0x5dd/0x610 [ 919.949383][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.955451][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.961606][T16456] __do_fast_syscall_32+0x129/0x180 [ 919.966806][T16456] do_fast_syscall_32+0x6a/0xc0 [ 919.971660][T16456] do_SYSENTER_32+0x73/0x90 [ 919.976167][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.982546][T16456] [ 919.984867][T16456] Uninit was stored to memory at: [ 919.989959][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 919.995678][T16456] __msan_chain_origin+0x50/0x90 [ 920.000618][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 920.005729][T16456] get_compat_msghdr+0x108/0x2b0 [ 920.010666][T16456] do_recvmmsg+0xdbb/0x22b0 [ 920.015169][T16456] __sys_recvmmsg+0x5dd/0x610 [ 920.019936][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.026004][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.032157][T16456] __do_fast_syscall_32+0x129/0x180 [ 920.037529][T16456] do_fast_syscall_32+0x6a/0xc0 [ 920.042434][T16456] do_SYSENTER_32+0x73/0x90 [ 920.046939][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.053259][T16456] [ 920.055585][T16456] Uninit was stored to memory at: [ 920.060614][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 920.066423][T16456] __msan_chain_origin+0x50/0x90 [ 920.071362][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 920.076473][T16456] get_compat_msghdr+0x108/0x2b0 [ 920.081541][T16456] do_recvmmsg+0xdbb/0x22b0 [ 920.086046][T16456] __sys_recvmmsg+0x5dd/0x610 [ 920.090743][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.096807][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.103005][T16456] __do_fast_syscall_32+0x129/0x180 [ 920.108513][T16456] do_fast_syscall_32+0x6a/0xc0 [ 920.113372][T16456] do_SYSENTER_32+0x73/0x90 [ 920.117888][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.124290][T16456] [ 920.126666][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 920.133643][T16456] do_recvmmsg+0xbf/0x22b0 [ 920.138060][T16456] do_recvmmsg+0xbf/0x22b0 [ 921.190845][T16463] not chained 680000 origins [ 921.195494][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 921.204171][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.214237][T16463] Call Trace: [ 921.217555][T16463] dump_stack+0x21c/0x280 [ 921.221907][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 921.227653][T16463] ? kfree_sensitive+0xda/0x120 [ 921.232524][T16463] ? kmsan_get_metadata+0x116/0x180 [ 921.237745][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 921.243310][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 921.248623][T16463] ? kmsan_get_metadata+0x116/0x180 [ 921.253840][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 921.259405][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 921.265655][T16463] ? _copy_from_user+0x201/0x310 [ 921.270614][T16463] ? kmsan_get_metadata+0x116/0x180 [ 921.275839][T16463] __msan_chain_origin+0x50/0x90 [ 921.280801][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.285947][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.290908][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.295542][T16463] ? kmsan_get_metadata+0x116/0x180 [ 921.300766][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 921.306421][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 921.311726][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 921.316654][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 921.321434][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.326131][T16463] ? kmsan_get_metadata+0x116/0x180 [ 921.331350][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.337688][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.343950][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.349170][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.354041][T16463] do_SYSENTER_32+0x73/0x90 [ 921.358564][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.364896][T16463] RIP: 0023:0xf7fdc549 [ 921.368978][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 921.388747][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 921.397175][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 921.405201][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.413200][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.421192][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 921.429185][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.437177][T16463] Uninit was stored to memory at: [ 921.442228][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.447966][T16463] __msan_chain_origin+0x50/0x90 [ 921.452921][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.458172][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.463212][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.467832][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.472675][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.478760][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.484931][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.490158][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.495028][T16463] do_SYSENTER_32+0x73/0x90 [ 921.499546][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.505876][T16463] [ 921.508222][T16463] Uninit was stored to memory at: [ 921.513280][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.519107][T16463] __msan_chain_origin+0x50/0x90 [ 921.524056][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.529180][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.534262][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.538867][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.543674][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.549759][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.555930][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.561145][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.566016][T16463] do_SYSENTER_32+0x73/0x90 [ 921.570537][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.577023][T16463] [ 921.579359][T16463] Uninit was stored to memory at: [ 921.584398][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.590132][T16463] __msan_chain_origin+0x50/0x90 [ 921.595083][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.600215][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.605299][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.609810][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.614502][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.620786][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.626957][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.632173][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.637040][T16463] do_SYSENTER_32+0x73/0x90 [ 921.641561][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.647890][T16463] [ 921.650228][T16463] Uninit was stored to memory at: [ 921.655268][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.661184][T16463] __msan_chain_origin+0x50/0x90 [ 921.666153][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.671283][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.676268][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.680797][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.685488][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.691568][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.697739][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.703211][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.708093][T16463] do_SYSENTER_32+0x73/0x90 [ 921.712613][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.719025][T16463] [ 921.721354][T16463] Uninit was stored to memory at: [ 921.726397][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.732137][T16463] __msan_chain_origin+0x50/0x90 [ 921.737236][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.742626][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.747580][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.752103][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.756797][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.763031][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.769372][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.774618][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.779485][T16463] do_SYSENTER_32+0x73/0x90 [ 921.784008][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.790333][T16463] [ 921.792669][T16463] Uninit was stored to memory at: [ 921.797710][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.803447][T16463] __msan_chain_origin+0x50/0x90 [ 921.808402][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.813530][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.818484][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.822994][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.827692][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.833782][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.839951][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.845178][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.850045][T16463] do_SYSENTER_32+0x73/0x90 [ 921.854570][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.860894][T16463] [ 921.863228][T16463] Uninit was stored to memory at: [ 921.868268][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 921.874002][T16463] __msan_chain_origin+0x50/0x90 [ 921.878954][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 921.884424][T16463] get_compat_msghdr+0x108/0x2b0 [ 921.889372][T16463] do_recvmmsg+0xdbb/0x22b0 [ 921.893890][T16463] __sys_recvmmsg+0x5dd/0x610 [ 921.898584][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.904930][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.911101][T16463] __do_fast_syscall_32+0x129/0x180 [ 921.916308][T16463] do_fast_syscall_32+0x6a/0xc0 [ 921.921173][T16463] do_SYSENTER_32+0x73/0x90 [ 921.925809][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.932130][T16463] [ 921.934466][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 921.941154][T16463] do_recvmmsg+0xbf/0x22b0 [ 921.945858][T16463] do_recvmmsg+0xbf/0x22b0 [ 922.794323][T16456] not chained 690000 origins [ 922.798972][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 922.807696][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.817839][T16456] Call Trace: [ 922.821201][T16456] dump_stack+0x21c/0x280 [ 922.825544][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 922.831275][T16456] ? kfree_sensitive+0xda/0x120 [ 922.836131][T16456] ? kmsan_get_metadata+0x116/0x180 [ 922.841407][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 922.846965][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 922.852338][T16456] ? kmsan_get_metadata+0x116/0x180 [ 922.857549][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 922.863100][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 922.869301][T16456] ? _copy_from_user+0x201/0x310 [ 922.874245][T16456] ? kmsan_get_metadata+0x116/0x180 [ 922.879449][T16456] __msan_chain_origin+0x50/0x90 [ 922.884423][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 922.889556][T16456] get_compat_msghdr+0x108/0x2b0 [ 922.894506][T16456] do_recvmmsg+0xdbb/0x22b0 [ 922.899022][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 922.904840][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 922.910141][T16456] ? kmsan_get_metadata+0x116/0x180 [ 922.915431][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 922.921073][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 922.926418][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 922.931183][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 922.935985][T16456] __sys_recvmmsg+0x5dd/0x610 [ 922.940683][T16456] ? kmsan_get_metadata+0x116/0x180 [ 922.945891][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.952095][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.958426][T16456] __do_fast_syscall_32+0x129/0x180 [ 922.963634][T16456] do_fast_syscall_32+0x6a/0xc0 [ 922.968555][T16456] do_SYSENTER_32+0x73/0x90 [ 922.973070][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.979636][T16456] RIP: 0023:0xf7fdc549 [ 922.983708][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 923.003313][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 923.011817][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 923.019802][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 923.027860][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 923.035831][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 923.043975][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.051960][T16456] Uninit was stored to memory at: [ 923.056992][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.062707][T16456] __msan_chain_origin+0x50/0x90 [ 923.067645][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.072753][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.077694][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.082343][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.087119][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.093271][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.099476][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.104675][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.109527][T16456] do_SYSENTER_32+0x73/0x90 [ 923.114124][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.120438][T16456] [ 923.122761][T16456] Uninit was stored to memory at: [ 923.127787][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.133506][T16456] __msan_chain_origin+0x50/0x90 [ 923.138446][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.143705][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.148645][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.153151][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.157829][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.164161][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.170422][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.175622][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.180473][T16456] do_SYSENTER_32+0x73/0x90 [ 923.184993][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.191310][T16456] [ 923.193683][T16456] Uninit was stored to memory at: [ 923.198713][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.204433][T16456] __msan_chain_origin+0x50/0x90 [ 923.209372][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.214618][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.219682][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.224277][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.229080][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.235147][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.241301][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.246531][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.251390][T16456] do_SYSENTER_32+0x73/0x90 [ 923.255897][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.262211][T16456] [ 923.264539][T16456] Uninit was stored to memory at: [ 923.269570][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.275290][T16456] __msan_chain_origin+0x50/0x90 [ 923.280308][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.285423][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.290416][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.294923][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.299606][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.305674][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.311833][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.317114][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.321976][T16456] do_SYSENTER_32+0x73/0x90 [ 923.326489][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.332866][T16456] [ 923.335193][T16456] Uninit was stored to memory at: [ 923.340223][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.345946][T16456] __msan_chain_origin+0x50/0x90 [ 923.350887][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.355995][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.360933][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.365615][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.370296][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.376367][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.382530][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.387734][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.392654][T16456] do_SYSENTER_32+0x73/0x90 [ 923.397249][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.403565][T16456] [ 923.405908][T16456] Uninit was stored to memory at: [ 923.410934][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.416654][T16456] __msan_chain_origin+0x50/0x90 [ 923.421604][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.426784][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.431723][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.436297][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.441034][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.447107][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.453598][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.458800][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.463648][T16456] do_SYSENTER_32+0x73/0x90 [ 923.468246][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.474656][T16456] [ 923.476986][T16456] Uninit was stored to memory at: [ 923.482177][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 923.487904][T16456] __msan_chain_origin+0x50/0x90 [ 923.492854][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 923.497972][T16456] get_compat_msghdr+0x108/0x2b0 [ 923.502933][T16456] do_recvmmsg+0xdbb/0x22b0 [ 923.507623][T16456] __sys_recvmmsg+0x5dd/0x610 [ 923.512394][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.519599][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.525888][T16456] __do_fast_syscall_32+0x129/0x180 [ 923.531124][T16456] do_fast_syscall_32+0x6a/0xc0 [ 923.536115][T16456] do_SYSENTER_32+0x73/0x90 [ 923.540634][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.546955][T16456] [ 923.549297][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 923.556071][T16456] do_recvmmsg+0xbf/0x22b0 [ 923.560495][T16456] do_recvmmsg+0xbf/0x22b0 [ 924.532748][T16463] not chained 700000 origins [ 924.537392][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 924.546071][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.556163][T16463] Call Trace: [ 924.559475][T16463] dump_stack+0x21c/0x280 [ 924.563833][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 924.569573][T16463] ? kfree_sensitive+0xda/0x120 [ 924.574437][T16463] ? kmsan_get_metadata+0x116/0x180 [ 924.579653][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 924.585334][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 924.590831][T16463] ? kmsan_get_metadata+0x116/0x180 [ 924.596061][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 924.601628][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 924.607718][T16463] ? _copy_from_user+0x201/0x310 [ 924.612682][T16463] ? kmsan_get_metadata+0x116/0x180 [ 924.618102][T16463] __msan_chain_origin+0x50/0x90 [ 924.623062][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 924.628382][T16463] get_compat_msghdr+0x108/0x2b0 [ 924.633338][T16463] do_recvmmsg+0xdbb/0x22b0 [ 924.637867][T16463] ? kmsan_get_metadata+0x116/0x180 [ 924.643072][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 924.648715][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 924.654268][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 924.659047][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 924.663836][T16463] __sys_recvmmsg+0x5dd/0x610 [ 924.668605][T16463] ? kmsan_get_metadata+0x116/0x180 [ 924.673981][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.680139][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.686421][T16463] __do_fast_syscall_32+0x129/0x180 [ 924.691634][T16463] do_fast_syscall_32+0x6a/0xc0 [ 924.696765][T16463] do_SYSENTER_32+0x73/0x90 [ 924.701611][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.707942][T16463] RIP: 0023:0xf7fdc549 [ 924.712016][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 924.731727][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 924.740233][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 924.748275][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 924.756258][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.764235][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 924.772275][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.780261][T16463] Uninit was stored to memory at: [ 924.785293][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 924.791018][T16463] __msan_chain_origin+0x50/0x90 [ 924.796121][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 924.801267][T16463] get_compat_msghdr+0x108/0x2b0 [ 924.806207][T16463] do_recvmmsg+0xdbb/0x22b0 [ 924.810711][T16463] __sys_recvmmsg+0x5dd/0x610 [ 924.815390][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.821461][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.827767][T16463] __do_fast_syscall_32+0x129/0x180 [ 924.832970][T16463] do_fast_syscall_32+0x6a/0xc0 [ 924.837968][T16463] do_SYSENTER_32+0x73/0x90 [ 924.842490][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.848807][T16463] [ 924.851132][T16463] Uninit was stored to memory at: [ 924.856159][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 924.861959][T16463] __msan_chain_origin+0x50/0x90 [ 924.866910][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 924.872039][T16463] get_compat_msghdr+0x108/0x2b0 [ 924.876982][T16463] do_recvmmsg+0xdbb/0x22b0 [ 924.881486][T16463] __sys_recvmmsg+0x5dd/0x610 [ 924.886170][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.892329][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.898489][T16463] __do_fast_syscall_32+0x129/0x180 [ 924.903692][T16463] do_fast_syscall_32+0x6a/0xc0 [ 924.908551][T16463] do_SYSENTER_32+0x73/0x90 [ 924.913057][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.919378][T16463] [ 924.921700][T16463] Uninit was stored to memory at: [ 924.926731][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 924.932583][T16463] __msan_chain_origin+0x50/0x90 [ 924.937609][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 924.942716][T16463] get_compat_msghdr+0x108/0x2b0 [ 924.947661][T16463] do_recvmmsg+0xdbb/0x22b0 [ 924.952162][T16463] __sys_recvmmsg+0x5dd/0x610 [ 924.956847][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.962916][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.969072][T16463] __do_fast_syscall_32+0x129/0x180 [ 924.974276][T16463] do_fast_syscall_32+0x6a/0xc0 [ 924.979297][T16463] do_SYSENTER_32+0x73/0x90 [ 924.983803][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.990122][T16463] [ 924.992447][T16463] Uninit was stored to memory at: [ 924.997565][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 925.003284][T16463] __msan_chain_origin+0x50/0x90 [ 925.008223][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 925.013340][T16463] get_compat_msghdr+0x108/0x2b0 [ 925.018275][T16463] do_recvmmsg+0xdbb/0x22b0 [ 925.022776][T16463] __sys_recvmmsg+0x5dd/0x610 [ 925.027701][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.033861][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.040018][T16463] __do_fast_syscall_32+0x129/0x180 [ 925.045232][T16463] do_fast_syscall_32+0x6a/0xc0 [ 925.050087][T16463] do_SYSENTER_32+0x73/0x90 [ 925.054592][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.061048][T16463] [ 925.063373][T16463] Uninit was stored to memory at: [ 925.068398][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 925.074117][T16463] __msan_chain_origin+0x50/0x90 [ 925.079055][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 925.084288][T16463] get_compat_msghdr+0x108/0x2b0 [ 925.089314][T16463] do_recvmmsg+0xdbb/0x22b0 [ 925.093824][T16463] __sys_recvmmsg+0x5dd/0x610 [ 925.098655][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.104721][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.110877][T16463] __do_fast_syscall_32+0x129/0x180 [ 925.116302][T16463] do_fast_syscall_32+0x6a/0xc0 [ 925.121243][T16463] do_SYSENTER_32+0x73/0x90 [ 925.125760][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.132206][T16463] [ 925.134609][T16463] Uninit was stored to memory at: [ 925.139637][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 925.145356][T16463] __msan_chain_origin+0x50/0x90 [ 925.150294][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 925.155405][T16463] get_compat_msghdr+0x108/0x2b0 [ 925.160416][T16463] do_recvmmsg+0xdbb/0x22b0 [ 925.164917][T16463] __sys_recvmmsg+0x5dd/0x610 [ 925.169592][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.175658][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.181810][T16463] __do_fast_syscall_32+0x129/0x180 [ 925.187125][T16463] do_fast_syscall_32+0x6a/0xc0 [ 925.192084][T16463] do_SYSENTER_32+0x73/0x90 [ 925.196592][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.202907][T16463] [ 925.205288][T16463] Uninit was stored to memory at: [ 925.210318][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 925.216034][T16463] __msan_chain_origin+0x50/0x90 [ 925.220973][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 925.226088][T16463] get_compat_msghdr+0x108/0x2b0 [ 925.231028][T16463] do_recvmmsg+0xdbb/0x22b0 [ 925.235643][T16463] __sys_recvmmsg+0x5dd/0x610 [ 925.240326][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.246394][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.252552][T16463] __do_fast_syscall_32+0x129/0x180 [ 925.257764][T16463] do_fast_syscall_32+0x6a/0xc0 [ 925.262617][T16463] do_SYSENTER_32+0x73/0x90 [ 925.267125][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.273438][T16463] [ 925.275768][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 925.282443][T16463] do_recvmmsg+0xbf/0x22b0 [ 925.286859][T16463] do_recvmmsg+0xbf/0x22b0 [ 926.578244][T16463] not chained 710000 origins [ 926.583063][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 926.591744][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.601954][T16463] Call Trace: [ 926.605269][T16463] dump_stack+0x21c/0x280 [ 926.609627][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 926.615366][T16463] ? kfree_sensitive+0xda/0x120 [ 926.620273][T16463] ? kmsan_get_metadata+0x116/0x180 [ 926.625492][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 926.631057][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 926.636363][T16463] ? kmsan_get_metadata+0x116/0x180 [ 926.641586][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 926.647158][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 926.653606][T16463] ? _copy_from_user+0x201/0x310 [ 926.658569][T16463] ? kmsan_get_metadata+0x116/0x180 [ 926.663788][T16463] __msan_chain_origin+0x50/0x90 [ 926.668750][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 926.674102][T16463] get_compat_msghdr+0x108/0x2b0 [ 926.679203][T16463] do_recvmmsg+0xdbb/0x22b0 [ 926.683753][T16463] ? kmsan_get_metadata+0x116/0x180 [ 926.689138][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 926.694802][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 926.700366][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 926.705145][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 926.709932][T16463] __sys_recvmmsg+0x5dd/0x610 [ 926.714630][T16463] ? kmsan_get_metadata+0x116/0x180 [ 926.719958][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.726048][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.732222][T16463] __do_fast_syscall_32+0x129/0x180 [ 926.737855][T16463] do_fast_syscall_32+0x6a/0xc0 [ 926.742727][T16463] do_SYSENTER_32+0x73/0x90 [ 926.747256][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.753592][T16463] RIP: 0023:0xf7fdc549 [ 926.757810][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 926.777771][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 926.786197][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 926.794182][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.802406][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.810392][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 926.818552][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.826541][T16463] Uninit was stored to memory at: [ 926.831686][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 926.837422][T16463] __msan_chain_origin+0x50/0x90 [ 926.842377][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 926.847649][T16463] get_compat_msghdr+0x108/0x2b0 [ 926.852606][T16463] do_recvmmsg+0xdbb/0x22b0 [ 926.857124][T16463] __sys_recvmmsg+0x5dd/0x610 [ 926.861911][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.867991][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.874151][T16463] __do_fast_syscall_32+0x129/0x180 [ 926.879438][T16463] do_fast_syscall_32+0x6a/0xc0 [ 926.884286][T16463] do_SYSENTER_32+0x73/0x90 [ 926.888796][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.895389][T16463] [ 926.897772][T16463] Uninit was stored to memory at: [ 926.902804][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 926.908524][T16463] __msan_chain_origin+0x50/0x90 [ 926.913464][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 926.918575][T16463] get_compat_msghdr+0x108/0x2b0 [ 926.923513][T16463] do_recvmmsg+0xdbb/0x22b0 [ 926.928017][T16463] __sys_recvmmsg+0x5dd/0x610 [ 926.932701][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.938858][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.945165][T16463] __do_fast_syscall_32+0x129/0x180 [ 926.950372][T16463] do_fast_syscall_32+0x6a/0xc0 [ 926.955224][T16463] do_SYSENTER_32+0x73/0x90 [ 926.960063][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.966437][T16463] [ 926.968771][T16463] Uninit was stored to memory at: [ 926.973924][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 926.979755][T16463] __msan_chain_origin+0x50/0x90 [ 926.984912][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 926.990026][T16463] get_compat_msghdr+0x108/0x2b0 [ 926.994963][T16463] do_recvmmsg+0xdbb/0x22b0 [ 926.999601][T16463] __sys_recvmmsg+0x5dd/0x610 [ 927.004287][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.010357][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.016560][T16463] __do_fast_syscall_32+0x129/0x180 [ 927.021758][T16463] do_fast_syscall_32+0x6a/0xc0 [ 927.026611][T16463] do_SYSENTER_32+0x73/0x90 [ 927.031143][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.037459][T16463] [ 927.039784][T16463] Uninit was stored to memory at: [ 927.044812][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 927.050554][T16463] __msan_chain_origin+0x50/0x90 [ 927.055491][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 927.060810][T16463] get_compat_msghdr+0x108/0x2b0 [ 927.065767][T16463] do_recvmmsg+0xdbb/0x22b0 [ 927.070271][T16463] __sys_recvmmsg+0x5dd/0x610 [ 927.074951][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.081018][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.087175][T16463] __do_fast_syscall_32+0x129/0x180 [ 927.092398][T16463] do_fast_syscall_32+0x6a/0xc0 [ 927.097253][T16463] do_SYSENTER_32+0x73/0x90 [ 927.101757][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.108232][T16463] [ 927.110555][T16463] Uninit was stored to memory at: [ 927.115582][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 927.121304][T16463] __msan_chain_origin+0x50/0x90 [ 927.126244][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 927.131362][T16463] get_compat_msghdr+0x108/0x2b0 [ 927.136386][T16463] do_recvmmsg+0xdbb/0x22b0 [ 927.140888][T16463] __sys_recvmmsg+0x5dd/0x610 [ 927.145564][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.151634][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.157792][T16463] __do_fast_syscall_32+0x129/0x180 [ 927.162990][T16463] do_fast_syscall_32+0x6a/0xc0 [ 927.167841][T16463] do_SYSENTER_32+0x73/0x90 [ 927.172348][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.178664][T16463] [ 927.180987][T16463] Uninit was stored to memory at: [ 927.186015][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 927.191736][T16463] __msan_chain_origin+0x50/0x90 [ 927.196677][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 927.201884][T16463] get_compat_msghdr+0x108/0x2b0 [ 927.206821][T16463] do_recvmmsg+0xdbb/0x22b0 [ 927.211321][T16463] __sys_recvmmsg+0x5dd/0x610 [ 927.215999][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.222067][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.228222][T16463] __do_fast_syscall_32+0x129/0x180 [ 927.233428][T16463] do_fast_syscall_32+0x6a/0xc0 [ 927.238280][T16463] do_SYSENTER_32+0x73/0x90 [ 927.242788][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.249157][T16463] [ 927.251479][T16463] Uninit was stored to memory at: [ 927.256558][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 927.262277][T16463] __msan_chain_origin+0x50/0x90 [ 927.271723][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 927.276833][T16463] get_compat_msghdr+0x108/0x2b0 [ 927.281767][T16463] do_recvmmsg+0xdbb/0x22b0 [ 927.286271][T16463] __sys_recvmmsg+0x5dd/0x610 [ 927.290945][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.297015][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.303303][T16463] __do_fast_syscall_32+0x129/0x180 [ 927.308501][T16463] do_fast_syscall_32+0x6a/0xc0 [ 927.313352][T16463] do_SYSENTER_32+0x73/0x90 [ 927.317857][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.324171][T16463] [ 927.326494][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 927.333167][T16463] do_recvmmsg+0xbf/0x22b0 [ 927.337581][T16463] do_recvmmsg+0xbf/0x22b0 [ 928.813107][T16456] not chained 720000 origins [ 928.817743][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 928.826410][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.836460][T16456] Call Trace: [ 928.839758][T16456] dump_stack+0x21c/0x280 [ 928.844098][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 928.850342][T16456] ? kfree_sensitive+0xda/0x120 [ 928.855201][T16456] ? kmsan_get_metadata+0x116/0x180 [ 928.860404][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 928.865954][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 928.871249][T16456] ? kmsan_get_metadata+0x116/0x180 [ 928.876453][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 928.882005][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 928.888081][T16456] ? _copy_from_user+0x201/0x310 [ 928.893021][T16456] ? kmsan_get_metadata+0x116/0x180 [ 928.898220][T16456] __msan_chain_origin+0x50/0x90 [ 928.903171][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 928.908300][T16456] get_compat_msghdr+0x108/0x2b0 [ 928.913249][T16456] do_recvmmsg+0xdbb/0x22b0 [ 928.917759][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 928.923576][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 928.928874][T16456] ? kmsan_get_metadata+0x116/0x180 [ 928.934074][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 928.939712][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 928.945001][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 928.949763][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 928.954534][T16456] __sys_recvmmsg+0x5dd/0x610 [ 928.959225][T16456] ? kmsan_get_metadata+0x116/0x180 [ 928.964432][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.970535][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.976691][T16456] __do_fast_syscall_32+0x129/0x180 [ 928.981895][T16456] do_fast_syscall_32+0x6a/0xc0 [ 928.986752][T16456] do_SYSENTER_32+0x73/0x90 [ 928.991262][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.997584][T16456] RIP: 0023:0xf7fdc549 [ 929.001652][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 929.021253][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 929.029665][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 929.037632][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 929.045600][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 929.053570][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 929.061540][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.069524][T16456] Uninit was stored to memory at: [ 929.074565][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.080285][T16456] __msan_chain_origin+0x50/0x90 [ 929.085223][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.090332][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.095266][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.099765][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.104462][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.110540][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.116698][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.121902][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.126837][T16456] do_SYSENTER_32+0x73/0x90 [ 929.131342][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.137652][T16456] [ 929.139973][T16456] Uninit was stored to memory at: [ 929.145000][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.150720][T16456] __msan_chain_origin+0x50/0x90 [ 929.155656][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.160769][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.165701][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.170200][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.174875][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.180942][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.187094][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.192292][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.197141][T16456] do_SYSENTER_32+0x73/0x90 [ 929.201646][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.207954][T16456] [ 929.210265][T16456] Uninit was stored to memory at: [ 929.215289][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.221005][T16456] __msan_chain_origin+0x50/0x90 [ 929.225940][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.231048][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.235978][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.240476][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.245154][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.251222][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.257377][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.262574][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.267421][T16456] do_SYSENTER_32+0x73/0x90 [ 929.271928][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.278243][T16456] [ 929.280566][T16456] Uninit was stored to memory at: [ 929.285589][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.291311][T16456] __msan_chain_origin+0x50/0x90 [ 929.296246][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.301359][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.306293][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.310782][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.315465][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.321526][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.327672][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.332868][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.337707][T16456] do_SYSENTER_32+0x73/0x90 [ 929.342202][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.348506][T16456] [ 929.350818][T16456] Uninit was stored to memory at: [ 929.355834][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.361552][T16456] __msan_chain_origin+0x50/0x90 [ 929.366478][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.371579][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.376504][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.380994][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.385658][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.391711][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.397854][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.403042][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.407883][T16456] do_SYSENTER_32+0x73/0x90 [ 929.412377][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.418680][T16456] [ 929.420991][T16456] Uninit was stored to memory at: [ 929.426004][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.431710][T16456] __msan_chain_origin+0x50/0x90 [ 929.436634][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.441733][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.446668][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.451224][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.455889][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.461953][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.468096][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.473295][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.478146][T16456] do_SYSENTER_32+0x73/0x90 [ 929.482638][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.488940][T16456] [ 929.491262][T16456] Uninit was stored to memory at: [ 929.496278][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 929.501986][T16456] __msan_chain_origin+0x50/0x90 [ 929.506912][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 929.512129][T16456] get_compat_msghdr+0x108/0x2b0 [ 929.517058][T16456] do_recvmmsg+0xdbb/0x22b0 [ 929.521548][T16456] __sys_recvmmsg+0x5dd/0x610 [ 929.526217][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.532276][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.538437][T16456] __do_fast_syscall_32+0x129/0x180 [ 929.543628][T16456] do_fast_syscall_32+0x6a/0xc0 [ 929.548471][T16456] do_SYSENTER_32+0x73/0x90 [ 929.552964][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.559267][T16456] [ 929.561592][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 929.568259][T16456] do_recvmmsg+0xbf/0x22b0 [ 929.572662][T16456] do_recvmmsg+0xbf/0x22b0 [ 930.363023][T16463] not chained 730000 origins [ 930.367653][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 930.376312][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.386357][T16463] Call Trace: [ 930.389640][T16463] dump_stack+0x21c/0x280 [ 930.393966][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 930.399676][T16463] ? kfree_sensitive+0xda/0x120 [ 930.404518][T16463] ? kmsan_get_metadata+0x116/0x180 [ 930.409708][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 930.415254][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 930.420534][T16463] ? kmsan_get_metadata+0x116/0x180 [ 930.425736][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 930.431293][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 930.437360][T16463] ? _copy_from_user+0x201/0x310 [ 930.442313][T16463] ? kmsan_get_metadata+0x116/0x180 [ 930.447505][T16463] __msan_chain_origin+0x50/0x90 [ 930.452461][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.457577][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.462509][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.467024][T16463] ? kmsan_get_metadata+0x116/0x180 [ 930.472211][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 930.477836][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 930.483114][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 930.487865][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 930.492619][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.497292][T16463] ? kmsan_get_metadata+0x116/0x180 [ 930.502484][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.508552][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.514698][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.519888][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.524729][T16463] do_SYSENTER_32+0x73/0x90 [ 930.529224][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.535544][T16463] RIP: 0023:0xf7fdc549 [ 930.539608][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 930.559202][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 930.567606][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 930.575565][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.583538][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.591498][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 930.599475][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.607444][T16463] Uninit was stored to memory at: [ 930.612470][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.618177][T16463] __msan_chain_origin+0x50/0x90 [ 930.623105][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.628202][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.633129][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.637617][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.642283][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.648339][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.654482][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.659670][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.664511][T16463] do_SYSENTER_32+0x73/0x90 [ 930.669003][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.675316][T16463] [ 930.677635][T16463] Uninit was stored to memory at: [ 930.682656][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.688371][T16463] __msan_chain_origin+0x50/0x90 [ 930.693303][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.698411][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.703354][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.707855][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.712530][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.718585][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.724729][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.729918][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.734757][T16463] do_SYSENTER_32+0x73/0x90 [ 930.739252][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.745557][T16463] [ 930.747868][T16463] Uninit was stored to memory at: [ 930.752884][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.758593][T16463] __msan_chain_origin+0x50/0x90 [ 930.763518][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.768619][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.773542][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.778031][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.782700][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.788755][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.794896][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.800083][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.804921][T16463] do_SYSENTER_32+0x73/0x90 [ 930.809414][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.815728][T16463] [ 930.818039][T16463] Uninit was stored to memory at: [ 930.823053][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.828767][T16463] __msan_chain_origin+0x50/0x90 [ 930.833696][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.838794][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.843716][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.848206][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.852874][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.858927][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.865069][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.870255][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.875095][T16463] do_SYSENTER_32+0x73/0x90 [ 930.879585][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.885893][T16463] [ 930.888204][T16463] Uninit was stored to memory at: [ 930.897127][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.902833][T16463] __msan_chain_origin+0x50/0x90 [ 930.907758][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.912855][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.917777][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.922264][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.926930][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 930.932986][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 930.939132][T16463] __do_fast_syscall_32+0x129/0x180 [ 930.944317][T16463] do_fast_syscall_32+0x6a/0xc0 [ 930.949155][T16463] do_SYSENTER_32+0x73/0x90 [ 930.953647][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 930.959948][T16463] [ 930.962257][T16463] Uninit was stored to memory at: [ 930.967273][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 930.973003][T16463] __msan_chain_origin+0x50/0x90 [ 930.977930][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 930.983027][T16463] get_compat_msghdr+0x108/0x2b0 [ 930.987950][T16463] do_recvmmsg+0xdbb/0x22b0 [ 930.992442][T16463] __sys_recvmmsg+0x5dd/0x610 [ 930.997109][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.003162][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.009305][T16463] __do_fast_syscall_32+0x129/0x180 [ 931.014490][T16463] do_fast_syscall_32+0x6a/0xc0 [ 931.019328][T16463] do_SYSENTER_32+0x73/0x90 [ 931.023835][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.030148][T16463] [ 931.032456][T16463] Uninit was stored to memory at: [ 931.037472][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 931.043179][T16463] __msan_chain_origin+0x50/0x90 [ 931.048102][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 931.053202][T16463] get_compat_msghdr+0x108/0x2b0 [ 931.058124][T16463] do_recvmmsg+0xdbb/0x22b0 [ 931.062611][T16463] __sys_recvmmsg+0x5dd/0x610 [ 931.067275][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.073329][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.079472][T16463] __do_fast_syscall_32+0x129/0x180 [ 931.084657][T16463] do_fast_syscall_32+0x6a/0xc0 [ 931.089494][T16463] do_SYSENTER_32+0x73/0x90 [ 931.093984][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.100286][T16463] [ 931.102599][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 931.109255][T16463] do_recvmmsg+0xbf/0x22b0 [ 931.113655][T16463] do_recvmmsg+0xbf/0x22b0 [ 932.394087][T16456] not chained 740000 origins [ 932.398720][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 932.407382][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.417429][T16456] Call Trace: [ 932.420726][T16456] dump_stack+0x21c/0x280 [ 932.425067][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 932.430792][T16456] ? kfree_sensitive+0xda/0x120 [ 932.435649][T16456] ? kmsan_get_metadata+0x116/0x180 [ 932.440858][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 932.446416][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 932.451798][T16456] ? kmsan_get_metadata+0x116/0x180 [ 932.458909][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 932.464460][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 932.471674][T16456] ? _copy_from_user+0x201/0x310 [ 932.476618][T16456] ? kmsan_get_metadata+0x116/0x180 [ 932.481819][T16456] __msan_chain_origin+0x50/0x90 [ 932.486765][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.491890][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.496838][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.501352][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 932.507172][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 932.512469][T16456] ? kmsan_get_metadata+0x116/0x180 [ 932.517676][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 932.523319][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 932.528607][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 932.533375][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 932.538148][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.542833][T16456] ? kmsan_get_metadata+0x116/0x180 [ 932.548036][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.554111][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.560274][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.565477][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.570334][T16456] do_SYSENTER_32+0x73/0x90 [ 932.574849][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 932.581181][T16456] RIP: 0023:0xf7fdc549 [ 932.585255][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 932.604863][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 932.613280][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 932.621255][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.629227][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.637200][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 932.645170][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.653150][T16456] Uninit was stored to memory at: [ 932.658184][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 932.663904][T16456] __msan_chain_origin+0x50/0x90 [ 932.668842][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.673953][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.678890][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.683392][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.688075][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.694141][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.700399][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.705706][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.710562][T16456] do_SYSENTER_32+0x73/0x90 [ 932.715067][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 932.721378][T16456] [ 932.723696][T16456] Uninit was stored to memory at: [ 932.728734][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 932.734459][T16456] __msan_chain_origin+0x50/0x90 [ 932.739401][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.744522][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.749458][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.753965][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.758648][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.764741][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.770898][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.776094][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.780944][T16456] do_SYSENTER_32+0x73/0x90 [ 932.785448][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 932.791780][T16456] [ 932.794092][T16456] Uninit was stored to memory at: [ 932.799118][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 932.804924][T16456] __msan_chain_origin+0x50/0x90 [ 932.809863][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.814974][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.819908][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.824410][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.829092][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.835161][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.841317][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.846515][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.851367][T16456] do_SYSENTER_32+0x73/0x90 [ 932.855902][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 932.862301][T16456] [ 932.864622][T16456] Uninit was stored to memory at: [ 932.869651][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 932.875370][T16456] __msan_chain_origin+0x50/0x90 [ 932.880315][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.885429][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.890369][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.894872][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.899552][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.905624][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.911782][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.916985][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.921839][T16456] do_SYSENTER_32+0x73/0x90 [ 932.926344][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 932.932664][T16456] [ 932.934987][T16456] Uninit was stored to memory at: [ 932.940021][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 932.945742][T16456] __msan_chain_origin+0x50/0x90 [ 932.950682][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 932.955799][T16456] get_compat_msghdr+0x108/0x2b0 [ 932.960739][T16456] do_recvmmsg+0xdbb/0x22b0 [ 932.965245][T16456] __sys_recvmmsg+0x5dd/0x610 [ 932.969923][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 932.975992][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 932.982151][T16456] __do_fast_syscall_32+0x129/0x180 [ 932.987354][T16456] do_fast_syscall_32+0x6a/0xc0 [ 932.992209][T16456] do_SYSENTER_32+0x73/0x90 [ 932.996723][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.003039][T16456] [ 933.005361][T16456] Uninit was stored to memory at: [ 933.010391][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 933.016111][T16456] __msan_chain_origin+0x50/0x90 [ 933.021051][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 933.026173][T16456] get_compat_msghdr+0x108/0x2b0 [ 933.031110][T16456] do_recvmmsg+0xdbb/0x22b0 [ 933.035610][T16456] __sys_recvmmsg+0x5dd/0x610 [ 933.040288][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.046358][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.052516][T16456] __do_fast_syscall_32+0x129/0x180 [ 933.057722][T16456] do_fast_syscall_32+0x6a/0xc0 [ 933.062578][T16456] do_SYSENTER_32+0x73/0x90 [ 933.067083][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.073399][T16456] [ 933.075721][T16456] Uninit was stored to memory at: [ 933.080756][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 933.086475][T16456] __msan_chain_origin+0x50/0x90 [ 933.091414][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 933.096530][T16456] get_compat_msghdr+0x108/0x2b0 [ 933.101468][T16456] do_recvmmsg+0xdbb/0x22b0 [ 933.105970][T16456] __sys_recvmmsg+0x5dd/0x610 [ 933.110685][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.116757][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.122936][T16456] __do_fast_syscall_32+0x129/0x180 [ 933.128164][T16456] do_fast_syscall_32+0x6a/0xc0 [ 933.133016][T16456] do_SYSENTER_32+0x73/0x90 [ 933.137524][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.143835][T16456] [ 933.146158][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 933.152831][T16456] do_recvmmsg+0xbf/0x22b0 [ 933.157242][T16456] do_recvmmsg+0xbf/0x22b0 [ 934.244564][T16463] not chained 750000 origins [ 934.249202][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 934.258039][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.268091][T16463] Call Trace: [ 934.271389][T16463] dump_stack+0x21c/0x280 [ 934.275728][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 934.281452][T16463] ? kfree_sensitive+0xda/0x120 [ 934.286309][T16463] ? kmsan_get_metadata+0x116/0x180 [ 934.291520][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 934.297074][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 934.302369][T16463] ? kmsan_get_metadata+0x116/0x180 [ 934.307572][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 934.313126][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 934.319198][T16463] ? _copy_from_user+0x201/0x310 [ 934.324143][T16463] ? kmsan_get_metadata+0x116/0x180 [ 934.329349][T16463] __msan_chain_origin+0x50/0x90 [ 934.334298][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.339425][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.344372][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.348901][T16463] ? kmsan_get_metadata+0x116/0x180 [ 934.354105][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 934.359742][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 934.365044][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 934.369806][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 934.374576][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.379263][T16463] ? kmsan_get_metadata+0x116/0x180 [ 934.384467][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.390553][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.396718][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.401923][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.406785][T16463] do_SYSENTER_32+0x73/0x90 [ 934.411294][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.417615][T16463] RIP: 0023:0xf7fdc549 [ 934.421686][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 934.441287][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 934.449703][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 934.457678][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.465674][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.473644][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 934.481612][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.489672][T16463] Uninit was stored to memory at: [ 934.494702][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.500425][T16463] __msan_chain_origin+0x50/0x90 [ 934.505368][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.510484][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.515426][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.519930][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.524607][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.530680][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.536837][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.542039][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.546893][T16463] do_SYSENTER_32+0x73/0x90 [ 934.551400][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.557713][T16463] [ 934.560036][T16463] Uninit was stored to memory at: [ 934.565071][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.570792][T16463] __msan_chain_origin+0x50/0x90 [ 934.575732][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.580848][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.585785][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.590286][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.594968][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.601049][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.607206][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.612407][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.617258][T16463] do_SYSENTER_32+0x73/0x90 [ 934.621766][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.628077][T16463] [ 934.630400][T16463] Uninit was stored to memory at: [ 934.635426][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.641147][T16463] __msan_chain_origin+0x50/0x90 [ 934.646094][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.651207][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.656144][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.660653][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.665334][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.671401][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.677559][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.682761][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.687613][T16463] do_SYSENTER_32+0x73/0x90 [ 934.692132][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.698534][T16463] [ 934.700861][T16463] Uninit was stored to memory at: [ 934.705896][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.711619][T16463] __msan_chain_origin+0x50/0x90 [ 934.716558][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.721667][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.726605][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.731125][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.735804][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.741871][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.748030][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.753231][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.758081][T16463] do_SYSENTER_32+0x73/0x90 [ 934.762587][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.768898][T16463] [ 934.771217][T16463] Uninit was stored to memory at: [ 934.776245][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.781963][T16463] __msan_chain_origin+0x50/0x90 [ 934.786898][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.792010][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.796944][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.801443][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.806122][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.812189][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.818343][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.823543][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.828397][T16463] do_SYSENTER_32+0x73/0x90 [ 934.832909][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.839224][T16463] [ 934.841548][T16463] Uninit was stored to memory at: [ 934.846576][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.852300][T16463] __msan_chain_origin+0x50/0x90 [ 934.857241][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.862355][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.867293][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.871794][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.876478][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.882547][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.888711][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.893914][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.898768][T16463] do_SYSENTER_32+0x73/0x90 [ 934.903279][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.909593][T16463] [ 934.911913][T16463] Uninit was stored to memory at: [ 934.916945][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 934.922664][T16463] __msan_chain_origin+0x50/0x90 [ 934.927610][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 934.932728][T16463] get_compat_msghdr+0x108/0x2b0 [ 934.937668][T16463] do_recvmmsg+0xdbb/0x22b0 [ 934.942178][T16463] __sys_recvmmsg+0x5dd/0x610 [ 934.946857][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.952929][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.959088][T16463] __do_fast_syscall_32+0x129/0x180 [ 934.964292][T16463] do_fast_syscall_32+0x6a/0xc0 [ 934.969151][T16463] do_SYSENTER_32+0x73/0x90 [ 934.973659][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.979977][T16463] [ 934.982300][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 934.988975][T16463] do_recvmmsg+0xbf/0x22b0 [ 934.993418][T16463] do_recvmmsg+0xbf/0x22b0 [ 936.385664][T16456] not chained 760000 origins [ 936.390294][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 936.398975][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.409034][T16456] Call Trace: [ 936.412335][T16456] dump_stack+0x21c/0x280 [ 936.416679][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 936.422402][T16456] ? kfree_sensitive+0xda/0x120 [ 936.427256][T16456] ? kmsan_get_metadata+0x116/0x180 [ 936.432457][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 936.438010][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 936.443302][T16456] ? kmsan_get_metadata+0x116/0x180 [ 936.448505][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 936.454054][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 936.460125][T16456] ? _copy_from_user+0x201/0x310 [ 936.465065][T16456] ? kmsan_get_metadata+0x116/0x180 [ 936.470268][T16456] __msan_chain_origin+0x50/0x90 [ 936.475210][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.480427][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.485371][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.489885][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 936.495811][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 936.501111][T16456] ? kmsan_get_metadata+0x116/0x180 [ 936.506320][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 936.511964][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 936.517256][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 936.522028][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 936.526797][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.531484][T16456] ? kmsan_get_metadata+0x116/0x180 [ 936.536692][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.542768][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.548930][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.554133][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.558981][T16456] do_SYSENTER_32+0x73/0x90 [ 936.563480][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.569801][T16456] RIP: 0023:0xf7fdc549 [ 936.573870][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 936.593470][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 936.601884][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 936.609854][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.617827][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.625798][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 936.633766][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.641743][T16456] Uninit was stored to memory at: [ 936.646777][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 936.652498][T16456] __msan_chain_origin+0x50/0x90 [ 936.657551][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.662666][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.667707][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.672213][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.676896][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.682963][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.689120][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.694322][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.699175][T16456] do_SYSENTER_32+0x73/0x90 [ 936.703686][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.710001][T16456] [ 936.712321][T16456] Uninit was stored to memory at: [ 936.717349][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 936.723073][T16456] __msan_chain_origin+0x50/0x90 [ 936.728014][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.733130][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.738067][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.742570][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.747442][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.753516][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.759672][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.764871][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.769727][T16456] do_SYSENTER_32+0x73/0x90 [ 936.774235][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.780550][T16456] [ 936.782871][T16456] Uninit was stored to memory at: [ 936.787898][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 936.793617][T16456] __msan_chain_origin+0x50/0x90 [ 936.798555][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.803667][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.808602][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.813103][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.817786][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.823853][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.830008][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.835213][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.840067][T16456] do_SYSENTER_32+0x73/0x90 [ 936.844576][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.850892][T16456] [ 936.853214][T16456] Uninit was stored to memory at: [ 936.858251][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 936.863972][T16456] __msan_chain_origin+0x50/0x90 [ 936.868913][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.874030][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.878971][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.883482][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.888163][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.894235][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.900391][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.905592][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.910444][T16456] do_SYSENTER_32+0x73/0x90 [ 936.914954][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.921267][T16456] [ 936.923587][T16456] Uninit was stored to memory at: [ 936.928616][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 936.934337][T16456] __msan_chain_origin+0x50/0x90 [ 936.939281][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 936.944394][T16456] get_compat_msghdr+0x108/0x2b0 [ 936.949333][T16456] do_recvmmsg+0xdbb/0x22b0 [ 936.953834][T16456] __sys_recvmmsg+0x5dd/0x610 [ 936.958513][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.964583][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.970740][T16456] __do_fast_syscall_32+0x129/0x180 [ 936.975942][T16456] do_fast_syscall_32+0x6a/0xc0 [ 936.980793][T16456] do_SYSENTER_32+0x73/0x90 [ 936.985309][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.991621][T16456] [ 936.993944][T16456] Uninit was stored to memory at: [ 936.998975][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 937.004695][T16456] __msan_chain_origin+0x50/0x90 [ 937.009632][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 937.014745][T16456] get_compat_msghdr+0x108/0x2b0 [ 937.019680][T16456] do_recvmmsg+0xdbb/0x22b0 [ 937.024182][T16456] __sys_recvmmsg+0x5dd/0x610 [ 937.028863][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.034931][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.041086][T16456] __do_fast_syscall_32+0x129/0x180 [ 937.046286][T16456] do_fast_syscall_32+0x6a/0xc0 [ 937.051141][T16456] do_SYSENTER_32+0x73/0x90 [ 937.055651][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.061964][T16456] [ 937.064289][T16456] Uninit was stored to memory at: [ 937.069319][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 937.075038][T16456] __msan_chain_origin+0x50/0x90 [ 937.079976][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 937.085090][T16456] get_compat_msghdr+0x108/0x2b0 [ 937.090027][T16456] do_recvmmsg+0xdbb/0x22b0 [ 937.094535][T16456] __sys_recvmmsg+0x5dd/0x610 [ 937.099214][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.105280][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.111436][T16456] __do_fast_syscall_32+0x129/0x180 [ 937.116640][T16456] do_fast_syscall_32+0x6a/0xc0 [ 937.121490][T16456] do_SYSENTER_32+0x73/0x90 [ 937.126000][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.132314][T16456] [ 937.134637][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 937.141313][T16456] do_recvmmsg+0xbf/0x22b0 [ 937.145727][T16456] do_recvmmsg+0xbf/0x22b0 [ 938.378974][T16463] not chained 770000 origins [ 938.383606][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 938.392284][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.402447][T16463] Call Trace: [ 938.405743][T16463] dump_stack+0x21c/0x280 [ 938.410092][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 938.415822][T16463] ? kfree_sensitive+0xda/0x120 [ 938.420684][T16463] ? kmsan_get_metadata+0x116/0x180 [ 938.425881][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 938.431421][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 938.436701][T16463] ? kmsan_get_metadata+0x116/0x180 [ 938.441888][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 938.447427][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 938.453505][T16463] ? _copy_from_user+0x201/0x310 [ 938.458437][T16463] ? kmsan_get_metadata+0x116/0x180 [ 938.463624][T16463] __msan_chain_origin+0x50/0x90 [ 938.468564][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.473679][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.478614][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.483131][T16463] ? kmsan_get_metadata+0x116/0x180 [ 938.488362][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 938.493996][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 938.499272][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 938.504024][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 938.508780][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.513454][T16463] ? kmsan_get_metadata+0x116/0x180 [ 938.518654][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.524737][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.530891][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.536093][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.540944][T16463] do_SYSENTER_32+0x73/0x90 [ 938.545442][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.551755][T16463] RIP: 0023:0xf7fdc549 [ 938.555815][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 938.575410][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 938.583812][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 938.591773][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.599732][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.607693][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 938.615651][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.623628][T16463] Uninit was stored to memory at: [ 938.628646][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.634355][T16463] __msan_chain_origin+0x50/0x90 [ 938.639281][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.644467][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.649391][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.653880][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.658545][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.664599][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.670741][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.675928][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.680780][T16463] do_SYSENTER_32+0x73/0x90 [ 938.685285][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.691592][T16463] [ 938.693907][T16463] Uninit was stored to memory at: [ 938.698928][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.704648][T16463] __msan_chain_origin+0x50/0x90 [ 938.709579][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.714679][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.719605][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.724097][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.728770][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.734828][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.740976][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.746167][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.751007][T16463] do_SYSENTER_32+0x73/0x90 [ 938.755502][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.761808][T16463] [ 938.764122][T16463] Uninit was stored to memory at: [ 938.769139][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.774846][T16463] __msan_chain_origin+0x50/0x90 [ 938.779775][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.784874][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.789798][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.794286][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.798950][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.805004][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.811145][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.816332][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.821171][T16463] do_SYSENTER_32+0x73/0x90 [ 938.825663][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.831967][T16463] [ 938.834276][T16463] Uninit was stored to memory at: [ 938.839289][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.844998][T16463] __msan_chain_origin+0x50/0x90 [ 938.849922][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.855042][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.859965][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.864454][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.869125][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.875178][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.881321][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.886507][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.891346][T16463] do_SYSENTER_32+0x73/0x90 [ 938.895840][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.902144][T16463] [ 938.904457][T16463] Uninit was stored to memory at: [ 938.909470][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.915175][T16463] __msan_chain_origin+0x50/0x90 [ 938.920100][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.925199][T16463] get_compat_msghdr+0x108/0x2b0 [ 938.930124][T16463] do_recvmmsg+0xdbb/0x22b0 [ 938.934612][T16463] __sys_recvmmsg+0x5dd/0x610 [ 938.939276][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.945329][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.951646][T16463] __do_fast_syscall_32+0x129/0x180 [ 938.956834][T16463] do_fast_syscall_32+0x6a/0xc0 [ 938.961688][T16463] do_SYSENTER_32+0x73/0x90 [ 938.966180][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.972483][T16463] [ 938.974793][T16463] Uninit was stored to memory at: [ 938.979809][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 938.985516][T16463] __msan_chain_origin+0x50/0x90 [ 938.990454][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 938.995555][T16463] get_compat_msghdr+0x108/0x2b0 [ 939.000477][T16463] do_recvmmsg+0xdbb/0x22b0 [ 939.004976][T16463] __sys_recvmmsg+0x5dd/0x610 [ 939.009641][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 939.015705][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 939.021855][T16463] __do_fast_syscall_32+0x129/0x180 [ 939.027129][T16463] do_fast_syscall_32+0x6a/0xc0 [ 939.031970][T16463] do_SYSENTER_32+0x73/0x90 [ 939.036465][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 939.042766][T16463] [ 939.045077][T16463] Uninit was stored to memory at: [ 939.050098][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 939.055902][T16463] __msan_chain_origin+0x50/0x90 [ 939.060827][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 939.065930][T16463] get_compat_msghdr+0x108/0x2b0 [ 939.070852][T16463] do_recvmmsg+0xdbb/0x22b0 [ 939.075341][T16463] __sys_recvmmsg+0x5dd/0x610 [ 939.080005][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 939.086066][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 939.092214][T16463] __do_fast_syscall_32+0x129/0x180 [ 939.097403][T16463] do_fast_syscall_32+0x6a/0xc0 [ 939.102243][T16463] do_SYSENTER_32+0x73/0x90 [ 939.106738][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 939.113047][T16463] [ 939.115358][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 939.122015][T16463] do_recvmmsg+0xbf/0x22b0 [ 939.126417][T16463] do_recvmmsg+0xbf/0x22b0 [ 940.339337][T16463] not chained 780000 origins [ 940.343969][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 940.352634][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.362689][T16463] Call Trace: [ 940.365992][T16463] dump_stack+0x21c/0x280 [ 940.370334][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 940.376059][T16463] ? kfree_sensitive+0xda/0x120 [ 940.380915][T16463] ? kmsan_get_metadata+0x116/0x180 [ 940.386122][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 940.391681][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 940.396978][T16463] ? kmsan_get_metadata+0x116/0x180 [ 940.402180][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 940.407736][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 940.413810][T16463] ? _copy_from_user+0x201/0x310 [ 940.418757][T16463] ? kmsan_get_metadata+0x116/0x180 [ 940.423961][T16463] __msan_chain_origin+0x50/0x90 [ 940.428908][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.434041][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.438989][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.443528][T16463] ? kmsan_get_metadata+0x116/0x180 [ 940.448727][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 940.454384][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 940.459666][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 940.464421][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 940.469183][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.473858][T16463] ? kmsan_get_metadata+0x116/0x180 [ 940.479059][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.485126][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.491283][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.496479][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.501324][T16463] do_SYSENTER_32+0x73/0x90 [ 940.505826][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.512151][T16463] RIP: 0023:0xf7fdc549 [ 940.516210][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 940.535892][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 940.544304][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 940.552265][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.560245][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.568218][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 940.576182][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.584148][T16463] Uninit was stored to memory at: [ 940.589166][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.594874][T16463] __msan_chain_origin+0x50/0x90 [ 940.599800][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.604897][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.609820][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.614310][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.618977][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.625033][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.631176][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.636364][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.641214][T16463] do_SYSENTER_32+0x73/0x90 [ 940.645711][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.652015][T16463] [ 940.654325][T16463] Uninit was stored to memory at: [ 940.659343][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.665052][T16463] __msan_chain_origin+0x50/0x90 [ 940.669982][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.675081][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.680008][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.684498][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.689177][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.695233][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.701387][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.706579][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.711422][T16463] do_SYSENTER_32+0x73/0x90 [ 940.715919][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.722227][T16463] [ 940.724545][T16463] Uninit was stored to memory at: [ 940.729569][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.735282][T16463] __msan_chain_origin+0x50/0x90 [ 940.740213][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.745325][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.750252][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.754742][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.759408][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.765464][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.771606][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.776795][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.781635][T16463] do_SYSENTER_32+0x73/0x90 [ 940.786129][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.792439][T16463] [ 940.794748][T16463] Uninit was stored to memory at: [ 940.799763][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.805468][T16463] __msan_chain_origin+0x50/0x90 [ 940.810406][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.815510][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.820433][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.824933][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.829601][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.835654][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.841796][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.846980][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.851819][T16463] do_SYSENTER_32+0x73/0x90 [ 940.856314][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.862618][T16463] [ 940.864929][T16463] Uninit was stored to memory at: [ 940.869943][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.875649][T16463] __msan_chain_origin+0x50/0x90 [ 940.880574][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.885672][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.890603][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.895092][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.899759][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.905813][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.911957][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.917143][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.921982][T16463] do_SYSENTER_32+0x73/0x90 [ 940.926476][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.932782][T16463] [ 940.935093][T16463] Uninit was stored to memory at: [ 940.940107][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 940.945815][T16463] __msan_chain_origin+0x50/0x90 [ 940.950739][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 940.955836][T16463] get_compat_msghdr+0x108/0x2b0 [ 940.960758][T16463] do_recvmmsg+0xdbb/0x22b0 [ 940.965247][T16463] __sys_recvmmsg+0x5dd/0x610 [ 940.969913][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.975970][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.982117][T16463] __do_fast_syscall_32+0x129/0x180 [ 940.987315][T16463] do_fast_syscall_32+0x6a/0xc0 [ 940.992155][T16463] do_SYSENTER_32+0x73/0x90 [ 940.996656][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 941.002958][T16463] [ 941.005269][T16463] Uninit was stored to memory at: [ 941.010283][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 941.015996][T16463] __msan_chain_origin+0x50/0x90 [ 941.020921][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 941.026019][T16463] get_compat_msghdr+0x108/0x2b0 [ 941.030955][T16463] do_recvmmsg+0xdbb/0x22b0 [ 941.035444][T16463] __sys_recvmmsg+0x5dd/0x610 [ 941.040110][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 941.046179][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 941.052320][T16463] __do_fast_syscall_32+0x129/0x180 [ 941.057510][T16463] do_fast_syscall_32+0x6a/0xc0 [ 941.062350][T16463] do_SYSENTER_32+0x73/0x90 [ 941.066841][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 941.073144][T16463] [ 941.075457][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 941.082118][T16463] do_recvmmsg+0xbf/0x22b0 [ 941.086521][T16463] do_recvmmsg+0xbf/0x22b0 [ 942.667677][T16456] not chained 790000 origins [ 942.672308][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 942.680972][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.691031][T16456] Call Trace: [ 942.694332][T16456] dump_stack+0x21c/0x280 [ 942.698679][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 942.704402][T16456] ? kfree_sensitive+0xda/0x120 [ 942.709254][T16456] ? kmsan_get_metadata+0x116/0x180 [ 942.714459][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 942.720019][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 942.725313][T16456] ? kmsan_get_metadata+0x116/0x180 [ 942.730518][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 942.736073][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 942.742144][T16456] ? _copy_from_user+0x201/0x310 [ 942.747087][T16456] ? kmsan_get_metadata+0x116/0x180 [ 942.752300][T16456] __msan_chain_origin+0x50/0x90 [ 942.757247][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 942.762382][T16456] get_compat_msghdr+0x108/0x2b0 [ 942.767337][T16456] do_recvmmsg+0xdbb/0x22b0 [ 942.771849][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 942.777669][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 942.782968][T16456] ? kmsan_get_metadata+0x116/0x180 [ 942.788185][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 942.793824][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 942.799109][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 942.803871][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 942.808641][T16456] __sys_recvmmsg+0x5dd/0x610 [ 942.813330][T16456] ? kmsan_get_metadata+0x116/0x180 [ 942.818536][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.824615][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.830774][T16456] __do_fast_syscall_32+0x129/0x180 [ 942.835978][T16456] do_fast_syscall_32+0x6a/0xc0 [ 942.840835][T16456] do_SYSENTER_32+0x73/0x90 [ 942.845346][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.851672][T16456] RIP: 0023:0xf7fdc549 [ 942.855743][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 942.875346][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 942.883761][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 942.891731][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.899701][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.907672][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 942.915645][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.923647][T16456] Uninit was stored to memory at: [ 942.928680][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 942.934400][T16456] __msan_chain_origin+0x50/0x90 [ 942.939338][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 942.944450][T16456] get_compat_msghdr+0x108/0x2b0 [ 942.949386][T16456] do_recvmmsg+0xdbb/0x22b0 [ 942.953885][T16456] __sys_recvmmsg+0x5dd/0x610 [ 942.958568][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.964639][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.970796][T16456] __do_fast_syscall_32+0x129/0x180 [ 942.975995][T16456] do_fast_syscall_32+0x6a/0xc0 [ 942.980847][T16456] do_SYSENTER_32+0x73/0x90 [ 942.985349][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.991659][T16456] [ 942.993982][T16456] Uninit was stored to memory at: [ 942.999011][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.004729][T16456] __msan_chain_origin+0x50/0x90 [ 943.009670][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.014778][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.019712][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.024212][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.028891][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.034968][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.041216][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.046416][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.051266][T16456] do_SYSENTER_32+0x73/0x90 [ 943.055769][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.062082][T16456] [ 943.064402][T16456] Uninit was stored to memory at: [ 943.069429][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.075150][T16456] __msan_chain_origin+0x50/0x90 [ 943.080089][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.085199][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.090136][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.094634][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.099312][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.105384][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.111539][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.116742][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.121595][T16456] do_SYSENTER_32+0x73/0x90 [ 943.126100][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.132414][T16456] [ 943.134734][T16456] Uninit was stored to memory at: [ 943.139769][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.145492][T16456] __msan_chain_origin+0x50/0x90 [ 943.150431][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.155543][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.160481][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.164985][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.169671][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.175744][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.181904][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.187106][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.191961][T16456] do_SYSENTER_32+0x73/0x90 [ 943.196473][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.202788][T16456] [ 943.205113][T16456] Uninit was stored to memory at: [ 943.210146][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.215868][T16456] __msan_chain_origin+0x50/0x90 [ 943.220805][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.225919][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.230861][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.235363][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.240045][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.246113][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.252267][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.257473][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.262324][T16456] do_SYSENTER_32+0x73/0x90 [ 943.266834][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.273144][T16456] [ 943.275463][T16456] Uninit was stored to memory at: [ 943.280491][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.286218][T16456] __msan_chain_origin+0x50/0x90 [ 943.291154][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.296269][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.301206][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.305707][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.310389][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.316459][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.322612][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.327813][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.332661][T16456] do_SYSENTER_32+0x73/0x90 [ 943.337168][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.343480][T16456] [ 943.345799][T16456] Uninit was stored to memory at: [ 943.350831][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 943.356551][T16456] __msan_chain_origin+0x50/0x90 [ 943.361491][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 943.366603][T16456] get_compat_msghdr+0x108/0x2b0 [ 943.371539][T16456] do_recvmmsg+0xdbb/0x22b0 [ 943.376042][T16456] __sys_recvmmsg+0x5dd/0x610 [ 943.380719][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.386794][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.392954][T16456] __do_fast_syscall_32+0x129/0x180 [ 943.398154][T16456] do_fast_syscall_32+0x6a/0xc0 [ 943.403005][T16456] do_SYSENTER_32+0x73/0x90 [ 943.407514][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.413828][T16456] [ 943.416148][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 943.422825][T16456] do_recvmmsg+0xbf/0x22b0 [ 943.427248][T16456] do_recvmmsg+0xbf/0x22b0 [ 944.518297][T16463] not chained 800000 origins [ 944.522923][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 944.531585][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.541633][T16463] Call Trace: [ 944.544929][T16463] dump_stack+0x21c/0x280 [ 944.549266][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 944.554987][T16463] ? kfree_sensitive+0xda/0x120 [ 944.559843][T16463] ? kmsan_get_metadata+0x116/0x180 [ 944.565047][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.570599][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 944.575889][T16463] ? kmsan_get_metadata+0x116/0x180 [ 944.581090][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.586676][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 944.592747][T16463] ? _copy_from_user+0x201/0x310 [ 944.597687][T16463] ? kmsan_get_metadata+0x116/0x180 [ 944.602885][T16463] __msan_chain_origin+0x50/0x90 [ 944.607824][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 944.612947][T16463] get_compat_msghdr+0x108/0x2b0 [ 944.617888][T16463] do_recvmmsg+0xdbb/0x22b0 [ 944.622449][T16463] ? kmsan_get_metadata+0x116/0x180 [ 944.627648][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 944.633316][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 944.638603][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 944.643362][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 944.648173][T16463] __sys_recvmmsg+0x5dd/0x610 [ 944.652857][T16463] ? kmsan_get_metadata+0x116/0x180 [ 944.658250][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.664333][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.670492][T16463] __do_fast_syscall_32+0x129/0x180 [ 944.675697][T16463] do_fast_syscall_32+0x6a/0xc0 [ 944.680554][T16463] do_SYSENTER_32+0x73/0x90 [ 944.685061][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.691480][T16463] RIP: 0023:0xf7fdc549 [ 944.695572][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 944.715362][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 944.723774][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 944.731831][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.739820][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.747822][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 944.755792][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.763770][T16463] Uninit was stored to memory at: [ 944.768798][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 944.774517][T16463] __msan_chain_origin+0x50/0x90 [ 944.779451][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 944.784560][T16463] get_compat_msghdr+0x108/0x2b0 [ 944.789493][T16463] do_recvmmsg+0xdbb/0x22b0 [ 944.793990][T16463] __sys_recvmmsg+0x5dd/0x610 [ 944.798698][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.804792][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.810943][T16463] __do_fast_syscall_32+0x129/0x180 [ 944.816140][T16463] do_fast_syscall_32+0x6a/0xc0 [ 944.820989][T16463] do_SYSENTER_32+0x73/0x90 [ 944.825578][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.831907][T16463] [ 944.834225][T16463] Uninit was stored to memory at: [ 944.839251][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 944.844967][T16463] __msan_chain_origin+0x50/0x90 [ 944.849939][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 944.855044][T16463] get_compat_msghdr+0x108/0x2b0 [ 944.859975][T16463] do_recvmmsg+0xdbb/0x22b0 [ 944.864472][T16463] __sys_recvmmsg+0x5dd/0x610 [ 944.869144][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.875224][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.881377][T16463] __do_fast_syscall_32+0x129/0x180 [ 944.886574][T16463] do_fast_syscall_32+0x6a/0xc0 [ 944.891426][T16463] do_SYSENTER_32+0x73/0x90 [ 944.895930][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.902248][T16463] [ 944.904566][T16463] Uninit was stored to memory at: [ 944.909595][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 944.915309][T16463] __msan_chain_origin+0x50/0x90 [ 944.920294][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 944.925403][T16463] get_compat_msghdr+0x108/0x2b0 [ 944.930336][T16463] do_recvmmsg+0xdbb/0x22b0 [ 944.934833][T16463] __sys_recvmmsg+0x5dd/0x610 [ 944.939509][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.945577][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.951738][T16463] __do_fast_syscall_32+0x129/0x180 [ 944.956933][T16463] do_fast_syscall_32+0x6a/0xc0 [ 944.961781][T16463] do_SYSENTER_32+0x73/0x90 [ 944.966285][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.972597][T16463] [ 944.974920][T16463] Uninit was stored to memory at: [ 944.979941][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 944.985658][T16463] __msan_chain_origin+0x50/0x90 [ 944.990594][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 944.995697][T16463] get_compat_msghdr+0x108/0x2b0 [ 945.000676][T16463] do_recvmmsg+0xdbb/0x22b0 [ 945.005174][T16463] __sys_recvmmsg+0x5dd/0x610 [ 945.009848][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.016008][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.022159][T16463] __do_fast_syscall_32+0x129/0x180 [ 945.027354][T16463] do_fast_syscall_32+0x6a/0xc0 [ 945.032198][T16463] do_SYSENTER_32+0x73/0x90 [ 945.036785][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.043105][T16463] [ 945.045462][T16463] Uninit was stored to memory at: [ 945.050484][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 945.056201][T16463] __msan_chain_origin+0x50/0x90 [ 945.061182][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 945.066287][T16463] get_compat_msghdr+0x108/0x2b0 [ 945.071216][T16463] do_recvmmsg+0xdbb/0x22b0 [ 945.075714][T16463] __sys_recvmmsg+0x5dd/0x610 [ 945.080394][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.086458][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.092607][T16463] __do_fast_syscall_32+0x129/0x180 [ 945.097843][T16463] do_fast_syscall_32+0x6a/0xc0 [ 945.102691][T16463] do_SYSENTER_32+0x73/0x90 [ 945.107196][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.113507][T16463] [ 945.115825][T16463] Uninit was stored to memory at: [ 945.120846][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 945.126565][T16463] __msan_chain_origin+0x50/0x90 [ 945.131501][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 945.136606][T16463] get_compat_msghdr+0x108/0x2b0 [ 945.141534][T16463] do_recvmmsg+0xdbb/0x22b0 [ 945.146031][T16463] __sys_recvmmsg+0x5dd/0x610 [ 945.150706][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.156774][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.162924][T16463] __do_fast_syscall_32+0x129/0x180 [ 945.168120][T16463] do_fast_syscall_32+0x6a/0xc0 [ 945.172964][T16463] do_SYSENTER_32+0x73/0x90 [ 945.177517][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.183828][T16463] [ 945.186148][T16463] Uninit was stored to memory at: [ 945.191211][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 945.196924][T16463] __msan_chain_origin+0x50/0x90 [ 945.201868][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 945.206973][T16463] get_compat_msghdr+0x108/0x2b0 [ 945.211901][T16463] do_recvmmsg+0xdbb/0x22b0 [ 945.216398][T16463] __sys_recvmmsg+0x5dd/0x610 [ 945.221075][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.227139][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.233289][T16463] __do_fast_syscall_32+0x129/0x180 [ 945.238484][T16463] do_fast_syscall_32+0x6a/0xc0 [ 945.243331][T16463] do_SYSENTER_32+0x73/0x90 [ 945.247832][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.254141][T16463] [ 945.256462][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 945.263129][T16463] do_recvmmsg+0xbf/0x22b0 [ 945.267536][T16463] do_recvmmsg+0xbf/0x22b0 [ 946.264908][T16463] not chained 810000 origins [ 946.269555][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 946.278484][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.288534][T16463] Call Trace: [ 946.291880][T16463] dump_stack+0x21c/0x280 [ 946.296215][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 946.301936][T16463] ? kfree_sensitive+0xda/0x120 [ 946.306854][T16463] ? kmsan_get_metadata+0x116/0x180 [ 946.312050][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 946.317598][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 946.322882][T16463] ? kmsan_get_metadata+0x116/0x180 [ 946.328120][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 946.333665][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 946.339733][T16463] ? _copy_from_user+0x201/0x310 [ 946.344673][T16463] ? kmsan_get_metadata+0x116/0x180 [ 946.349871][T16463] __msan_chain_origin+0x50/0x90 [ 946.354840][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.359971][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.364919][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.369443][T16463] ? kmsan_get_metadata+0x116/0x180 [ 946.374644][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 946.380297][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 946.385580][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 946.390338][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 946.395101][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.399782][T16463] ? kmsan_get_metadata+0x116/0x180 [ 946.404991][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.411107][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.417277][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.422478][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.427330][T16463] do_SYSENTER_32+0x73/0x90 [ 946.431834][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.438152][T16463] RIP: 0023:0xf7fdc549 [ 946.442216][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 946.461816][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 946.470231][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 946.478197][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.486203][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.494165][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 946.502130][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.510103][T16463] Uninit was stored to memory at: [ 946.515129][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.520841][T16463] __msan_chain_origin+0x50/0x90 [ 946.525814][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.530922][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.535857][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.540353][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.545026][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.551089][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.557237][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.562431][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.567278][T16463] do_SYSENTER_32+0x73/0x90 [ 946.571779][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.578089][T16463] [ 946.580407][T16463] Uninit was stored to memory at: [ 946.585425][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.591137][T16463] __msan_chain_origin+0x50/0x90 [ 946.596103][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.601208][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.606146][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.610645][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.615315][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.621380][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.627533][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.632730][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.637575][T16463] do_SYSENTER_32+0x73/0x90 [ 946.642081][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.648390][T16463] [ 946.650706][T16463] Uninit was stored to memory at: [ 946.655728][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.661441][T16463] __msan_chain_origin+0x50/0x90 [ 946.666382][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.671778][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.676715][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.681214][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.685889][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.691958][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.698246][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.703454][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.708312][T16463] do_SYSENTER_32+0x73/0x90 [ 946.712824][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.719135][T16463] [ 946.721455][T16463] Uninit was stored to memory at: [ 946.726486][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.732206][T16463] __msan_chain_origin+0x50/0x90 [ 946.737144][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.742253][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.747226][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.751732][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.756411][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.762520][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.768676][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.773871][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.778718][T16463] do_SYSENTER_32+0x73/0x90 [ 946.783223][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.789670][T16463] [ 946.791990][T16463] Uninit was stored to memory at: [ 946.797048][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.802764][T16463] __msan_chain_origin+0x50/0x90 [ 946.807698][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.812806][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.817739][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.822245][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.826921][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.832988][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.839141][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.844339][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.849186][T16463] do_SYSENTER_32+0x73/0x90 [ 946.853689][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.860009][T16463] [ 946.862344][T16463] Uninit was stored to memory at: [ 946.867369][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.873085][T16463] __msan_chain_origin+0x50/0x90 [ 946.878020][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.883129][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.888061][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.892575][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.897249][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.903311][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.909465][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.914660][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.919510][T16463] do_SYSENTER_32+0x73/0x90 [ 946.924012][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.930322][T16463] [ 946.932638][T16463] Uninit was stored to memory at: [ 946.937661][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 946.943379][T16463] __msan_chain_origin+0x50/0x90 [ 946.948469][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 946.953596][T16463] get_compat_msghdr+0x108/0x2b0 [ 946.958536][T16463] do_recvmmsg+0xdbb/0x22b0 [ 946.963039][T16463] __sys_recvmmsg+0x5dd/0x610 [ 946.967719][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.973796][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.979958][T16463] __do_fast_syscall_32+0x129/0x180 [ 946.985158][T16463] do_fast_syscall_32+0x6a/0xc0 [ 946.990061][T16463] do_SYSENTER_32+0x73/0x90 [ 946.994564][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.000875][T16463] [ 947.003231][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 947.009902][T16463] do_recvmmsg+0xbf/0x22b0 [ 947.014313][T16463] do_recvmmsg+0xbf/0x22b0 [ 948.011191][T16456] not chained 820000 origins [ 948.015989][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 948.024664][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.034725][T16456] Call Trace: [ 948.038120][T16456] dump_stack+0x21c/0x280 [ 948.042472][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 948.048215][T16456] ? kfree_sensitive+0xda/0x120 [ 948.053086][T16456] ? kmsan_get_metadata+0x116/0x180 [ 948.058301][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 948.063877][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 948.069181][T16456] ? kmsan_get_metadata+0x116/0x180 [ 948.074393][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 948.079962][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 948.086044][T16456] ? _copy_from_user+0x201/0x310 [ 948.091001][T16456] ? kmsan_get_metadata+0x116/0x180 [ 948.096241][T16456] __msan_chain_origin+0x50/0x90 [ 948.101202][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.106347][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.111302][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.115819][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 948.121641][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 948.126943][T16456] ? kmsan_get_metadata+0x116/0x180 [ 948.132157][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 948.137805][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 948.143104][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 948.147880][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 948.152744][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.157465][T16456] ? kmsan_get_metadata+0x116/0x180 [ 948.162683][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.168772][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.174966][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.180180][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.185052][T16456] do_SYSENTER_32+0x73/0x90 [ 948.189576][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.195920][T16456] RIP: 0023:0xf7fdc549 [ 948.199998][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 948.219731][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 948.228158][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 948.236141][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.244122][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.252895][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 948.260877][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.268870][T16456] Uninit was stored to memory at: [ 948.273917][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.279650][T16456] __msan_chain_origin+0x50/0x90 [ 948.284603][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.289731][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.294674][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.299183][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.303876][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.309956][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.316270][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.321584][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.326544][T16456] do_SYSENTER_32+0x73/0x90 [ 948.331062][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.337384][T16456] [ 948.339717][T16456] Uninit was stored to memory at: [ 948.344752][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.350574][T16456] __msan_chain_origin+0x50/0x90 [ 948.355524][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.360646][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.365591][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.370110][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.374811][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.380891][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.387074][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.392546][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.397408][T16456] do_SYSENTER_32+0x73/0x90 [ 948.401929][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.408255][T16456] [ 948.410586][T16456] Uninit was stored to memory at: [ 948.415621][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.421350][T16456] __msan_chain_origin+0x50/0x90 [ 948.426297][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.431419][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.436367][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.440966][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.445656][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.451821][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.457995][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.463295][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.468159][T16456] do_SYSENTER_32+0x73/0x90 [ 948.472674][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.478997][T16456] [ 948.481329][T16456] Uninit was stored to memory at: [ 948.486531][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.492348][T16456] __msan_chain_origin+0x50/0x90 [ 948.497298][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.502425][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.507370][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.511883][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.516762][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.522861][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.529031][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.534360][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.539226][T16456] do_SYSENTER_32+0x73/0x90 [ 948.543841][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.550163][T16456] [ 948.552497][T16456] Uninit was stored to memory at: [ 948.557666][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.563396][T16456] __msan_chain_origin+0x50/0x90 [ 948.568345][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.578414][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.583358][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.587869][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.592559][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.598640][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.604808][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.610050][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.614908][T16456] do_SYSENTER_32+0x73/0x90 [ 948.619422][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.625738][T16456] [ 948.628068][T16456] Uninit was stored to memory at: [ 948.633106][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.638834][T16456] __msan_chain_origin+0x50/0x90 [ 948.643783][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.648901][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.653843][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.658354][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.663047][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.669127][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.675394][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.680599][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.685457][T16456] do_SYSENTER_32+0x73/0x90 [ 948.689969][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.696380][T16456] [ 948.698718][T16456] Uninit was stored to memory at: [ 948.703770][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 948.709517][T16456] __msan_chain_origin+0x50/0x90 [ 948.714464][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 948.719584][T16456] get_compat_msghdr+0x108/0x2b0 [ 948.724531][T16456] do_recvmmsg+0xdbb/0x22b0 [ 948.729036][T16456] __sys_recvmmsg+0x5dd/0x610 [ 948.733730][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.739810][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.745972][T16456] __do_fast_syscall_32+0x129/0x180 [ 948.751176][T16456] do_fast_syscall_32+0x6a/0xc0 [ 948.756036][T16456] do_SYSENTER_32+0x73/0x90 [ 948.760577][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.766898][T16456] [ 948.769244][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 948.775921][T16456] do_recvmmsg+0xbf/0x22b0 [ 948.780348][T16456] do_recvmmsg+0xbf/0x22b0 [ 949.944121][T16463] not chained 830000 origins [ 949.948752][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 949.957419][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.968423][T16463] Call Trace: [ 949.971723][T16463] dump_stack+0x21c/0x280 [ 949.976075][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 949.981801][T16463] ? kfree_sensitive+0xda/0x120 [ 949.986654][T16463] ? kmsan_get_metadata+0x116/0x180 [ 949.992301][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 949.997856][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 950.003148][T16463] ? kmsan_get_metadata+0x116/0x180 [ 950.008352][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 950.013907][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 950.019982][T16463] ? _copy_from_user+0x201/0x310 [ 950.024928][T16463] ? kmsan_get_metadata+0x116/0x180 [ 950.030139][T16463] __msan_chain_origin+0x50/0x90 [ 950.035083][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.040213][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.045161][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.049699][T16463] ? kmsan_get_metadata+0x116/0x180 [ 950.054901][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 950.060544][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 950.065833][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 950.070596][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 950.075362][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.080048][T16463] ? kmsan_get_metadata+0x116/0x180 [ 950.085252][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.091335][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.097496][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.102710][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.107567][T16463] do_SYSENTER_32+0x73/0x90 [ 950.112080][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.118405][T16463] RIP: 0023:0xf7fdc549 [ 950.122472][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 950.142074][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 950.150488][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 950.158456][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.166427][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.174481][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 950.182450][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.190430][T16463] Uninit was stored to memory at: [ 950.195484][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.201204][T16463] __msan_chain_origin+0x50/0x90 [ 950.206142][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.211261][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.216196][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.220695][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.225369][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.231436][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.237592][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.242792][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.247648][T16463] do_SYSENTER_32+0x73/0x90 [ 950.252158][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.258472][T16463] [ 950.260793][T16463] Uninit was stored to memory at: [ 950.265816][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.271534][T16463] __msan_chain_origin+0x50/0x90 [ 950.276479][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.281594][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.286534][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.291039][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.295720][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.301786][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.307943][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.313144][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.318002][T16463] do_SYSENTER_32+0x73/0x90 [ 950.322507][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.328832][T16463] [ 950.331152][T16463] Uninit was stored to memory at: [ 950.336183][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.341902][T16463] __msan_chain_origin+0x50/0x90 [ 950.346838][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.351948][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.356886][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.361386][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.366064][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.372129][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.378286][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.383484][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.388341][T16463] do_SYSENTER_32+0x73/0x90 [ 950.392847][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.399155][T16463] [ 950.401474][T16463] Uninit was stored to memory at: [ 950.406502][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.412222][T16463] __msan_chain_origin+0x50/0x90 [ 950.417161][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.422273][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.427206][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.431706][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.436387][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.442450][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.448609][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.453806][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.458657][T16463] do_SYSENTER_32+0x73/0x90 [ 950.463162][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.469476][T16463] [ 950.471795][T16463] Uninit was stored to memory at: [ 950.476822][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.482536][T16463] __msan_chain_origin+0x50/0x90 [ 950.487479][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.492592][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.497528][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.502028][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.506708][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.512775][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.518931][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.524133][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.528989][T16463] do_SYSENTER_32+0x73/0x90 [ 950.533499][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.539810][T16463] [ 950.542128][T16463] Uninit was stored to memory at: [ 950.547155][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.552873][T16463] __msan_chain_origin+0x50/0x90 [ 950.557808][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.562916][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.567851][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.572350][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.577029][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.583094][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.589246][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.594450][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.599299][T16463] do_SYSENTER_32+0x73/0x90 [ 950.603805][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.610115][T16463] [ 950.612432][T16463] Uninit was stored to memory at: [ 950.617463][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 950.623183][T16463] __msan_chain_origin+0x50/0x90 [ 950.628122][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 950.633229][T16463] get_compat_msghdr+0x108/0x2b0 [ 950.638163][T16463] do_recvmmsg+0xdbb/0x22b0 [ 950.642661][T16463] __sys_recvmmsg+0x5dd/0x610 [ 950.647338][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.653400][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.659558][T16463] __do_fast_syscall_32+0x129/0x180 [ 950.664762][T16463] do_fast_syscall_32+0x6a/0xc0 [ 950.669631][T16463] do_SYSENTER_32+0x73/0x90 [ 950.674125][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.680426][T16463] [ 950.682736][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 950.689396][T16463] do_recvmmsg+0xbf/0x22b0 [ 950.693797][T16463] do_recvmmsg+0xbf/0x22b0 [ 951.494003][T16463] not chained 840000 origins [ 951.498641][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 951.507405][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.517457][T16463] Call Trace: [ 951.520760][T16463] dump_stack+0x21c/0x280 [ 951.525115][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 951.530844][T16463] ? kfree_sensitive+0xda/0x120 [ 951.535711][T16463] ? kmsan_get_metadata+0x116/0x180 [ 951.540917][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 951.546466][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 951.551783][T16463] ? kmsan_get_metadata+0x116/0x180 [ 951.556989][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 951.562556][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 951.568627][T16463] ? _copy_from_user+0x201/0x310 [ 951.573574][T16463] ? kmsan_get_metadata+0x116/0x180 [ 951.578777][T16463] __msan_chain_origin+0x50/0x90 [ 951.583720][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 951.588852][T16463] get_compat_msghdr+0x108/0x2b0 [ 951.593803][T16463] do_recvmmsg+0xdbb/0x22b0 [ 951.598341][T16463] ? kmsan_get_metadata+0x116/0x180 [ 951.603538][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 951.609173][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 951.614460][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 951.619226][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 951.623994][T16463] __sys_recvmmsg+0x5dd/0x610 [ 951.628683][T16463] ? kmsan_get_metadata+0x116/0x180 [ 951.633888][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.639968][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.646130][T16463] __do_fast_syscall_32+0x129/0x180 [ 951.651338][T16463] do_fast_syscall_32+0x6a/0xc0 [ 951.656197][T16463] do_SYSENTER_32+0x73/0x90 [ 951.660716][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.667047][T16463] RIP: 0023:0xf7fdc549 [ 951.671118][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 951.690718][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 951.699136][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 951.707110][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.715079][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.723050][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 951.731024][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.739001][T16463] Uninit was stored to memory at: [ 951.744041][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 951.749766][T16463] __msan_chain_origin+0x50/0x90 [ 951.754709][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 951.759830][T16463] get_compat_msghdr+0x108/0x2b0 [ 951.764769][T16463] do_recvmmsg+0xdbb/0x22b0 [ 951.769274][T16463] __sys_recvmmsg+0x5dd/0x610 [ 951.773960][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.780040][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.786200][T16463] __do_fast_syscall_32+0x129/0x180 [ 951.791401][T16463] do_fast_syscall_32+0x6a/0xc0 [ 951.796254][T16463] do_SYSENTER_32+0x73/0x90 [ 951.800766][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.807079][T16463] [ 951.809402][T16463] Uninit was stored to memory at: [ 951.814432][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 951.820159][T16463] __msan_chain_origin+0x50/0x90 [ 951.825098][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 951.830211][T16463] get_compat_msghdr+0x108/0x2b0 [ 951.835157][T16463] do_recvmmsg+0xdbb/0x22b0 [ 951.839661][T16463] __sys_recvmmsg+0x5dd/0x610 [ 951.844343][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.850416][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.856575][T16463] __do_fast_syscall_32+0x129/0x180 [ 951.861774][T16463] do_fast_syscall_32+0x6a/0xc0 [ 951.866627][T16463] do_SYSENTER_32+0x73/0x90 [ 951.871130][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.877443][T16463] [ 951.879763][T16463] Uninit was stored to memory at: [ 951.884796][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 951.890519][T16463] __msan_chain_origin+0x50/0x90 [ 951.895456][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 951.900569][T16463] get_compat_msghdr+0x108/0x2b0 [ 951.905505][T16463] do_recvmmsg+0xdbb/0x22b0 [ 951.910007][T16463] __sys_recvmmsg+0x5dd/0x610 [ 951.914688][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.920765][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.926924][T16463] __do_fast_syscall_32+0x129/0x180 [ 951.932128][T16463] do_fast_syscall_32+0x6a/0xc0 [ 951.936982][T16463] do_SYSENTER_32+0x73/0x90 [ 951.941489][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.947800][T16463] [ 951.950121][T16463] Uninit was stored to memory at: [ 951.955148][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 951.960872][T16463] __msan_chain_origin+0x50/0x90 [ 951.965816][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 951.970929][T16463] get_compat_msghdr+0x108/0x2b0 [ 951.975866][T16463] do_recvmmsg+0xdbb/0x22b0 [ 951.980369][T16463] __sys_recvmmsg+0x5dd/0x610 [ 951.985049][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.991120][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.997279][T16463] __do_fast_syscall_32+0x129/0x180 [ 952.002498][T16463] do_fast_syscall_32+0x6a/0xc0 [ 952.007355][T16463] do_SYSENTER_32+0x73/0x90 [ 952.011892][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.018205][T16463] [ 952.020536][T16463] Uninit was stored to memory at: [ 952.025565][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 952.031285][T16463] __msan_chain_origin+0x50/0x90 [ 952.036225][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 952.041337][T16463] get_compat_msghdr+0x108/0x2b0 [ 952.046274][T16463] do_recvmmsg+0xdbb/0x22b0 [ 952.050778][T16463] __sys_recvmmsg+0x5dd/0x610 [ 952.055462][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.061532][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.067691][T16463] __do_fast_syscall_32+0x129/0x180 [ 952.072896][T16463] do_fast_syscall_32+0x6a/0xc0 [ 952.077749][T16463] do_SYSENTER_32+0x73/0x90 [ 952.082254][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.088566][T16463] [ 952.090889][T16463] Uninit was stored to memory at: [ 952.095918][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 952.101641][T16463] __msan_chain_origin+0x50/0x90 [ 952.106579][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 952.111694][T16463] get_compat_msghdr+0x108/0x2b0 [ 952.116636][T16463] do_recvmmsg+0xdbb/0x22b0 [ 952.121140][T16463] __sys_recvmmsg+0x5dd/0x610 [ 952.125826][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.131899][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.138062][T16463] __do_fast_syscall_32+0x129/0x180 [ 952.143282][T16463] do_fast_syscall_32+0x6a/0xc0 [ 952.148140][T16463] do_SYSENTER_32+0x73/0x90 [ 952.152649][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.158965][T16463] [ 952.161286][T16463] Uninit was stored to memory at: [ 952.166319][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 952.172044][T16463] __msan_chain_origin+0x50/0x90 [ 952.176986][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 952.182102][T16463] get_compat_msghdr+0x108/0x2b0 [ 952.187043][T16463] do_recvmmsg+0xdbb/0x22b0 [ 952.191550][T16463] __sys_recvmmsg+0x5dd/0x610 [ 952.196230][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.202300][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.208457][T16463] __do_fast_syscall_32+0x129/0x180 [ 952.213665][T16463] do_fast_syscall_32+0x6a/0xc0 [ 952.218521][T16463] do_SYSENTER_32+0x73/0x90 [ 952.223030][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.229346][T16463] [ 952.231669][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 952.238343][T16463] do_recvmmsg+0xbf/0x22b0 [ 952.242759][T16463] do_recvmmsg+0xbf/0x22b0 [ 953.337885][T16463] not chained 850000 origins [ 953.342538][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 953.351204][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.361253][T16463] Call Trace: [ 953.364550][T16463] dump_stack+0x21c/0x280 [ 953.368893][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 953.374624][T16463] ? kfree_sensitive+0xda/0x120 [ 953.379476][T16463] ? kmsan_get_metadata+0x116/0x180 [ 953.384674][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 953.390223][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 953.395516][T16463] ? kmsan_get_metadata+0x116/0x180 [ 953.400715][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 953.406263][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 953.412333][T16463] ? _copy_from_user+0x201/0x310 [ 953.417278][T16463] ? kmsan_get_metadata+0x116/0x180 [ 953.422477][T16463] __msan_chain_origin+0x50/0x90 [ 953.427425][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.432553][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.437493][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.442011][T16463] ? kmsan_get_metadata+0x116/0x180 [ 953.447199][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 953.452822][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 953.458096][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 953.462845][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 953.467606][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.472280][T16463] ? kmsan_get_metadata+0x116/0x180 [ 953.477475][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.483550][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.489699][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.494890][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.499735][T16463] do_SYSENTER_32+0x73/0x90 [ 953.504232][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.510544][T16463] RIP: 0023:0xf7fdc549 [ 953.514605][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 953.534202][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 953.542607][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 953.550566][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.558547][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 953.566510][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 953.574474][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 953.582458][T16463] Uninit was stored to memory at: [ 953.587480][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.593188][T16463] __msan_chain_origin+0x50/0x90 [ 953.598116][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.603217][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.608153][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.612642][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.617311][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.623369][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.629630][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.634818][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.639663][T16463] do_SYSENTER_32+0x73/0x90 [ 953.644156][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.650474][T16463] [ 953.652786][T16463] Uninit was stored to memory at: [ 953.657803][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.663517][T16463] __msan_chain_origin+0x50/0x90 [ 953.668447][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.673549][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.678474][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.682980][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.687645][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.693715][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.699941][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.705133][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.709976][T16463] do_SYSENTER_32+0x73/0x90 [ 953.714570][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.720871][T16463] [ 953.723184][T16463] Uninit was stored to memory at: [ 953.728212][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.733924][T16463] __msan_chain_origin+0x50/0x90 [ 953.738854][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.743956][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.748886][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.753380][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.758049][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.764108][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.770265][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.775455][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.780296][T16463] do_SYSENTER_32+0x73/0x90 [ 953.784790][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.791092][T16463] [ 953.793403][T16463] Uninit was stored to memory at: [ 953.798417][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.804125][T16463] __msan_chain_origin+0x50/0x90 [ 953.809224][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.814322][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.819246][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.823736][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.828403][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.834459][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.840604][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.845791][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.850631][T16463] do_SYSENTER_32+0x73/0x90 [ 953.855130][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.861454][T16463] [ 953.863766][T16463] Uninit was stored to memory at: [ 953.868781][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.874487][T16463] __msan_chain_origin+0x50/0x90 [ 953.879414][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.884512][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.889432][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.893922][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.898586][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.904640][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.910791][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.915978][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.920816][T16463] do_SYSENTER_32+0x73/0x90 [ 953.925309][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.931611][T16463] [ 953.933919][T16463] Uninit was stored to memory at: [ 953.938931][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 953.944649][T16463] __msan_chain_origin+0x50/0x90 [ 953.949574][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 953.954688][T16463] get_compat_msghdr+0x108/0x2b0 [ 953.959614][T16463] do_recvmmsg+0xdbb/0x22b0 [ 953.964115][T16463] __sys_recvmmsg+0x5dd/0x610 [ 953.968781][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.974836][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.980982][T16463] __do_fast_syscall_32+0x129/0x180 [ 953.986169][T16463] do_fast_syscall_32+0x6a/0xc0 [ 953.991007][T16463] do_SYSENTER_32+0x73/0x90 [ 953.995499][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.001802][T16463] [ 954.004113][T16463] Uninit was stored to memory at: [ 954.009125][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 954.014832][T16463] __msan_chain_origin+0x50/0x90 [ 954.019760][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 954.024874][T16463] get_compat_msghdr+0x108/0x2b0 [ 954.029804][T16463] do_recvmmsg+0xdbb/0x22b0 [ 954.034291][T16463] __sys_recvmmsg+0x5dd/0x610 [ 954.038954][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.045019][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.051161][T16463] __do_fast_syscall_32+0x129/0x180 [ 954.056356][T16463] do_fast_syscall_32+0x6a/0xc0 [ 954.061196][T16463] do_SYSENTER_32+0x73/0x90 [ 954.065688][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.071993][T16463] [ 954.074304][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 954.080975][T16463] do_recvmmsg+0xbf/0x22b0 [ 954.085379][T16463] do_recvmmsg+0xbf/0x22b0 [ 955.239728][T16456] not chained 860000 origins [ 955.244359][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 955.253028][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.263079][T16456] Call Trace: [ 955.266379][T16456] dump_stack+0x21c/0x280 [ 955.270728][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 955.276462][T16456] ? kfree_sensitive+0xda/0x120 [ 955.281318][T16456] ? kmsan_get_metadata+0x116/0x180 [ 955.286527][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 955.292087][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 955.297381][T16456] ? kmsan_get_metadata+0x116/0x180 [ 955.302585][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 955.308138][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 955.314210][T16456] ? _copy_from_user+0x201/0x310 [ 955.319157][T16456] ? kmsan_get_metadata+0x116/0x180 [ 955.324364][T16456] __msan_chain_origin+0x50/0x90 [ 955.329497][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.334629][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.339576][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.344086][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 955.349909][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 955.355205][T16456] ? kmsan_get_metadata+0x116/0x180 [ 955.360423][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 955.366063][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 955.371350][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 955.376114][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 955.380883][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.385569][T16456] ? kmsan_get_metadata+0x116/0x180 [ 955.390783][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.396864][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.403024][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.408239][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.413098][T16456] do_SYSENTER_32+0x73/0x90 [ 955.417612][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.423933][T16456] RIP: 0023:0xf7fdc549 [ 955.428000][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 955.447601][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 955.456015][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 955.463995][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.471967][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.479939][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 955.487906][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.495883][T16456] Uninit was stored to memory at: [ 955.500914][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.506639][T16456] __msan_chain_origin+0x50/0x90 [ 955.511583][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.516698][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.521636][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.526267][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.530952][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.537021][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.543177][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.548379][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.553235][T16456] do_SYSENTER_32+0x73/0x90 [ 955.557747][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.564070][T16456] [ 955.566390][T16456] Uninit was stored to memory at: [ 955.571420][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.577139][T16456] __msan_chain_origin+0x50/0x90 [ 955.582078][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.587190][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.592126][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.596631][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.601338][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.607409][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.613563][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.618765][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.623618][T16456] do_SYSENTER_32+0x73/0x90 [ 955.628124][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.634436][T16456] [ 955.636761][T16456] Uninit was stored to memory at: [ 955.641800][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.647525][T16456] __msan_chain_origin+0x50/0x90 [ 955.652463][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.657690][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.662628][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.667128][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.671806][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.677874][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.684029][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.689231][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.694182][T16456] do_SYSENTER_32+0x73/0x90 [ 955.698700][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.705100][T16456] [ 955.707420][T16456] Uninit was stored to memory at: [ 955.712448][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.718169][T16456] __msan_chain_origin+0x50/0x90 [ 955.723107][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.728219][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.733159][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.737657][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.742336][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.748403][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.754554][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.759782][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.764737][T16456] do_SYSENTER_32+0x73/0x90 [ 955.769271][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.775584][T16456] [ 955.777905][T16456] Uninit was stored to memory at: [ 955.782931][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.788647][T16456] __msan_chain_origin+0x50/0x90 [ 955.793587][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.798697][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.803631][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.808134][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.812813][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.818979][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.825135][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.830349][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.835200][T16456] do_SYSENTER_32+0x73/0x90 [ 955.839709][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.846018][T16456] [ 955.848341][T16456] Uninit was stored to memory at: [ 955.853458][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.859175][T16456] __msan_chain_origin+0x50/0x90 [ 955.864114][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.869223][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.874158][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.878660][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.883340][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.889496][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.895659][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.900858][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.905707][T16456] do_SYSENTER_32+0x73/0x90 [ 955.910215][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.916526][T16456] [ 955.918848][T16456] Uninit was stored to memory at: [ 955.923877][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 955.929597][T16456] __msan_chain_origin+0x50/0x90 [ 955.934537][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 955.939650][T16456] get_compat_msghdr+0x108/0x2b0 [ 955.944582][T16456] do_recvmmsg+0xdbb/0x22b0 [ 955.949100][T16456] __sys_recvmmsg+0x5dd/0x610 [ 955.953775][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.959842][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.965999][T16456] __do_fast_syscall_32+0x129/0x180 [ 955.971197][T16456] do_fast_syscall_32+0x6a/0xc0 [ 955.976047][T16456] do_SYSENTER_32+0x73/0x90 [ 955.980555][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.986889][T16456] [ 955.989210][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 955.995882][T16456] do_recvmmsg+0xbf/0x22b0 [ 956.000298][T16456] do_recvmmsg+0xbf/0x22b0 [ 957.133662][T16463] not chained 870000 origins [ 957.138299][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 957.146967][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.157011][T16463] Call Trace: [ 957.160314][T16463] dump_stack+0x21c/0x280 [ 957.164640][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 957.170356][T16463] ? kfree_sensitive+0xda/0x120 [ 957.175196][T16463] ? kmsan_get_metadata+0x116/0x180 [ 957.180385][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 957.185936][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 957.191221][T16463] ? kmsan_get_metadata+0x116/0x180 [ 957.196415][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 957.201959][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 957.208030][T16463] ? _copy_from_user+0x201/0x310 [ 957.212971][T16463] ? kmsan_get_metadata+0x116/0x180 [ 957.218165][T16463] __msan_chain_origin+0x50/0x90 [ 957.223098][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.228215][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.233157][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.237698][T16463] ? kmsan_get_metadata+0x116/0x180 [ 957.242889][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 957.248515][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 957.253789][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 957.258629][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 957.263404][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.268084][T16463] ? kmsan_get_metadata+0x116/0x180 [ 957.273300][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.279365][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.285516][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.290707][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.295551][T16463] do_SYSENTER_32+0x73/0x90 [ 957.300146][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.306459][T16463] RIP: 0023:0xf7fdc549 [ 957.310517][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 957.330108][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 957.338505][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 957.346464][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.354420][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.362376][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 957.370334][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.378298][T16463] Uninit was stored to memory at: [ 957.383315][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.389025][T16463] __msan_chain_origin+0x50/0x90 [ 957.393949][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.399052][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.403976][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.408465][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.413129][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.419181][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.425338][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.430524][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.435360][T16463] do_SYSENTER_32+0x73/0x90 [ 957.439850][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.446152][T16463] [ 957.448461][T16463] Uninit was stored to memory at: [ 957.453496][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.459202][T16463] __msan_chain_origin+0x50/0x90 [ 957.464138][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.469233][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.474156][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.478645][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.483311][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.489365][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.495507][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.500690][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.505544][T16463] do_SYSENTER_32+0x73/0x90 [ 957.510059][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.516361][T16463] [ 957.518670][T16463] Uninit was stored to memory at: [ 957.523681][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.529397][T16463] __msan_chain_origin+0x50/0x90 [ 957.534335][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.539435][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.544358][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.548854][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.553534][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.559591][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.565736][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.570924][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.575768][T16463] do_SYSENTER_32+0x73/0x90 [ 957.580265][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.586569][T16463] [ 957.588880][T16463] Uninit was stored to memory at: [ 957.593897][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.599621][T16463] __msan_chain_origin+0x50/0x90 [ 957.604547][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.609648][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.614569][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.619059][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.623726][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.629784][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.635929][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.641123][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.645961][T16463] do_SYSENTER_32+0x73/0x90 [ 957.650479][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.656785][T16463] [ 957.659095][T16463] Uninit was stored to memory at: [ 957.664110][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.669816][T16463] __msan_chain_origin+0x50/0x90 [ 957.674743][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.679844][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.684769][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.689257][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.693921][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.699991][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.706141][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.711328][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.716168][T16463] do_SYSENTER_32+0x73/0x90 [ 957.720663][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.726965][T16463] [ 957.729277][T16463] Uninit was stored to memory at: [ 957.734290][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.739999][T16463] __msan_chain_origin+0x50/0x90 [ 957.744939][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.750045][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.754974][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.759467][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.764135][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.770193][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.776338][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.781528][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.786368][T16463] do_SYSENTER_32+0x73/0x90 [ 957.790862][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.797175][T16463] [ 957.799484][T16463] Uninit was stored to memory at: [ 957.804497][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 957.810204][T16463] __msan_chain_origin+0x50/0x90 [ 957.815129][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 957.820226][T16463] get_compat_msghdr+0x108/0x2b0 [ 957.825149][T16463] do_recvmmsg+0xdbb/0x22b0 [ 957.829640][T16463] __sys_recvmmsg+0x5dd/0x610 [ 957.834304][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.840359][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.846501][T16463] __do_fast_syscall_32+0x129/0x180 [ 957.851708][T16463] do_fast_syscall_32+0x6a/0xc0 [ 957.856546][T16463] do_SYSENTER_32+0x73/0x90 [ 957.861061][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.867363][T16463] [ 957.869676][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 957.876420][T16463] do_recvmmsg+0xbf/0x22b0 [ 957.880819][T16463] do_recvmmsg+0xbf/0x22b0 [ 959.354965][T16463] not chained 880000 origins [ 959.359587][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 959.368252][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.378301][T16463] Call Trace: [ 959.381583][T16463] dump_stack+0x21c/0x280 [ 959.385911][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 959.391620][T16463] ? kfree_sensitive+0xda/0x120 [ 959.396464][T16463] ? kmsan_get_metadata+0x116/0x180 [ 959.401655][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 959.407201][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 959.412486][T16463] ? kmsan_get_metadata+0x116/0x180 [ 959.417680][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 959.423218][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 959.429276][T16463] ? _copy_from_user+0x201/0x310 [ 959.434203][T16463] ? kmsan_get_metadata+0x116/0x180 [ 959.439389][T16463] __msan_chain_origin+0x50/0x90 [ 959.444319][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.449431][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.454363][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.458881][T16463] ? kmsan_get_metadata+0x116/0x180 [ 959.464082][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 959.469707][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 959.474986][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 959.479754][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 959.484517][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.489197][T16463] ? kmsan_get_metadata+0x116/0x180 [ 959.494407][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.500482][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.506636][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.511837][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.516682][T16463] do_SYSENTER_32+0x73/0x90 [ 959.521180][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.527492][T16463] RIP: 0023:0xf7fdc549 [ 959.531563][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 959.551159][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 959.559561][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 959.567523][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.575492][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.583457][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 959.591417][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.599386][T16463] Uninit was stored to memory at: [ 959.604411][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.610120][T16463] __msan_chain_origin+0x50/0x90 [ 959.615048][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.620160][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.625091][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.629584][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.634251][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.640310][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.646475][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.651666][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.656505][T16463] do_SYSENTER_32+0x73/0x90 [ 959.661003][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.667309][T16463] [ 959.669625][T16463] Uninit was stored to memory at: [ 959.674653][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.680365][T16463] __msan_chain_origin+0x50/0x90 [ 959.685293][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.690399][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.695331][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.699940][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.704613][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.710673][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.716824][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.722025][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.726864][T16463] do_SYSENTER_32+0x73/0x90 [ 959.731357][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.737659][T16463] [ 959.739973][T16463] Uninit was stored to memory at: [ 959.744994][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.750711][T16463] __msan_chain_origin+0x50/0x90 [ 959.755642][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.760742][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.765671][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.770193][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.774961][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.781022][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.787165][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.792364][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.797216][T16463] do_SYSENTER_32+0x73/0x90 [ 959.801710][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.808012][T16463] [ 959.810322][T16463] Uninit was stored to memory at: [ 959.815343][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.821050][T16463] __msan_chain_origin+0x50/0x90 [ 959.825976][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.831075][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.836001][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.840502][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.845180][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.851233][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.857375][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.862561][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.867399][T16463] do_SYSENTER_32+0x73/0x90 [ 959.871897][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.878202][T16463] [ 959.880517][T16463] Uninit was stored to memory at: [ 959.885532][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.891240][T16463] __msan_chain_origin+0x50/0x90 [ 959.896165][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.901261][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.906185][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.910672][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.915337][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.921389][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.927539][T16463] __do_fast_syscall_32+0x129/0x180 [ 959.932724][T16463] do_fast_syscall_32+0x6a/0xc0 [ 959.937564][T16463] do_SYSENTER_32+0x73/0x90 [ 959.942057][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.948361][T16463] [ 959.950674][T16463] Uninit was stored to memory at: [ 959.955686][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 959.961505][T16463] __msan_chain_origin+0x50/0x90 [ 959.966432][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 959.971531][T16463] get_compat_msghdr+0x108/0x2b0 [ 959.976617][T16463] do_recvmmsg+0xdbb/0x22b0 [ 959.981104][T16463] __sys_recvmmsg+0x5dd/0x610 [ 959.985771][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.991826][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.997966][T16463] __do_fast_syscall_32+0x129/0x180 [ 960.003151][T16463] do_fast_syscall_32+0x6a/0xc0 [ 960.007992][T16463] do_SYSENTER_32+0x73/0x90 [ 960.012483][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.018784][T16463] [ 960.021096][T16463] Uninit was stored to memory at: [ 960.026109][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 960.031815][T16463] __msan_chain_origin+0x50/0x90 [ 960.036742][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 960.041842][T16463] get_compat_msghdr+0x108/0x2b0 [ 960.046763][T16463] do_recvmmsg+0xdbb/0x22b0 [ 960.051251][T16463] __sys_recvmmsg+0x5dd/0x610 [ 960.055915][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.061971][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.068114][T16463] __do_fast_syscall_32+0x129/0x180 [ 960.073312][T16463] do_fast_syscall_32+0x6a/0xc0 [ 960.078149][T16463] do_SYSENTER_32+0x73/0x90 [ 960.082643][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.088947][T16463] [ 960.091259][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 960.097915][T16463] do_recvmmsg+0xbf/0x22b0 [ 960.102315][T16463] do_recvmmsg+0xbf/0x22b0 [ 961.321233][T16463] not chained 890000 origins [ 961.325864][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 961.334526][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.344576][T16463] Call Trace: [ 961.347872][T16463] dump_stack+0x21c/0x280 [ 961.352215][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 961.357950][T16463] ? kfree_sensitive+0xda/0x120 [ 961.362804][T16463] ? kmsan_get_metadata+0x116/0x180 [ 961.368003][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 961.373555][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 961.378847][T16463] ? kmsan_get_metadata+0x116/0x180 [ 961.384049][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 961.389604][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 961.395672][T16463] ? _copy_from_user+0x201/0x310 [ 961.400614][T16463] ? kmsan_get_metadata+0x116/0x180 [ 961.405814][T16463] __msan_chain_origin+0x50/0x90 [ 961.410759][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.415893][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.420839][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.425369][T16463] ? kmsan_get_metadata+0x116/0x180 [ 961.430575][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 961.436213][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 961.441528][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 961.446290][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 961.451057][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.455743][T16463] ? kmsan_get_metadata+0x116/0x180 [ 961.460953][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.467034][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.473197][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.478407][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.483271][T16463] do_SYSENTER_32+0x73/0x90 [ 961.487790][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.494118][T16463] RIP: 0023:0xf7fdc549 [ 961.498188][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 961.517793][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 961.526211][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 961.534183][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.542156][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.550124][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 961.558094][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.566071][T16463] Uninit was stored to memory at: [ 961.571101][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.576822][T16463] __msan_chain_origin+0x50/0x90 [ 961.581756][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.586866][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.591801][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.596304][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.600979][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.607046][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.613202][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.618408][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.623325][T16463] do_SYSENTER_32+0x73/0x90 [ 961.627833][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.634149][T16463] [ 961.636474][T16463] Uninit was stored to memory at: [ 961.641504][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.647223][T16463] __msan_chain_origin+0x50/0x90 [ 961.652166][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.657275][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.662210][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.666711][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.671395][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.677463][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.683616][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.688817][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.693666][T16463] do_SYSENTER_32+0x73/0x90 [ 961.698175][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.704485][T16463] [ 961.706804][T16463] Uninit was stored to memory at: [ 961.711833][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.717550][T16463] __msan_chain_origin+0x50/0x90 [ 961.722484][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.727599][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.732530][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.737034][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.741710][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.747788][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.753943][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.759140][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.763991][T16463] do_SYSENTER_32+0x73/0x90 [ 961.768501][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.774809][T16463] [ 961.777126][T16463] Uninit was stored to memory at: [ 961.782152][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.787871][T16463] __msan_chain_origin+0x50/0x90 [ 961.792808][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.797918][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.802853][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.807355][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.812036][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.818104][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.824259][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.829585][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.834439][T16463] do_SYSENTER_32+0x73/0x90 [ 961.838943][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.845256][T16463] [ 961.847572][T16463] Uninit was stored to memory at: [ 961.852599][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.858324][T16463] __msan_chain_origin+0x50/0x90 [ 961.863322][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.868872][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.873807][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.878310][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.882990][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.889056][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.895212][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.900412][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.905267][T16463] do_SYSENTER_32+0x73/0x90 [ 961.909778][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.916093][T16463] [ 961.918413][T16463] Uninit was stored to memory at: [ 961.923437][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.929156][T16463] __msan_chain_origin+0x50/0x90 [ 961.934095][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 961.939204][T16463] get_compat_msghdr+0x108/0x2b0 [ 961.944139][T16463] do_recvmmsg+0xdbb/0x22b0 [ 961.948636][T16463] __sys_recvmmsg+0x5dd/0x610 [ 961.953393][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.959459][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.965615][T16463] __do_fast_syscall_32+0x129/0x180 [ 961.970813][T16463] do_fast_syscall_32+0x6a/0xc0 [ 961.975661][T16463] do_SYSENTER_32+0x73/0x90 [ 961.980164][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.986474][T16463] [ 961.988793][T16463] Uninit was stored to memory at: [ 961.993820][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 961.999536][T16463] __msan_chain_origin+0x50/0x90 [ 962.004474][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 962.009582][T16463] get_compat_msghdr+0x108/0x2b0 [ 962.014518][T16463] do_recvmmsg+0xdbb/0x22b0 [ 962.019016][T16463] __sys_recvmmsg+0x5dd/0x610 [ 962.023693][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.029763][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.035918][T16463] __do_fast_syscall_32+0x129/0x180 [ 962.041115][T16463] do_fast_syscall_32+0x6a/0xc0 [ 962.045965][T16463] do_SYSENTER_32+0x73/0x90 [ 962.050469][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.056789][T16463] [ 962.059111][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 962.065787][T16463] do_recvmmsg+0xbf/0x22b0 [ 962.070206][T16463] do_recvmmsg+0xbf/0x22b0 [ 962.608387][T16456] not chained 900000 origins [ 962.613013][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 962.621666][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.631711][T16456] Call Trace: [ 962.635004][T16456] dump_stack+0x21c/0x280 [ 962.639332][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 962.645045][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.650238][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 962.656036][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.661229][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 962.667030][T16456] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 962.673148][T16456] ? sched_clock_cpu+0x65/0x8e0 [ 962.678007][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.683207][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.688419][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 962.693967][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 962.700035][T16456] ? _copy_from_user+0x201/0x310 [ 962.704968][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.710159][T16456] __msan_chain_origin+0x50/0x90 [ 962.715090][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 962.720207][T16456] get_compat_msghdr+0x108/0x2b0 [ 962.725154][T16456] do_recvmmsg+0xdbb/0x22b0 [ 962.729652][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 962.735462][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 962.740744][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.745936][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 962.751561][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 962.756836][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 962.761588][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 962.766348][T16456] __sys_recvmmsg+0x5dd/0x610 [ 962.771022][T16456] ? kmsan_get_metadata+0x116/0x180 [ 962.776219][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.782288][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.788438][T16456] __do_fast_syscall_32+0x129/0x180 [ 962.793664][T16456] do_fast_syscall_32+0x6a/0xc0 [ 962.798508][T16456] do_SYSENTER_32+0x73/0x90 [ 962.803004][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.809315][T16456] RIP: 0023:0xf7fdc549 [ 962.813372][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 962.832971][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 962.841370][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 962.849329][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 962.857286][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.865245][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 962.873203][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.881179][T16456] Uninit was stored to memory at: [ 962.886195][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 962.891903][T16456] __msan_chain_origin+0x50/0x90 [ 962.896829][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 962.901925][T16456] get_compat_msghdr+0x108/0x2b0 [ 962.906849][T16456] do_recvmmsg+0xdbb/0x22b0 [ 962.911337][T16456] __sys_recvmmsg+0x5dd/0x610 [ 962.916004][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.922057][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.928200][T16456] __do_fast_syscall_32+0x129/0x180 [ 962.933394][T16456] do_fast_syscall_32+0x6a/0xc0 [ 962.938242][T16456] do_SYSENTER_32+0x73/0x90 [ 962.942735][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.949039][T16456] [ 962.951350][T16456] Uninit was stored to memory at: [ 962.956362][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 962.962066][T16456] __msan_chain_origin+0x50/0x90 [ 962.966990][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 962.972087][T16456] get_compat_msghdr+0x108/0x2b0 [ 962.977010][T16456] do_recvmmsg+0xdbb/0x22b0 [ 962.981496][T16456] __sys_recvmmsg+0x5dd/0x610 [ 962.986163][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.992310][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.998452][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.003639][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.008479][T16456] do_SYSENTER_32+0x73/0x90 [ 963.012972][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.019287][T16456] [ 963.021599][T16456] Uninit was stored to memory at: [ 963.026612][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 963.032320][T16456] __msan_chain_origin+0x50/0x90 [ 963.037245][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 963.042344][T16456] get_compat_msghdr+0x108/0x2b0 [ 963.047281][T16456] do_recvmmsg+0xdbb/0x22b0 [ 963.051779][T16456] __sys_recvmmsg+0x5dd/0x610 [ 963.056443][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.062514][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.068667][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.073855][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.078695][T16456] do_SYSENTER_32+0x73/0x90 [ 963.083187][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.089493][T16456] [ 963.091818][T16456] Uninit was stored to memory at: [ 963.096844][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 963.102565][T16456] __msan_chain_origin+0x50/0x90 [ 963.107492][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 963.112589][T16456] get_compat_msghdr+0x108/0x2b0 [ 963.117511][T16456] do_recvmmsg+0xdbb/0x22b0 [ 963.122009][T16456] __sys_recvmmsg+0x5dd/0x610 [ 963.126675][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.132729][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.138871][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.144057][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.148894][T16456] do_SYSENTER_32+0x73/0x90 [ 963.153388][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.159689][T16456] [ 963.161999][T16456] Uninit was stored to memory at: [ 963.167013][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 963.172721][T16456] __msan_chain_origin+0x50/0x90 [ 963.177646][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 963.182745][T16456] get_compat_msghdr+0x108/0x2b0 [ 963.187671][T16456] do_recvmmsg+0xdbb/0x22b0 [ 963.192161][T16456] __sys_recvmmsg+0x5dd/0x610 [ 963.196828][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.202883][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.209028][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.214213][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.219053][T16456] do_SYSENTER_32+0x73/0x90 [ 963.223557][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.229861][T16456] [ 963.232170][T16456] Uninit was stored to memory at: [ 963.237187][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 963.242895][T16456] __msan_chain_origin+0x50/0x90 [ 963.247819][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 963.252917][T16456] get_compat_msghdr+0x108/0x2b0 [ 963.257841][T16456] do_recvmmsg+0xdbb/0x22b0 [ 963.262328][T16456] __sys_recvmmsg+0x5dd/0x610 [ 963.266994][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.273049][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.279193][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.284392][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.289232][T16456] do_SYSENTER_32+0x73/0x90 [ 963.293726][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.300027][T16456] [ 963.302338][T16456] Uninit was stored to memory at: [ 963.307360][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 963.313065][T16456] __msan_chain_origin+0x50/0x90 [ 963.317991][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 963.323088][T16456] get_compat_msghdr+0x108/0x2b0 [ 963.328010][T16456] do_recvmmsg+0xdbb/0x22b0 [ 963.332511][T16456] __sys_recvmmsg+0x5dd/0x610 [ 963.337180][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.343232][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.349386][T16456] __do_fast_syscall_32+0x129/0x180 [ 963.354572][T16456] do_fast_syscall_32+0x6a/0xc0 [ 963.359412][T16456] do_SYSENTER_32+0x73/0x90 [ 963.363904][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.370205][T16456] [ 963.372518][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 963.379180][T16456] do_recvmmsg+0xbf/0x22b0 [ 963.383580][T16456] do_recvmmsg+0xbf/0x22b0 [ 965.022613][T16463] not chained 910000 origins [ 965.027244][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 965.035909][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.045961][T16463] Call Trace: [ 965.049259][T16463] dump_stack+0x21c/0x280 [ 965.053600][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 965.059325][T16463] ? kfree_sensitive+0xda/0x120 [ 965.064177][T16463] ? kmsan_get_metadata+0x116/0x180 [ 965.069385][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 965.074970][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 965.080272][T16463] ? kmsan_get_metadata+0x116/0x180 [ 965.085471][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 965.091019][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 965.097092][T16463] ? _copy_from_user+0x201/0x310 [ 965.102032][T16463] ? kmsan_get_metadata+0x116/0x180 [ 965.107232][T16463] __msan_chain_origin+0x50/0x90 [ 965.112176][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.117301][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.122246][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.126781][T16463] ? kmsan_get_metadata+0x116/0x180 [ 965.132074][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 965.137709][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 965.142995][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 965.147757][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 965.152523][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.157210][T16463] ? kmsan_get_metadata+0x116/0x180 [ 965.162413][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.168492][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.174650][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.179855][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.184708][T16463] do_SYSENTER_32+0x73/0x90 [ 965.189221][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.195545][T16463] RIP: 0023:0xf7fdc549 [ 965.199618][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 965.219221][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 965.227633][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 965.235608][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.243576][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.251544][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 965.259511][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.267487][T16463] Uninit was stored to memory at: [ 965.272520][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.278247][T16463] __msan_chain_origin+0x50/0x90 [ 965.283189][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.288303][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.293238][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.297737][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.302415][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.308480][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.314632][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.319828][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.324679][T16463] do_SYSENTER_32+0x73/0x90 [ 965.329183][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.335497][T16463] [ 965.337815][T16463] Uninit was stored to memory at: [ 965.342840][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.348558][T16463] __msan_chain_origin+0x50/0x90 [ 965.353492][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.358600][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.363533][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.368032][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.372722][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.378787][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.384940][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.390139][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.394989][T16463] do_SYSENTER_32+0x73/0x90 [ 965.399500][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.405814][T16463] [ 965.408136][T16463] Uninit was stored to memory at: [ 965.413161][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.418881][T16463] __msan_chain_origin+0x50/0x90 [ 965.423817][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.429012][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.433944][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.438442][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.443120][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.449191][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.455351][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.460553][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.465402][T16463] do_SYSENTER_32+0x73/0x90 [ 965.469908][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.476221][T16463] [ 965.478541][T16463] Uninit was stored to memory at: [ 965.483563][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.489288][T16463] __msan_chain_origin+0x50/0x90 [ 965.494228][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.499347][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.504287][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.508817][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.513494][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.519562][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.525842][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.531044][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.535898][T16463] do_SYSENTER_32+0x73/0x90 [ 965.540405][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.546715][T16463] [ 965.549038][T16463] Uninit was stored to memory at: [ 965.554064][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.559783][T16463] __msan_chain_origin+0x50/0x90 [ 965.564720][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.569831][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.574770][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.579268][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.583949][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.590018][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.596174][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.601370][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.606221][T16463] do_SYSENTER_32+0x73/0x90 [ 965.610728][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.617040][T16463] [ 965.619361][T16463] Uninit was stored to memory at: [ 965.624507][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.630227][T16463] __msan_chain_origin+0x50/0x90 [ 965.635167][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.640301][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.645233][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.649733][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.654416][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.660486][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.666645][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.671852][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.676706][T16463] do_SYSENTER_32+0x73/0x90 [ 965.681221][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.687532][T16463] [ 965.689852][T16463] Uninit was stored to memory at: [ 965.694878][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 965.700805][T16463] __msan_chain_origin+0x50/0x90 [ 965.705746][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 965.710970][T16463] get_compat_msghdr+0x108/0x2b0 [ 965.715909][T16463] do_recvmmsg+0xdbb/0x22b0 [ 965.720415][T16463] __sys_recvmmsg+0x5dd/0x610 [ 965.725097][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.731162][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.737315][T16463] __do_fast_syscall_32+0x129/0x180 [ 965.742514][T16463] do_fast_syscall_32+0x6a/0xc0 [ 965.747366][T16463] do_SYSENTER_32+0x73/0x90 [ 965.751869][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.758181][T16463] [ 965.760511][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 965.767186][T16463] do_recvmmsg+0xbf/0x22b0 [ 965.771603][T16463] do_recvmmsg+0xbf/0x22b0 [ 966.467045][T16463] not chained 920000 origins [ 966.471665][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 966.480322][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.490371][T16463] Call Trace: [ 966.493657][T16463] dump_stack+0x21c/0x280 [ 966.498072][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 966.503784][T16463] ? kfree_sensitive+0xda/0x120 [ 966.508629][T16463] ? kmsan_get_metadata+0x116/0x180 [ 966.513823][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 966.519367][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 966.524661][T16463] ? kmsan_get_metadata+0x116/0x180 [ 966.529858][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 966.535408][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 966.541486][T16463] ? _copy_from_user+0x201/0x310 [ 966.546421][T16463] ? kmsan_get_metadata+0x116/0x180 [ 966.551612][T16463] __msan_chain_origin+0x50/0x90 [ 966.556545][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 966.561658][T16463] get_compat_msghdr+0x108/0x2b0 [ 966.566591][T16463] do_recvmmsg+0xdbb/0x22b0 [ 966.571109][T16463] ? kmsan_get_metadata+0x116/0x180 [ 966.576303][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 966.581928][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 966.587210][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 966.591963][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 966.596717][T16463] __sys_recvmmsg+0x5dd/0x610 [ 966.601396][T16463] ? kmsan_get_metadata+0x116/0x180 [ 966.606589][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.612655][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.618803][T16463] __do_fast_syscall_32+0x129/0x180 [ 966.623996][T16463] do_fast_syscall_32+0x6a/0xc0 [ 966.628839][T16463] do_SYSENTER_32+0x73/0x90 [ 966.633337][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.639654][T16463] RIP: 0023:0xf7fdc549 [ 966.643728][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 966.663328][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 966.671736][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 966.679702][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.687678][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.695647][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 966.703613][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.711583][T16463] Uninit was stored to memory at: [ 966.716606][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 966.722330][T16463] __msan_chain_origin+0x50/0x90 [ 966.727269][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 966.732367][T16463] get_compat_msghdr+0x108/0x2b0 [ 966.737292][T16463] do_recvmmsg+0xdbb/0x22b0 [ 966.741781][T16463] __sys_recvmmsg+0x5dd/0x610 [ 966.746449][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.752503][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.758647][T16463] __do_fast_syscall_32+0x129/0x180 [ 966.763836][T16463] do_fast_syscall_32+0x6a/0xc0 [ 966.768676][T16463] do_SYSENTER_32+0x73/0x90 [ 966.773170][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.779474][T16463] [ 966.781784][T16463] Uninit was stored to memory at: [ 966.786797][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 966.792505][T16463] __msan_chain_origin+0x50/0x90 [ 966.797432][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 966.802533][T16463] get_compat_msghdr+0x108/0x2b0 [ 966.807457][T16463] do_recvmmsg+0xdbb/0x22b0 [ 966.811945][T16463] __sys_recvmmsg+0x5dd/0x610 [ 966.816610][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.822665][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.828809][T16463] __do_fast_syscall_32+0x129/0x180 [ 966.833995][T16463] do_fast_syscall_32+0x6a/0xc0 [ 966.838833][T16463] do_SYSENTER_32+0x73/0x90 [ 966.843326][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.849629][T16463] [ 966.851941][T16463] Uninit was stored to memory at: [ 966.856953][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 966.862659][T16463] __msan_chain_origin+0x50/0x90 [ 966.867584][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 966.872682][T16463] get_compat_msghdr+0x108/0x2b0 [ 966.877603][T16463] do_recvmmsg+0xdbb/0x22b0 [ 966.882092][T16463] __sys_recvmmsg+0x5dd/0x610 [ 966.886757][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.892811][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.898953][T16463] __do_fast_syscall_32+0x129/0x180 [ 966.904139][T16463] do_fast_syscall_32+0x6a/0xc0 [ 966.908979][T16463] do_SYSENTER_32+0x73/0x90 [ 966.913471][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.919771][T16463] [ 966.922080][T16463] Uninit was stored to memory at: [ 966.927093][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 966.932798][T16463] __msan_chain_origin+0x50/0x90 [ 966.937723][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 966.942822][T16463] get_compat_msghdr+0x108/0x2b0 [ 966.947743][T16463] do_recvmmsg+0xdbb/0x22b0 [ 966.952231][T16463] __sys_recvmmsg+0x5dd/0x610 [ 966.956900][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.962967][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.969111][T16463] __do_fast_syscall_32+0x129/0x180 [ 966.974314][T16463] do_fast_syscall_32+0x6a/0xc0 [ 966.979158][T16463] do_SYSENTER_32+0x73/0x90 [ 966.983655][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.989964][T16463] [ 966.992277][T16463] Uninit was stored to memory at: [ 966.997303][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 967.003014][T16463] __msan_chain_origin+0x50/0x90 [ 967.007943][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 967.013040][T16463] get_compat_msghdr+0x108/0x2b0 [ 967.017963][T16463] do_recvmmsg+0xdbb/0x22b0 [ 967.022470][T16463] __sys_recvmmsg+0x5dd/0x610 [ 967.027138][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.033195][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.039346][T16463] __do_fast_syscall_32+0x129/0x180 [ 967.044533][T16463] do_fast_syscall_32+0x6a/0xc0 [ 967.049388][T16463] do_SYSENTER_32+0x73/0x90 [ 967.053896][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.060207][T16463] [ 967.062522][T16463] Uninit was stored to memory at: [ 967.067538][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 967.073247][T16463] __msan_chain_origin+0x50/0x90 [ 967.078175][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 967.083274][T16463] get_compat_msghdr+0x108/0x2b0 [ 967.088202][T16463] do_recvmmsg+0xdbb/0x22b0 [ 967.092700][T16463] __sys_recvmmsg+0x5dd/0x610 [ 967.097370][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.103428][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.109574][T16463] __do_fast_syscall_32+0x129/0x180 [ 967.114764][T16463] do_fast_syscall_32+0x6a/0xc0 [ 967.119605][T16463] do_SYSENTER_32+0x73/0x90 [ 967.124098][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.130400][T16463] [ 967.132722][T16463] Uninit was stored to memory at: [ 967.137737][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 967.143444][T16463] __msan_chain_origin+0x50/0x90 [ 967.148386][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 967.153483][T16463] get_compat_msghdr+0x108/0x2b0 [ 967.158418][T16463] do_recvmmsg+0xdbb/0x22b0 [ 967.162910][T16463] __sys_recvmmsg+0x5dd/0x610 [ 967.167575][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.173630][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.179771][T16463] __do_fast_syscall_32+0x129/0x180 [ 967.184958][T16463] do_fast_syscall_32+0x6a/0xc0 [ 967.189795][T16463] do_SYSENTER_32+0x73/0x90 [ 967.194287][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.200588][T16463] [ 967.202898][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 967.209556][T16463] do_recvmmsg+0xbf/0x22b0 [ 967.213957][T16463] do_recvmmsg+0xbf/0x22b0 [ 968.312239][T16456] not chained 930000 origins [ 968.316875][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 968.325539][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.335595][T16456] Call Trace: [ 968.338893][T16456] dump_stack+0x21c/0x280 [ 968.343231][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 968.348958][T16456] ? kfree_sensitive+0xda/0x120 [ 968.353819][T16456] ? kmsan_get_metadata+0x116/0x180 [ 968.359022][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 968.364583][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 968.369872][T16456] ? kmsan_get_metadata+0x116/0x180 [ 968.375071][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 968.380619][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 968.386694][T16456] ? _copy_from_user+0x201/0x310 [ 968.391635][T16456] ? kmsan_get_metadata+0x116/0x180 [ 968.396839][T16456] __msan_chain_origin+0x50/0x90 [ 968.401784][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.406913][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.411864][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.416378][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 968.422201][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 968.427498][T16456] ? kmsan_get_metadata+0x116/0x180 [ 968.432700][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 968.438348][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 968.443635][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 968.448400][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 968.453165][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.457852][T16456] ? kmsan_get_metadata+0x116/0x180 [ 968.463057][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.469138][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.475303][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.480513][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.485372][T16456] do_SYSENTER_32+0x73/0x90 [ 968.489881][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.496205][T16456] RIP: 0023:0xf7fdc549 [ 968.500276][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 968.519883][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 968.528302][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 968.536277][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.544334][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.552303][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 968.560276][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.568253][T16456] Uninit was stored to memory at: [ 968.573286][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.579012][T16456] __msan_chain_origin+0x50/0x90 [ 968.583950][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.589060][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.593998][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.598499][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.603178][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.609244][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.615397][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.620600][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.625455][T16456] do_SYSENTER_32+0x73/0x90 [ 968.629962][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.636272][T16456] [ 968.638592][T16456] Uninit was stored to memory at: [ 968.643622][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.649346][T16456] __msan_chain_origin+0x50/0x90 [ 968.654293][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.659403][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.664338][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.668843][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.673521][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.679591][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.685748][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.690945][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.695925][T16456] do_SYSENTER_32+0x73/0x90 [ 968.700435][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.706750][T16456] [ 968.709069][T16456] Uninit was stored to memory at: [ 968.714097][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.719816][T16456] __msan_chain_origin+0x50/0x90 [ 968.724756][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.729868][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.734800][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.739300][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.743979][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.750047][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.756206][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.761396][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.766237][T16456] do_SYSENTER_32+0x73/0x90 [ 968.770729][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.777037][T16456] [ 968.779350][T16456] Uninit was stored to memory at: [ 968.784366][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.790077][T16456] __msan_chain_origin+0x50/0x90 [ 968.795008][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.800111][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.805078][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.809574][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.814239][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.820297][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.826442][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.831632][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.836477][T16456] do_SYSENTER_32+0x73/0x90 [ 968.840971][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.847277][T16456] [ 968.849587][T16456] Uninit was stored to memory at: [ 968.854611][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.860321][T16456] __msan_chain_origin+0x50/0x90 [ 968.865247][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.870346][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.875272][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.879764][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.884430][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.890489][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.896630][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.901830][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.906676][T16456] do_SYSENTER_32+0x73/0x90 [ 968.911180][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.917486][T16456] [ 968.919795][T16456] Uninit was stored to memory at: [ 968.924811][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 968.930522][T16456] __msan_chain_origin+0x50/0x90 [ 968.935465][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 968.940567][T16456] get_compat_msghdr+0x108/0x2b0 [ 968.945492][T16456] do_recvmmsg+0xdbb/0x22b0 [ 968.949985][T16456] __sys_recvmmsg+0x5dd/0x610 [ 968.954656][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.960716][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.966862][T16456] __do_fast_syscall_32+0x129/0x180 [ 968.972049][T16456] do_fast_syscall_32+0x6a/0xc0 [ 968.976887][T16456] do_SYSENTER_32+0x73/0x90 [ 968.981382][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.987689][T16456] [ 968.990002][T16456] Uninit was stored to memory at: [ 968.995019][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 969.000725][T16456] __msan_chain_origin+0x50/0x90 [ 969.005651][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 969.010762][T16456] get_compat_msghdr+0x108/0x2b0 [ 969.015688][T16456] do_recvmmsg+0xdbb/0x22b0 [ 969.020179][T16456] __sys_recvmmsg+0x5dd/0x610 [ 969.024846][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.030898][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.037043][T16456] __do_fast_syscall_32+0x129/0x180 [ 969.042230][T16456] do_fast_syscall_32+0x6a/0xc0 [ 969.047068][T16456] do_SYSENTER_32+0x73/0x90 [ 969.051560][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.057864][T16456] [ 969.060177][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 969.066838][T16456] do_recvmmsg+0xbf/0x22b0 [ 969.071240][T16456] do_recvmmsg+0xbf/0x22b0 [ 970.065153][T16463] not chained 940000 origins [ 970.069779][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 970.078441][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.088486][T16463] Call Trace: [ 970.091774][T16463] dump_stack+0x21c/0x280 [ 970.096101][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 970.101814][T16463] ? kfree_sensitive+0xda/0x120 [ 970.106653][T16463] ? kmsan_get_metadata+0x116/0x180 [ 970.111842][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 970.117380][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 970.122663][T16463] ? kmsan_get_metadata+0x116/0x180 [ 970.127852][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 970.133660][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 970.139719][T16463] ? _copy_from_user+0x201/0x310 [ 970.144650][T16463] ? kmsan_get_metadata+0x116/0x180 [ 970.149838][T16463] __msan_chain_origin+0x50/0x90 [ 970.154769][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.159886][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.164820][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.169339][T16463] ? kmsan_get_metadata+0x116/0x180 [ 970.174544][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 970.180168][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 970.185441][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 970.190193][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 970.194948][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.199624][T16463] ? kmsan_get_metadata+0x116/0x180 [ 970.204814][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.210879][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.217027][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.222220][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.227065][T16463] do_SYSENTER_32+0x73/0x90 [ 970.231565][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.237877][T16463] RIP: 0023:0xf7fdc549 [ 970.241942][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 970.261535][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 970.270368][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 970.278337][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 970.286296][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 970.294253][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 970.302211][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 970.310176][T16463] Uninit was stored to memory at: [ 970.315193][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.320909][T16463] __msan_chain_origin+0x50/0x90 [ 970.325835][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.330948][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.335883][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.340373][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.345041][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.351095][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.357237][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.362422][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.367260][T16463] do_SYSENTER_32+0x73/0x90 [ 970.371752][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.378056][T16463] [ 970.380365][T16463] Uninit was stored to memory at: [ 970.385901][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.391605][T16463] __msan_chain_origin+0x50/0x90 [ 970.396534][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.401634][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.406556][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.411045][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.415713][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.421766][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.427910][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.433097][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.437936][T16463] do_SYSENTER_32+0x73/0x90 [ 970.442427][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.448730][T16463] [ 970.451038][T16463] Uninit was stored to memory at: [ 970.456050][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.461777][T16463] __msan_chain_origin+0x50/0x90 [ 970.466702][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.471799][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.476721][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.481210][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.485876][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.491951][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.498105][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.503303][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.508157][T16463] do_SYSENTER_32+0x73/0x90 [ 970.512664][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.518968][T16463] [ 970.521280][T16463] Uninit was stored to memory at: [ 970.526299][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.532120][T16463] __msan_chain_origin+0x50/0x90 [ 970.537051][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.542153][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.547076][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.551569][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.556255][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.562316][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.568463][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.573653][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.578492][T16463] do_SYSENTER_32+0x73/0x90 [ 970.582986][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.589291][T16463] [ 970.591602][T16463] Uninit was stored to memory at: [ 970.596617][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.602346][T16463] __msan_chain_origin+0x50/0x90 [ 970.607290][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.612389][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.617312][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.621803][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.626470][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.632527][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.638791][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.643978][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.648825][T16463] do_SYSENTER_32+0x73/0x90 [ 970.653322][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.659634][T16463] [ 970.661954][T16463] Uninit was stored to memory at: [ 970.666974][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.672679][T16463] __msan_chain_origin+0x50/0x90 [ 970.677607][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.682711][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.687642][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.692135][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.696801][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.702876][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.709022][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.714209][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.719049][T16463] do_SYSENTER_32+0x73/0x90 [ 970.723545][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.729849][T16463] [ 970.732159][T16463] Uninit was stored to memory at: [ 970.737173][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 970.742877][T16463] __msan_chain_origin+0x50/0x90 [ 970.747803][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 970.752901][T16463] get_compat_msghdr+0x108/0x2b0 [ 970.757826][T16463] do_recvmmsg+0xdbb/0x22b0 [ 970.762320][T16463] __sys_recvmmsg+0x5dd/0x610 [ 970.766986][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.773040][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.779185][T16463] __do_fast_syscall_32+0x129/0x180 [ 970.784374][T16463] do_fast_syscall_32+0x6a/0xc0 [ 970.789219][T16463] do_SYSENTER_32+0x73/0x90 [ 970.793711][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.800011][T16463] [ 970.802324][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 970.808983][T16463] do_recvmmsg+0xbf/0x22b0 [ 970.813384][T16463] do_recvmmsg+0xbf/0x22b0 [ 972.220485][T16463] not chained 950000 origins [ 972.225117][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 972.233782][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.243829][T16463] Call Trace: [ 972.247126][T16463] dump_stack+0x21c/0x280 [ 972.251463][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 972.257186][T16463] ? kfree_sensitive+0xda/0x120 [ 972.262046][T16463] ? kmsan_get_metadata+0x116/0x180 [ 972.267249][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 972.272824][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 972.278127][T16463] ? kmsan_get_metadata+0x116/0x180 [ 972.283334][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 972.288898][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 972.294973][T16463] ? _copy_from_user+0x201/0x310 [ 972.299916][T16463] ? kmsan_get_metadata+0x116/0x180 [ 972.305116][T16463] __msan_chain_origin+0x50/0x90 [ 972.310064][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.315201][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.320150][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.324690][T16463] ? kmsan_get_metadata+0x116/0x180 [ 972.329896][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 972.335532][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 972.340823][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 972.345584][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 972.350352][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.355043][T16463] ? kmsan_get_metadata+0x116/0x180 [ 972.360250][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.366332][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.372493][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.377696][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.382546][T16463] do_SYSENTER_32+0x73/0x90 [ 972.387057][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.393378][T16463] RIP: 0023:0xf7fdc549 [ 972.397448][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 972.417047][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 972.425458][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 972.433427][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.441392][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 972.449360][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 972.457330][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.465305][T16463] Uninit was stored to memory at: [ 972.470337][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.476058][T16463] __msan_chain_origin+0x50/0x90 [ 972.480997][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.486112][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.491046][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.495547][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.500226][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.506299][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.512453][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.517654][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.522507][T16463] do_SYSENTER_32+0x73/0x90 [ 972.527015][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.533329][T16463] [ 972.535649][T16463] Uninit was stored to memory at: [ 972.540680][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.546420][T16463] __msan_chain_origin+0x50/0x90 [ 972.551385][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.556495][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.561429][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.566019][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.570717][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.576808][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.582965][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.588165][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.593016][T16463] do_SYSENTER_32+0x73/0x90 [ 972.597524][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.603837][T16463] [ 972.606158][T16463] Uninit was stored to memory at: [ 972.611186][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.616909][T16463] __msan_chain_origin+0x50/0x90 [ 972.621851][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.626962][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.631897][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.636397][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.641074][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.647146][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.653298][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.658498][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.663351][T16463] do_SYSENTER_32+0x73/0x90 [ 972.667975][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.674373][T16463] [ 972.676695][T16463] Uninit was stored to memory at: [ 972.681729][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.687450][T16463] __msan_chain_origin+0x50/0x90 [ 972.692386][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.697498][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.702433][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.706939][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.711617][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.717772][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.723936][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.729136][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.733989][T16463] do_SYSENTER_32+0x73/0x90 [ 972.738496][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.744806][T16463] [ 972.747123][T16463] Uninit was stored to memory at: [ 972.752149][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.757879][T16463] __msan_chain_origin+0x50/0x90 [ 972.762814][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.767924][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.772864][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.777363][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.782038][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.788105][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.794258][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.799457][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.804308][T16463] do_SYSENTER_32+0x73/0x90 [ 972.808815][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.815128][T16463] [ 972.817448][T16463] Uninit was stored to memory at: [ 972.822477][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.828280][T16463] __msan_chain_origin+0x50/0x90 [ 972.833214][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.838330][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.843267][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.847776][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.852450][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.858517][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.864673][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.869869][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.874718][T16463] do_SYSENTER_32+0x73/0x90 [ 972.879225][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.885546][T16463] [ 972.887867][T16463] Uninit was stored to memory at: [ 972.892889][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 972.898611][T16463] __msan_chain_origin+0x50/0x90 [ 972.903550][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 972.908661][T16463] get_compat_msghdr+0x108/0x2b0 [ 972.913595][T16463] do_recvmmsg+0xdbb/0x22b0 [ 972.918098][T16463] __sys_recvmmsg+0x5dd/0x610 [ 972.922783][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.928852][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.935010][T16463] __do_fast_syscall_32+0x129/0x180 [ 972.940204][T16463] do_fast_syscall_32+0x6a/0xc0 [ 972.945054][T16463] do_SYSENTER_32+0x73/0x90 [ 972.949560][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.955870][T16463] [ 972.958191][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 972.964862][T16463] do_recvmmsg+0xbf/0x22b0 [ 972.969275][T16463] do_recvmmsg+0xbf/0x22b0 [ 973.598177][T16456] not chained 960000 origins [ 973.602813][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 973.611481][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.621532][T16456] Call Trace: [ 973.624829][T16456] dump_stack+0x21c/0x280 [ 973.629174][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 973.634902][T16456] ? kfree_sensitive+0xda/0x120 [ 973.639845][T16456] ? kmsan_get_metadata+0x116/0x180 [ 973.645051][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 973.650604][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 973.655896][T16456] ? kmsan_get_metadata+0x116/0x180 [ 973.661099][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 973.666655][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 973.672737][T16456] ? _copy_from_user+0x201/0x310 [ 973.677683][T16456] ? kmsan_get_metadata+0x116/0x180 [ 973.682906][T16456] __msan_chain_origin+0x50/0x90 [ 973.687852][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 973.693001][T16456] get_compat_msghdr+0x108/0x2b0 [ 973.697955][T16456] do_recvmmsg+0xdbb/0x22b0 [ 973.702474][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 973.708299][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 973.713603][T16456] ? kmsan_get_metadata+0x116/0x180 [ 973.718809][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 973.724448][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 973.729743][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 973.734502][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 973.739268][T16456] __sys_recvmmsg+0x5dd/0x610 [ 973.743958][T16456] ? kmsan_get_metadata+0x116/0x180 [ 973.749168][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.755251][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.761412][T16456] __do_fast_syscall_32+0x129/0x180 [ 973.766624][T16456] do_fast_syscall_32+0x6a/0xc0 [ 973.772088][T16456] do_SYSENTER_32+0x73/0x90 [ 973.776600][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.782925][T16456] RIP: 0023:0xf7fdc549 [ 973.786997][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 973.806608][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 973.815022][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 973.822997][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.830966][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 973.838935][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 973.846905][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.854882][T16456] Uninit was stored to memory at: [ 973.859916][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 973.865642][T16456] __msan_chain_origin+0x50/0x90 [ 973.870584][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 973.875700][T16456] get_compat_msghdr+0x108/0x2b0 [ 973.880638][T16456] do_recvmmsg+0xdbb/0x22b0 [ 973.885143][T16456] __sys_recvmmsg+0x5dd/0x610 [ 973.889824][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.895898][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.902053][T16456] __do_fast_syscall_32+0x129/0x180 [ 973.907258][T16456] do_fast_syscall_32+0x6a/0xc0 [ 973.912108][T16456] do_SYSENTER_32+0x73/0x90 [ 973.916613][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.922924][T16456] [ 973.925245][T16456] Uninit was stored to memory at: [ 973.930278][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 973.936001][T16456] __msan_chain_origin+0x50/0x90 [ 973.940940][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 973.946053][T16456] get_compat_msghdr+0x108/0x2b0 [ 973.950990][T16456] do_recvmmsg+0xdbb/0x22b0 [ 973.955496][T16456] __sys_recvmmsg+0x5dd/0x610 [ 973.960176][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.966243][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.972396][T16456] __do_fast_syscall_32+0x129/0x180 [ 973.977600][T16456] do_fast_syscall_32+0x6a/0xc0 [ 973.982452][T16456] do_SYSENTER_32+0x73/0x90 [ 973.986958][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.993273][T16456] [ 973.995602][T16456] Uninit was stored to memory at: [ 974.000638][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 974.006359][T16456] __msan_chain_origin+0x50/0x90 [ 974.011301][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 974.016420][T16456] get_compat_msghdr+0x108/0x2b0 [ 974.021362][T16456] do_recvmmsg+0xdbb/0x22b0 [ 974.025863][T16456] __sys_recvmmsg+0x5dd/0x610 [ 974.030540][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.036610][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.042768][T16456] __do_fast_syscall_32+0x129/0x180 [ 974.047967][T16456] do_fast_syscall_32+0x6a/0xc0 [ 974.052817][T16456] do_SYSENTER_32+0x73/0x90 [ 974.057329][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.063641][T16456] [ 974.065960][T16456] Uninit was stored to memory at: [ 974.070989][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 974.076712][T16456] __msan_chain_origin+0x50/0x90 [ 974.081675][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 974.086794][T16456] get_compat_msghdr+0x108/0x2b0 [ 974.091728][T16456] do_recvmmsg+0xdbb/0x22b0 [ 974.096230][T16456] __sys_recvmmsg+0x5dd/0x610 [ 974.100913][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.106982][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.113138][T16456] __do_fast_syscall_32+0x129/0x180 [ 974.118351][T16456] do_fast_syscall_32+0x6a/0xc0 [ 974.123203][T16456] do_SYSENTER_32+0x73/0x90 [ 974.127713][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.134026][T16456] [ 974.136348][T16456] Uninit was stored to memory at: [ 974.141378][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 974.147095][T16456] __msan_chain_origin+0x50/0x90 [ 974.152034][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 974.157153][T16456] get_compat_msghdr+0x108/0x2b0 [ 974.162093][T16456] do_recvmmsg+0xdbb/0x22b0 [ 974.166594][T16456] __sys_recvmmsg+0x5dd/0x610 [ 974.171271][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.177344][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.183501][T16456] __do_fast_syscall_32+0x129/0x180 [ 974.188707][T16456] do_fast_syscall_32+0x6a/0xc0 [ 974.193555][T16456] do_SYSENTER_32+0x73/0x90 [ 974.198062][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.204373][T16456] [ 974.206696][T16456] Uninit was stored to memory at: [ 974.211719][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 974.217442][T16456] __msan_chain_origin+0x50/0x90 [ 974.222379][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 974.227494][T16456] get_compat_msghdr+0x108/0x2b0 [ 974.232426][T16456] do_recvmmsg+0xdbb/0x22b0 [ 974.236929][T16456] __sys_recvmmsg+0x5dd/0x610 [ 974.241615][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.247682][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.253835][T16456] __do_fast_syscall_32+0x129/0x180 [ 974.259037][T16456] do_fast_syscall_32+0x6a/0xc0 [ 974.263890][T16456] do_SYSENTER_32+0x73/0x90 [ 974.268424][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.274731][T16456] [ 974.277048][T16456] Uninit was stored to memory at: [ 974.282141][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 974.287860][T16456] __msan_chain_origin+0x50/0x90 [ 974.292796][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 974.297908][T16456] get_compat_msghdr+0x108/0x2b0 [ 974.302841][T16456] do_recvmmsg+0xdbb/0x22b0 [ 974.307343][T16456] __sys_recvmmsg+0x5dd/0x610 [ 974.312019][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.318085][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.324238][T16456] __do_fast_syscall_32+0x129/0x180 [ 974.329439][T16456] do_fast_syscall_32+0x6a/0xc0 [ 974.334292][T16456] do_SYSENTER_32+0x73/0x90 [ 974.338807][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.345120][T16456] [ 974.347437][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 974.354108][T16456] do_recvmmsg+0xbf/0x22b0 [ 974.358521][T16456] do_recvmmsg+0xbf/0x22b0 [ 975.623613][T16456] not chained 970000 origins [ 975.628259][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 975.636926][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.646979][T16456] Call Trace: [ 975.650278][T16456] dump_stack+0x21c/0x280 [ 975.654622][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 975.660352][T16456] ? kfree_sensitive+0xda/0x120 [ 975.665214][T16456] ? kmsan_get_metadata+0x116/0x180 [ 975.670422][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 975.675987][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 975.681288][T16456] ? kmsan_get_metadata+0x116/0x180 [ 975.686509][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 975.692064][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 975.698143][T16456] ? _copy_from_user+0x201/0x310 [ 975.703088][T16456] ? kmsan_get_metadata+0x116/0x180 [ 975.708294][T16456] __msan_chain_origin+0x50/0x90 [ 975.713237][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 975.718367][T16456] get_compat_msghdr+0x108/0x2b0 [ 975.723321][T16456] do_recvmmsg+0xdbb/0x22b0 [ 975.727831][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 975.733649][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 975.738951][T16456] ? kmsan_get_metadata+0x116/0x180 [ 975.744159][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 975.749795][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 975.755085][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 975.759847][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 975.764630][T16456] __sys_recvmmsg+0x5dd/0x610 [ 975.769319][T16456] ? kmsan_get_metadata+0x116/0x180 [ 975.774529][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.780608][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.786770][T16456] __do_fast_syscall_32+0x129/0x180 [ 975.791976][T16456] do_fast_syscall_32+0x6a/0xc0 [ 975.796834][T16456] do_SYSENTER_32+0x73/0x90 [ 975.801342][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.807658][T16456] RIP: 0023:0xf7fdc549 [ 975.811730][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 975.831334][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 975.839757][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 975.847822][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.855791][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 975.863759][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 975.871725][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 975.879701][T16456] Uninit was stored to memory at: [ 975.884732][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 975.890459][T16456] __msan_chain_origin+0x50/0x90 [ 975.895401][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 975.900516][T16456] get_compat_msghdr+0x108/0x2b0 [ 975.905454][T16456] do_recvmmsg+0xdbb/0x22b0 [ 975.909951][T16456] __sys_recvmmsg+0x5dd/0x610 [ 975.914635][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.920701][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.926869][T16456] __do_fast_syscall_32+0x129/0x180 [ 975.932069][T16456] do_fast_syscall_32+0x6a/0xc0 [ 975.937052][T16456] do_SYSENTER_32+0x73/0x90 [ 975.941554][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.947862][T16456] [ 975.950178][T16456] Uninit was stored to memory at: [ 975.955207][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 975.960930][T16456] __msan_chain_origin+0x50/0x90 [ 975.965871][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 975.970978][T16456] get_compat_msghdr+0x108/0x2b0 [ 975.975911][T16456] do_recvmmsg+0xdbb/0x22b0 [ 975.980432][T16456] __sys_recvmmsg+0x5dd/0x610 [ 975.985113][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.991180][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.997336][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.002537][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.007387][T16456] do_SYSENTER_32+0x73/0x90 [ 976.011897][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.018208][T16456] [ 976.020532][T16456] Uninit was stored to memory at: [ 976.025560][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 976.031283][T16456] __msan_chain_origin+0x50/0x90 [ 976.036225][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 976.041338][T16456] get_compat_msghdr+0x108/0x2b0 [ 976.046274][T16456] do_recvmmsg+0xdbb/0x22b0 [ 976.050776][T16456] __sys_recvmmsg+0x5dd/0x610 [ 976.055456][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.061525][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.067680][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.072880][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.077730][T16456] do_SYSENTER_32+0x73/0x90 [ 976.082234][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.088546][T16456] [ 976.090865][T16456] Uninit was stored to memory at: [ 976.095903][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 976.101629][T16456] __msan_chain_origin+0x50/0x90 [ 976.106574][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 976.111685][T16456] get_compat_msghdr+0x108/0x2b0 [ 976.116623][T16456] do_recvmmsg+0xdbb/0x22b0 [ 976.121124][T16456] __sys_recvmmsg+0x5dd/0x610 [ 976.125798][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.131863][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.138019][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.143225][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.148076][T16456] do_SYSENTER_32+0x73/0x90 [ 976.152586][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.158898][T16456] [ 976.161221][T16456] Uninit was stored to memory at: [ 976.166246][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 976.171967][T16456] __msan_chain_origin+0x50/0x90 [ 976.176905][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 976.182025][T16456] get_compat_msghdr+0x108/0x2b0 [ 976.186960][T16456] do_recvmmsg+0xdbb/0x22b0 [ 976.191459][T16456] __sys_recvmmsg+0x5dd/0x610 [ 976.196143][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.202215][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.208369][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.213575][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.218443][T16456] do_SYSENTER_32+0x73/0x90 [ 976.222957][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.229271][T16456] [ 976.231592][T16456] Uninit was stored to memory at: [ 976.236618][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 976.242337][T16456] __msan_chain_origin+0x50/0x90 [ 976.247272][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 976.252377][T16456] get_compat_msghdr+0x108/0x2b0 [ 976.257312][T16456] do_recvmmsg+0xdbb/0x22b0 [ 976.261818][T16456] __sys_recvmmsg+0x5dd/0x610 [ 976.266497][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.272567][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.278726][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.283934][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.288785][T16456] do_SYSENTER_32+0x73/0x90 [ 976.293293][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.299606][T16456] [ 976.301931][T16456] Uninit was stored to memory at: [ 976.306959][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 976.312677][T16456] __msan_chain_origin+0x50/0x90 [ 976.317618][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 976.322729][T16456] get_compat_msghdr+0x108/0x2b0 [ 976.327663][T16456] do_recvmmsg+0xdbb/0x22b0 [ 976.332163][T16456] __sys_recvmmsg+0x5dd/0x610 [ 976.336840][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.342913][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.349069][T16456] __do_fast_syscall_32+0x129/0x180 [ 976.354273][T16456] do_fast_syscall_32+0x6a/0xc0 [ 976.359131][T16456] do_SYSENTER_32+0x73/0x90 [ 976.363634][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.369943][T16456] [ 976.372266][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 976.378941][T16456] do_recvmmsg+0xbf/0x22b0 [ 976.383449][T16456] do_recvmmsg+0xbf/0x22b0 [ 977.626721][T16463] not chained 980000 origins [ 977.631355][T16463] CPU: 1 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 977.640020][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.650072][T16463] Call Trace: [ 977.653373][T16463] dump_stack+0x21c/0x280 [ 977.657718][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 977.663450][T16463] ? do_user_addr_fault+0x106b/0x16a0 [ 977.668850][T16463] ? kmsan_get_metadata+0x116/0x180 [ 977.674052][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 977.679607][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 977.685809][T16463] ? _copy_from_user+0x201/0x310 [ 977.690753][T16463] ? kmsan_get_metadata+0x116/0x180 [ 977.695958][T16463] __msan_chain_origin+0x50/0x90 [ 977.700910][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 977.706040][T16463] get_compat_msghdr+0x108/0x2b0 [ 977.710984][T16463] do_recvmmsg+0xdbb/0x22b0 [ 977.715520][T16463] ? kmsan_get_metadata+0x116/0x180 [ 977.720719][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 977.726356][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 977.731646][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 977.736414][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 977.741186][T16463] __sys_recvmmsg+0x5dd/0x610 [ 977.745876][T16463] ? kmsan_get_metadata+0x116/0x180 [ 977.751080][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.757158][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.763319][T16463] __do_fast_syscall_32+0x129/0x180 [ 977.768530][T16463] do_fast_syscall_32+0x6a/0xc0 [ 977.773387][T16463] do_SYSENTER_32+0x73/0x90 [ 977.777902][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.784222][T16463] RIP: 0023:0xf7fdc549 [ 977.788292][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 977.807896][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 977.816313][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 977.824297][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.832267][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.840235][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 977.848216][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.856197][T16463] Uninit was stored to memory at: [ 977.861233][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 977.866955][T16463] __msan_chain_origin+0x50/0x90 [ 977.871893][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 977.877002][T16463] get_compat_msghdr+0x108/0x2b0 [ 977.881942][T16463] do_recvmmsg+0xdbb/0x22b0 [ 977.886451][T16463] __sys_recvmmsg+0x5dd/0x610 [ 977.891134][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.897208][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.903365][T16463] __do_fast_syscall_32+0x129/0x180 [ 977.908565][T16463] do_fast_syscall_32+0x6a/0xc0 [ 977.913416][T16463] do_SYSENTER_32+0x73/0x90 [ 977.917926][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.924236][T16463] [ 977.926559][T16463] Uninit was stored to memory at: [ 977.931583][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 977.937304][T16463] __msan_chain_origin+0x50/0x90 [ 977.942244][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 977.947356][T16463] get_compat_msghdr+0x108/0x2b0 [ 977.952315][T16463] do_recvmmsg+0xdbb/0x22b0 [ 977.956816][T16463] __sys_recvmmsg+0x5dd/0x610 [ 977.961493][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.967560][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.973719][T16463] __do_fast_syscall_32+0x129/0x180 [ 977.978917][T16463] do_fast_syscall_32+0x6a/0xc0 [ 977.983763][T16463] do_SYSENTER_32+0x73/0x90 [ 977.988271][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.994582][T16463] [ 977.996900][T16463] Uninit was stored to memory at: [ 978.001956][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 978.007678][T16463] __msan_chain_origin+0x50/0x90 [ 978.012615][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 978.017726][T16463] get_compat_msghdr+0x108/0x2b0 [ 978.022664][T16463] do_recvmmsg+0xdbb/0x22b0 [ 978.027163][T16463] __sys_recvmmsg+0x5dd/0x610 [ 978.031839][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.037908][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.044095][T16463] __do_fast_syscall_32+0x129/0x180 [ 978.049295][T16463] do_fast_syscall_32+0x6a/0xc0 [ 978.054145][T16463] do_SYSENTER_32+0x73/0x90 [ 978.058651][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.064960][T16463] [ 978.067278][T16463] Uninit was stored to memory at: [ 978.072305][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 978.078024][T16463] __msan_chain_origin+0x50/0x90 [ 978.082959][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 978.088068][T16463] get_compat_msghdr+0x108/0x2b0 [ 978.093002][T16463] do_recvmmsg+0xdbb/0x22b0 [ 978.097503][T16463] __sys_recvmmsg+0x5dd/0x610 [ 978.102180][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.108259][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.114439][T16463] __do_fast_syscall_32+0x129/0x180 [ 978.119638][T16463] do_fast_syscall_32+0x6a/0xc0 [ 978.124490][T16463] do_SYSENTER_32+0x73/0x90 [ 978.128995][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.135304][T16463] [ 978.137622][T16463] Uninit was stored to memory at: [ 978.142649][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 978.148371][T16463] __msan_chain_origin+0x50/0x90 [ 978.153329][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 978.158441][T16463] get_compat_msghdr+0x108/0x2b0 [ 978.163375][T16463] do_recvmmsg+0xdbb/0x22b0 [ 978.167876][T16463] __sys_recvmmsg+0x5dd/0x610 [ 978.172556][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.178624][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.184780][T16463] __do_fast_syscall_32+0x129/0x180 [ 978.189979][T16463] do_fast_syscall_32+0x6a/0xc0 [ 978.194836][T16463] do_SYSENTER_32+0x73/0x90 [ 978.199344][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.205655][T16463] [ 978.207974][T16463] Uninit was stored to memory at: [ 978.212996][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 978.218715][T16463] __msan_chain_origin+0x50/0x90 [ 978.223651][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 978.228763][T16463] get_compat_msghdr+0x108/0x2b0 [ 978.233693][T16463] do_recvmmsg+0xdbb/0x22b0 [ 978.238193][T16463] __sys_recvmmsg+0x5dd/0x610 [ 978.242868][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.248938][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.255098][T16463] __do_fast_syscall_32+0x129/0x180 [ 978.260300][T16463] do_fast_syscall_32+0x6a/0xc0 [ 978.265237][T16463] do_SYSENTER_32+0x73/0x90 [ 978.269765][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.276075][T16463] [ 978.278393][T16463] Uninit was stored to memory at: [ 978.283429][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 978.289147][T16463] __msan_chain_origin+0x50/0x90 [ 978.294087][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 978.299198][T16463] get_compat_msghdr+0x108/0x2b0 [ 978.304133][T16463] do_recvmmsg+0xdbb/0x22b0 [ 978.308634][T16463] __sys_recvmmsg+0x5dd/0x610 [ 978.313313][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.319380][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.325541][T16463] __do_fast_syscall_32+0x129/0x180 [ 978.330738][T16463] do_fast_syscall_32+0x6a/0xc0 [ 978.335593][T16463] do_SYSENTER_32+0x73/0x90 [ 978.340101][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.346417][T16463] [ 978.348739][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 978.355418][T16463] do_recvmmsg+0xbf/0x22b0 [ 978.359840][T16463] do_recvmmsg+0xbf/0x22b0 [ 979.283132][T16456] not chained 990000 origins [ 979.287760][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 979.296424][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.306472][T16456] Call Trace: [ 979.309754][T16456] dump_stack+0x21c/0x280 [ 979.314096][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 979.319807][T16456] ? kfree_sensitive+0xda/0x120 [ 979.324648][T16456] ? kmsan_get_metadata+0x116/0x180 [ 979.329838][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 979.335379][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 979.340658][T16456] ? kmsan_get_metadata+0x116/0x180 [ 979.345845][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 979.351384][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 979.357457][T16456] ? _copy_from_user+0x201/0x310 [ 979.362389][T16456] ? kmsan_get_metadata+0x116/0x180 [ 979.367578][T16456] __msan_chain_origin+0x50/0x90 [ 979.372522][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.377636][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.382569][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.387069][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 979.392872][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 979.398157][T16456] ? kmsan_get_metadata+0x116/0x180 [ 979.403346][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 979.408969][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 979.414245][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 979.418995][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 979.423751][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.428424][T16456] ? kmsan_get_metadata+0x116/0x180 [ 979.433614][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.439676][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.445821][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.451013][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.455856][T16456] do_SYSENTER_32+0x73/0x90 [ 979.460353][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.466666][T16456] RIP: 0023:0xf7fdc549 [ 979.470723][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 979.490443][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 979.498847][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 979.506810][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.514771][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.522735][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 979.530708][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.538677][T16456] Uninit was stored to memory at: [ 979.543700][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.549409][T16456] __msan_chain_origin+0x50/0x90 [ 979.554335][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.559435][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.564359][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.568849][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.573516][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.579572][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.585713][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.590897][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.595736][T16456] do_SYSENTER_32+0x73/0x90 [ 979.600228][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.606530][T16456] [ 979.608844][T16456] Uninit was stored to memory at: [ 979.613858][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.619564][T16456] __msan_chain_origin+0x50/0x90 [ 979.624490][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.629606][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.634543][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.639044][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.643722][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.649785][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.655947][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.661148][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.665988][T16456] do_SYSENTER_32+0x73/0x90 [ 979.670494][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.676801][T16456] [ 979.679115][T16456] Uninit was stored to memory at: [ 979.684135][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.689865][T16456] __msan_chain_origin+0x50/0x90 [ 979.694826][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.699928][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.704856][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.709343][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.714012][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.720067][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.726227][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.731424][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.736265][T16456] do_SYSENTER_32+0x73/0x90 [ 979.740763][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.747067][T16456] [ 979.749384][T16456] Uninit was stored to memory at: [ 979.754400][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.760122][T16456] __msan_chain_origin+0x50/0x90 [ 979.765048][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.770162][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.775087][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.779575][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.784243][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.790301][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.796444][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.801633][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.806470][T16456] do_SYSENTER_32+0x73/0x90 [ 979.810964][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.817267][T16456] [ 979.819582][T16456] Uninit was stored to memory at: [ 979.824608][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.830320][T16456] __msan_chain_origin+0x50/0x90 [ 979.835263][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.840365][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.845305][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.849795][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.854458][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.860516][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.866659][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.871845][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.876685][T16456] do_SYSENTER_32+0x73/0x90 [ 979.881192][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.887495][T16456] [ 979.889807][T16456] Uninit was stored to memory at: [ 979.894821][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.900527][T16456] __msan_chain_origin+0x50/0x90 [ 979.905453][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.910552][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.915485][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.919974][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.924645][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.930700][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.936845][T16456] __do_fast_syscall_32+0x129/0x180 [ 979.942031][T16456] do_fast_syscall_32+0x6a/0xc0 [ 979.946870][T16456] do_SYSENTER_32+0x73/0x90 [ 979.951362][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.957663][T16456] [ 979.959972][T16456] Uninit was stored to memory at: [ 979.964985][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 979.970696][T16456] __msan_chain_origin+0x50/0x90 [ 979.975621][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 979.980721][T16456] get_compat_msghdr+0x108/0x2b0 [ 979.985642][T16456] do_recvmmsg+0xdbb/0x22b0 [ 979.990129][T16456] __sys_recvmmsg+0x5dd/0x610 [ 979.994795][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.000849][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.006990][T16456] __do_fast_syscall_32+0x129/0x180 [ 980.012177][T16456] do_fast_syscall_32+0x6a/0xc0 [ 980.017016][T16456] do_SYSENTER_32+0x73/0x90 [ 980.021511][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.027812][T16456] [ 980.030124][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 980.036784][T16456] do_recvmmsg+0xbf/0x22b0 [ 980.041184][T16456] do_recvmmsg+0xbf/0x22b0 [ 981.146259][T16456] not chained 1000000 origins [ 981.150969][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 981.159628][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.169664][T16456] Call Trace: [ 981.172947][T16456] dump_stack+0x21c/0x280 [ 981.177275][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 981.182992][T16456] ? kfree_sensitive+0xda/0x120 [ 981.187833][T16456] ? kmsan_get_metadata+0x116/0x180 [ 981.193892][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 981.199431][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 981.204709][T16456] ? kmsan_get_metadata+0x116/0x180 [ 981.209896][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 981.215449][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 981.221534][T16456] ? _copy_from_user+0x201/0x310 [ 981.226466][T16456] ? kmsan_get_metadata+0x116/0x180 [ 981.231668][T16456] __msan_chain_origin+0x50/0x90 [ 981.236600][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.241713][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.246648][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.251142][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 981.256948][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 981.262233][T16456] ? kmsan_get_metadata+0x116/0x180 [ 981.267422][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 981.273043][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 981.278318][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 981.283070][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 981.287825][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.292498][T16456] ? kmsan_get_metadata+0x116/0x180 [ 981.297690][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.303766][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.309913][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.315106][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.319948][T16456] do_SYSENTER_32+0x73/0x90 [ 981.324468][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.330778][T16456] RIP: 0023:0xf7fdc549 [ 981.334834][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 981.354421][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 981.362819][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 981.370775][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.378744][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.386700][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 981.394658][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.402621][T16456] Uninit was stored to memory at: [ 981.407640][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.413344][T16456] __msan_chain_origin+0x50/0x90 [ 981.418269][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.423364][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.428303][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.432792][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.437457][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.443511][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.449739][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.454924][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.459766][T16456] do_SYSENTER_32+0x73/0x90 [ 981.464259][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.470560][T16456] [ 981.472989][T16456] Uninit was stored to memory at: [ 981.478002][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.483719][T16456] __msan_chain_origin+0x50/0x90 [ 981.488656][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.493766][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.498691][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.503188][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.507863][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.513916][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.520062][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.525245][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.530094][T16456] do_SYSENTER_32+0x73/0x90 [ 981.534605][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.540906][T16456] [ 981.543216][T16456] Uninit was stored to memory at: [ 981.548233][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.553946][T16456] __msan_chain_origin+0x50/0x90 [ 981.558873][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.563971][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.568892][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.573382][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.578049][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.584104][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.590245][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.595430][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.600266][T16456] do_SYSENTER_32+0x73/0x90 [ 981.604770][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.611071][T16456] [ 981.613380][T16456] Uninit was stored to memory at: [ 981.618395][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.624100][T16456] __msan_chain_origin+0x50/0x90 [ 981.629025][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.634120][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.639041][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.643525][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.648193][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.654248][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.660401][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.665585][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.670423][T16456] do_SYSENTER_32+0x73/0x90 [ 981.674916][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.681233][T16456] [ 981.683541][T16456] Uninit was stored to memory at: [ 981.688552][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.694268][T16456] __msan_chain_origin+0x50/0x90 [ 981.699206][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.704309][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.709233][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.713720][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.718388][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.724445][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.730589][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.735780][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.740626][T16456] do_SYSENTER_32+0x73/0x90 [ 981.745139][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.751448][T16456] [ 981.753760][T16456] Uninit was stored to memory at: [ 981.758776][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.764482][T16456] __msan_chain_origin+0x50/0x90 [ 981.769407][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.774509][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.779431][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.783920][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.788586][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.794639][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.800786][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.805972][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.810811][T16456] do_SYSENTER_32+0x73/0x90 [ 981.815304][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.821605][T16456] [ 981.823916][T16456] Uninit was stored to memory at: [ 981.828928][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 981.834635][T16456] __msan_chain_origin+0x50/0x90 [ 981.839566][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 981.844670][T16456] get_compat_msghdr+0x108/0x2b0 [ 981.849590][T16456] do_recvmmsg+0xdbb/0x22b0 [ 981.854093][T16456] __sys_recvmmsg+0x5dd/0x610 [ 981.858756][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.864812][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.870954][T16456] __do_fast_syscall_32+0x129/0x180 [ 981.876140][T16456] do_fast_syscall_32+0x6a/0xc0 [ 981.880978][T16456] do_SYSENTER_32+0x73/0x90 [ 981.885482][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.891787][T16456] [ 981.894098][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 981.900756][T16456] do_recvmmsg+0xbf/0x22b0 [ 981.905159][T16456] do_recvmmsg+0xbf/0x22b0 [ 983.427197][T16456] not chained 1010000 origins [ 983.431905][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 983.440559][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.450598][T16456] Call Trace: [ 983.453885][T16456] dump_stack+0x21c/0x280 [ 983.458326][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 983.464041][T16456] ? kfree_sensitive+0xda/0x120 [ 983.468882][T16456] ? kmsan_get_metadata+0x116/0x180 [ 983.474174][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 983.479717][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 983.484997][T16456] ? kmsan_get_metadata+0x116/0x180 [ 983.490200][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 983.495739][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 983.501810][T16456] ? _copy_from_user+0x201/0x310 [ 983.506741][T16456] ? kmsan_get_metadata+0x116/0x180 [ 983.511930][T16456] __msan_chain_origin+0x50/0x90 [ 983.516860][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.521975][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.526921][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.531438][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 983.537246][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 983.542615][T16456] ? kmsan_get_metadata+0x116/0x180 [ 983.547806][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 983.553431][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 983.558711][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 983.563463][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 983.568219][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.572903][T16456] ? kmsan_get_metadata+0x116/0x180 [ 983.578102][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.584169][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.590316][T16456] __do_fast_syscall_32+0x129/0x180 [ 983.595511][T16456] do_fast_syscall_32+0x6a/0xc0 [ 983.600353][T16456] do_SYSENTER_32+0x73/0x90 [ 983.604852][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.611165][T16456] RIP: 0023:0xf7fdc549 [ 983.615224][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 983.634813][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 983.643223][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 983.651191][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.659161][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.667263][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 983.675228][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.683196][T16456] Uninit was stored to memory at: [ 983.688218][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 983.693932][T16456] __msan_chain_origin+0x50/0x90 [ 983.698868][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.703970][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.708892][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.713381][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.718049][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.724103][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.730247][T16456] __do_fast_syscall_32+0x129/0x180 [ 983.735435][T16456] do_fast_syscall_32+0x6a/0xc0 [ 983.740272][T16456] do_SYSENTER_32+0x73/0x90 [ 983.744769][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.751077][T16456] [ 983.753386][T16456] Uninit was stored to memory at: [ 983.758404][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 983.764113][T16456] __msan_chain_origin+0x50/0x90 [ 983.769040][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.774139][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.779060][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.783546][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.788211][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.794270][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.800412][T16456] __do_fast_syscall_32+0x129/0x180 [ 983.805601][T16456] do_fast_syscall_32+0x6a/0xc0 [ 983.810439][T16456] do_SYSENTER_32+0x73/0x90 [ 983.814932][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.821250][T16456] [ 983.823562][T16456] Uninit was stored to memory at: [ 983.828572][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 983.834281][T16456] __msan_chain_origin+0x50/0x90 [ 983.839295][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.844392][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.849313][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.853801][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.858465][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.864519][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.870659][T16456] __do_fast_syscall_32+0x129/0x180 [ 983.875843][T16456] do_fast_syscall_32+0x6a/0xc0 [ 983.880679][T16456] do_SYSENTER_32+0x73/0x90 [ 983.885171][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.891471][T16456] [ 983.893782][T16456] Uninit was stored to memory at: [ 983.898794][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 983.904499][T16456] __msan_chain_origin+0x50/0x90 [ 983.909424][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.914521][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.919441][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.923929][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.928592][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.934646][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.940787][T16456] __do_fast_syscall_32+0x129/0x180 [ 983.945974][T16456] do_fast_syscall_32+0x6a/0xc0 [ 983.950813][T16456] do_SYSENTER_32+0x73/0x90 [ 983.955304][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.961606][T16456] [ 983.963915][T16456] Uninit was stored to memory at: [ 983.968938][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 983.974655][T16456] __msan_chain_origin+0x50/0x90 [ 983.979580][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 983.984691][T16456] get_compat_msghdr+0x108/0x2b0 [ 983.989614][T16456] do_recvmmsg+0xdbb/0x22b0 [ 983.994102][T16456] __sys_recvmmsg+0x5dd/0x610 [ 983.998769][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.004825][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.010966][T16456] __do_fast_syscall_32+0x129/0x180 [ 984.016167][T16456] do_fast_syscall_32+0x6a/0xc0 [ 984.021003][T16456] do_SYSENTER_32+0x73/0x90 [ 984.025495][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.031795][T16456] [ 984.034106][T16456] Uninit was stored to memory at: [ 984.039117][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 984.044832][T16456] __msan_chain_origin+0x50/0x90 [ 984.049757][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 984.054856][T16456] get_compat_msghdr+0x108/0x2b0 [ 984.059777][T16456] do_recvmmsg+0xdbb/0x22b0 [ 984.064267][T16456] __sys_recvmmsg+0x5dd/0x610 [ 984.068934][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.074988][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.081129][T16456] __do_fast_syscall_32+0x129/0x180 [ 984.086315][T16456] do_fast_syscall_32+0x6a/0xc0 [ 984.091153][T16456] do_SYSENTER_32+0x73/0x90 [ 984.095643][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.101945][T16456] [ 984.104253][T16456] Uninit was stored to memory at: [ 984.109266][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 984.114971][T16456] __msan_chain_origin+0x50/0x90 [ 984.119894][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 984.124994][T16456] get_compat_msghdr+0x108/0x2b0 [ 984.129914][T16456] do_recvmmsg+0xdbb/0x22b0 [ 984.134403][T16456] __sys_recvmmsg+0x5dd/0x610 [ 984.139066][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.145118][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.151263][T16456] __do_fast_syscall_32+0x129/0x180 [ 984.156465][T16456] do_fast_syscall_32+0x6a/0xc0 [ 984.161302][T16456] do_SYSENTER_32+0x73/0x90 [ 984.165797][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.172099][T16456] [ 984.174410][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 984.181065][T16456] do_recvmmsg+0xbf/0x22b0 [ 984.185468][T16456] do_recvmmsg+0xbf/0x22b0 [ 985.183761][T16456] not chained 1020000 origins [ 985.188480][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 985.197143][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.207288][T16456] Call Trace: [ 985.210578][T16456] dump_stack+0x21c/0x280 [ 985.214914][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 985.220629][T16456] ? kfree_sensitive+0xda/0x120 [ 985.225484][T16456] ? kmsan_get_metadata+0x116/0x180 [ 985.230674][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 985.236214][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 985.241492][T16456] ? kmsan_get_metadata+0x116/0x180 [ 985.246680][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 985.252216][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 985.258278][T16456] ? _copy_from_user+0x201/0x310 [ 985.263206][T16456] ? kmsan_get_metadata+0x116/0x180 [ 985.268398][T16456] __msan_chain_origin+0x50/0x90 [ 985.273333][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.278450][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.283388][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.287899][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 985.293705][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 985.298988][T16456] ? kmsan_get_metadata+0x116/0x180 [ 985.304175][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 985.309801][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 985.315075][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 985.319825][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 985.324579][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.329253][T16456] ? kmsan_get_metadata+0x116/0x180 [ 985.334444][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.340507][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.346666][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.351857][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.356702][T16456] do_SYSENTER_32+0x73/0x90 [ 985.361205][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.367603][T16456] RIP: 0023:0xf7fdc549 [ 985.371662][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 985.391252][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 985.399649][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 985.407609][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 985.415567][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 985.423524][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 985.431483][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 985.439448][T16456] Uninit was stored to memory at: [ 985.444463][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.450169][T16456] __msan_chain_origin+0x50/0x90 [ 985.455109][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.460205][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.465129][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.469650][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.474317][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.480371][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.486515][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.491717][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.496564][T16456] do_SYSENTER_32+0x73/0x90 [ 985.501064][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.507373][T16456] [ 985.509689][T16456] Uninit was stored to memory at: [ 985.514709][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.520421][T16456] __msan_chain_origin+0x50/0x90 [ 985.525369][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.530482][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.535408][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.539901][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.544569][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.550626][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.556769][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.561957][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.566809][T16456] do_SYSENTER_32+0x73/0x90 [ 985.571309][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.577613][T16456] [ 985.579924][T16456] Uninit was stored to memory at: [ 985.584950][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.590659][T16456] __msan_chain_origin+0x50/0x90 [ 985.595583][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.600685][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.605609][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.610098][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.614763][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.620818][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.626964][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.632151][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.637114][T16456] do_SYSENTER_32+0x73/0x90 [ 985.641614][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.647918][T16456] [ 985.650232][T16456] Uninit was stored to memory at: [ 985.655252][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.660971][T16456] __msan_chain_origin+0x50/0x90 [ 985.665909][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.671009][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.675936][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.680429][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.685098][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.691157][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.697303][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.702585][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.707428][T16456] do_SYSENTER_32+0x73/0x90 [ 985.711922][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.718238][T16456] [ 985.720560][T16456] Uninit was stored to memory at: [ 985.725575][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.731280][T16456] __msan_chain_origin+0x50/0x90 [ 985.736207][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.741306][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.746230][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.750720][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.755399][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.761452][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.767594][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.772781][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.777622][T16456] do_SYSENTER_32+0x73/0x90 [ 985.782113][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.788418][T16456] [ 985.790730][T16456] Uninit was stored to memory at: [ 985.795750][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.801455][T16456] __msan_chain_origin+0x50/0x90 [ 985.806393][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.811499][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.816421][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.820909][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.825572][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.831625][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.837769][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.842959][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.847814][T16456] do_SYSENTER_32+0x73/0x90 [ 985.852305][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.858609][T16456] [ 985.860919][T16456] Uninit was stored to memory at: [ 985.865931][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 985.871635][T16456] __msan_chain_origin+0x50/0x90 [ 985.876572][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 985.881671][T16456] get_compat_msghdr+0x108/0x2b0 [ 985.886594][T16456] do_recvmmsg+0xdbb/0x22b0 [ 985.891095][T16456] __sys_recvmmsg+0x5dd/0x610 [ 985.895759][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.901817][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.907957][T16456] __do_fast_syscall_32+0x129/0x180 [ 985.913145][T16456] do_fast_syscall_32+0x6a/0xc0 [ 985.917982][T16456] do_SYSENTER_32+0x73/0x90 [ 985.922474][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.928779][T16456] [ 985.931105][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 985.937764][T16456] do_recvmmsg+0xbf/0x22b0 [ 985.942182][T16456] do_recvmmsg+0xbf/0x22b0 [ 987.322501][T16463] not chained 1030000 origins [ 987.327220][T16463] CPU: 0 PID: 16463 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 987.335884][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.345937][T16463] Call Trace: [ 987.349239][T16463] dump_stack+0x21c/0x280 [ 987.353581][T16463] kmsan_internal_chain_origin+0x6f/0x130 [ 987.359309][T16463] ? kfree_sensitive+0xda/0x120 [ 987.364164][T16463] ? kmsan_get_metadata+0x116/0x180 [ 987.369370][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 987.374925][T16463] ? __local_bh_enable_ip+0x97/0x1d0 [ 987.380222][T16463] ? kmsan_get_metadata+0x116/0x180 [ 987.385423][T16463] ? kmsan_set_origin_checked+0x95/0xf0 [ 987.390979][T16463] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 987.397052][T16463] ? _copy_from_user+0x201/0x310 [ 987.401992][T16463] ? kmsan_get_metadata+0x116/0x180 [ 987.407194][T16463] __msan_chain_origin+0x50/0x90 [ 987.412144][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.417281][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.422227][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.426757][T16463] ? kmsan_get_metadata+0x116/0x180 [ 987.431967][T16463] ? kmsan_internal_set_origin+0x75/0xb0 [ 987.437605][T16463] ? __msan_poison_alloca+0xf0/0x120 [ 987.442890][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 987.447654][T16463] ? __sys_recvmmsg+0xbb/0x610 [ 987.452425][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.457113][T16463] ? kmsan_get_metadata+0x116/0x180 [ 987.462317][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.468397][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.474559][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.479764][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.484621][T16463] do_SYSENTER_32+0x73/0x90 [ 987.489133][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.495461][T16463] RIP: 0023:0xf7fdc549 [ 987.499530][T16463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 987.519134][T16463] RSP: 002b:00000000f55940cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 987.527569][T16463] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 987.535549][T16463] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.543553][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.551529][T16463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 987.559500][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.567479][T16463] Uninit was stored to memory at: [ 987.572511][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.578239][T16463] __msan_chain_origin+0x50/0x90 [ 987.583179][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.588293][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.593227][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.597729][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.602408][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.608477][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.614633][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.619837][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.624694][T16463] do_SYSENTER_32+0x73/0x90 [ 987.629200][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.635599][T16463] [ 987.637918][T16463] Uninit was stored to memory at: [ 987.642957][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.648713][T16463] __msan_chain_origin+0x50/0x90 [ 987.653648][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.658766][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.663705][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.668208][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.672896][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.678960][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.685117][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.690322][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.695172][T16463] do_SYSENTER_32+0x73/0x90 [ 987.699677][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.705986][T16463] [ 987.708314][T16463] Uninit was stored to memory at: [ 987.713353][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.719070][T16463] __msan_chain_origin+0x50/0x90 [ 987.724009][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.729122][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.734060][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.738559][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.743241][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.749308][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.755476][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.760672][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.765528][T16463] do_SYSENTER_32+0x73/0x90 [ 987.770036][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.776345][T16463] [ 987.778668][T16463] Uninit was stored to memory at: [ 987.783693][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.789412][T16463] __msan_chain_origin+0x50/0x90 [ 987.794353][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.799463][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.804402][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.808902][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.813581][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.819649][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.825805][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.831010][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.835864][T16463] do_SYSENTER_32+0x73/0x90 [ 987.840367][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.846680][T16463] [ 987.849002][T16463] Uninit was stored to memory at: [ 987.854031][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.859751][T16463] __msan_chain_origin+0x50/0x90 [ 987.864689][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.869802][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.874740][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.879240][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.883920][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.889986][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.896142][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.901340][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.906194][T16463] do_SYSENTER_32+0x73/0x90 [ 987.910701][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.917012][T16463] [ 987.919333][T16463] Uninit was stored to memory at: [ 987.924356][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 987.930073][T16463] __msan_chain_origin+0x50/0x90 [ 987.935013][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 987.940125][T16463] get_compat_msghdr+0x108/0x2b0 [ 987.945061][T16463] do_recvmmsg+0xdbb/0x22b0 [ 987.949562][T16463] __sys_recvmmsg+0x5dd/0x610 [ 987.954238][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.960303][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.966462][T16463] __do_fast_syscall_32+0x129/0x180 [ 987.971662][T16463] do_fast_syscall_32+0x6a/0xc0 [ 987.976513][T16463] do_SYSENTER_32+0x73/0x90 [ 987.981018][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.987329][T16463] [ 987.989647][T16463] Uninit was stored to memory at: [ 987.994671][T16463] kmsan_internal_chain_origin+0xad/0x130 [ 988.000388][T16463] __msan_chain_origin+0x50/0x90 [ 988.005325][T16463] __get_compat_msghdr+0x6db/0x9d0 [ 988.010442][T16463] get_compat_msghdr+0x108/0x2b0 [ 988.015380][T16463] do_recvmmsg+0xdbb/0x22b0 [ 988.019880][T16463] __sys_recvmmsg+0x5dd/0x610 [ 988.024560][T16463] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.030624][T16463] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.036780][T16463] __do_fast_syscall_32+0x129/0x180 [ 988.041980][T16463] do_fast_syscall_32+0x6a/0xc0 [ 988.046829][T16463] do_SYSENTER_32+0x73/0x90 [ 988.051334][T16463] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.057645][T16463] [ 988.059968][T16463] Local variable ----msg_sys@do_recvmmsg created at: [ 988.066638][T16463] do_recvmmsg+0xbf/0x22b0 [ 988.071048][T16463] do_recvmmsg+0xbf/0x22b0 [ 988.939564][T16456] not chained 1040000 origins [ 988.944279][T16456] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 988.952946][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.962997][T16456] Call Trace: [ 988.966286][T16456] dump_stack+0x21c/0x280 [ 988.970599][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 988.976311][T16456] ? kfree_sensitive+0xda/0x120 [ 988.981146][T16456] ? kmsan_get_metadata+0x116/0x180 [ 988.986344][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 988.991883][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 988.997251][T16456] ? kmsan_get_metadata+0x116/0x180 [ 989.002481][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 989.008031][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 989.014105][T16456] ? _copy_from_user+0x201/0x310 [ 989.019048][T16456] ? kmsan_get_metadata+0x116/0x180 [ 989.024257][T16456] __msan_chain_origin+0x50/0x90 [ 989.029198][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.034329][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.039275][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.043807][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 989.049624][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 989.054910][T16456] ? kmsan_get_metadata+0x116/0x180 [ 989.060101][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 989.065732][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 989.071018][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 989.075782][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 989.080551][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.085238][T16456] ? kmsan_get_metadata+0x116/0x180 [ 989.090471][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.096549][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.102709][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.107919][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.112778][T16456] do_SYSENTER_32+0x73/0x90 [ 989.117292][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.123620][T16456] RIP: 0023:0xf7fdc549 [ 989.127690][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 989.147385][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 989.155795][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 989.163765][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.171737][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.179717][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 989.187688][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.195668][T16456] Uninit was stored to memory at: [ 989.200703][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.206426][T16456] __msan_chain_origin+0x50/0x90 [ 989.211367][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.216481][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.221419][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.225920][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.230603][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.236674][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.242920][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.248124][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.252981][T16456] do_SYSENTER_32+0x73/0x90 [ 989.257488][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.263801][T16456] [ 989.266125][T16456] Uninit was stored to memory at: [ 989.271153][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.276874][T16456] __msan_chain_origin+0x50/0x90 [ 989.281813][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.286933][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.291874][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.296379][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.301064][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.307135][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.313300][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.318502][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.323354][T16456] do_SYSENTER_32+0x73/0x90 [ 989.327860][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.334173][T16456] [ 989.336496][T16456] Uninit was stored to memory at: [ 989.341553][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.347274][T16456] __msan_chain_origin+0x50/0x90 [ 989.352219][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.357338][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.362276][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.366807][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.371487][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.377560][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.383716][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.388914][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.393770][T16456] do_SYSENTER_32+0x73/0x90 [ 989.398281][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.404598][T16456] [ 989.406919][T16456] Uninit was stored to memory at: [ 989.411947][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.417669][T16456] __msan_chain_origin+0x50/0x90 [ 989.422606][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.427719][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.432655][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.437158][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.441839][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.447909][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.454063][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.459278][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.464135][T16456] do_SYSENTER_32+0x73/0x90 [ 989.468644][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.474954][T16456] [ 989.477284][T16456] Uninit was stored to memory at: [ 989.482323][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.488045][T16456] __msan_chain_origin+0x50/0x90 [ 989.492989][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.498105][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.503046][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.507554][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.512242][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.518323][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.524526][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.529895][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.534750][T16456] do_SYSENTER_32+0x73/0x90 [ 989.539271][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.545583][T16456] [ 989.547909][T16456] Uninit was stored to memory at: [ 989.552937][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.558659][T16456] __msan_chain_origin+0x50/0x90 [ 989.563599][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.568713][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.573651][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.578155][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.582835][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.588914][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.595070][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.600274][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.605128][T16456] do_SYSENTER_32+0x73/0x90 [ 989.609639][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.615952][T16456] [ 989.618276][T16456] Uninit was stored to memory at: [ 989.623308][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 989.629032][T16456] __msan_chain_origin+0x50/0x90 [ 989.633973][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 989.639085][T16456] get_compat_msghdr+0x108/0x2b0 [ 989.644022][T16456] do_recvmmsg+0xdbb/0x22b0 [ 989.648526][T16456] __sys_recvmmsg+0x5dd/0x610 [ 989.653210][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.659395][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.665557][T16456] __do_fast_syscall_32+0x129/0x180 [ 989.670766][T16456] do_fast_syscall_32+0x6a/0xc0 [ 989.675621][T16456] do_SYSENTER_32+0x73/0x90 [ 989.680131][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.686443][T16456] [ 989.688769][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 989.695548][T16456] do_recvmmsg+0xbf/0x22b0 [ 989.699966][T16456] do_recvmmsg+0xbf/0x22b0 [ 991.141711][T16456] not chained 1050000 origins [ 991.146428][T16456] CPU: 1 PID: 16456 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 991.155092][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.165147][T16456] Call Trace: [ 991.168439][T16456] dump_stack+0x21c/0x280 [ 991.172780][T16456] kmsan_internal_chain_origin+0x6f/0x130 [ 991.178510][T16456] ? kfree_sensitive+0xda/0x120 [ 991.183371][T16456] ? kmsan_get_metadata+0x116/0x180 [ 991.188575][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 991.194137][T16456] ? __local_bh_enable_ip+0x97/0x1d0 [ 991.199430][T16456] ? kmsan_get_metadata+0x116/0x180 [ 991.204633][T16456] ? kmsan_set_origin_checked+0x95/0xf0 [ 991.210185][T16456] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 991.216257][T16456] ? _copy_from_user+0x201/0x310 [ 991.221228][T16456] ? kmsan_get_metadata+0x116/0x180 [ 991.226432][T16456] __msan_chain_origin+0x50/0x90 [ 991.231405][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.236534][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.241483][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.245997][T16456] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 991.251816][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 991.257122][T16456] ? kmsan_get_metadata+0x116/0x180 [ 991.262327][T16456] ? kmsan_internal_set_origin+0x75/0xb0 [ 991.267965][T16456] ? __msan_poison_alloca+0xf0/0x120 [ 991.273254][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 991.278015][T16456] ? __sys_recvmmsg+0xbb/0x610 [ 991.282783][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.287475][T16456] ? kmsan_get_metadata+0x116/0x180 [ 991.292685][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.298765][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.304929][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.310144][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.315004][T16456] do_SYSENTER_32+0x73/0x90 [ 991.319517][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.325850][T16456] RIP: 0023:0xf7fdc549 [ 991.329920][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 991.349524][T16456] RSP: 002b:00000000f55d60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 991.357939][T16456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 991.365912][T16456] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 991.373883][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 991.381852][T16456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 991.389841][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 991.397819][T16456] Uninit was stored to memory at: [ 991.402851][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.408571][T16456] __msan_chain_origin+0x50/0x90 [ 991.413511][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.418623][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.423561][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.428065][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.432754][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.438825][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.444984][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.450190][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.455042][T16456] do_SYSENTER_32+0x73/0x90 [ 991.459549][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.465864][T16456] [ 991.468185][T16456] Uninit was stored to memory at: [ 991.473215][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.478934][T16456] __msan_chain_origin+0x50/0x90 [ 991.483874][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.488987][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.493921][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.498424][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.503108][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.509183][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.515339][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.520538][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.525404][T16456] do_SYSENTER_32+0x73/0x90 [ 991.529915][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.536227][T16456] [ 991.538549][T16456] Uninit was stored to memory at: [ 991.543581][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.549302][T16456] __msan_chain_origin+0x50/0x90 [ 991.554242][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.559356][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.564321][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.568823][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.573502][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.579574][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.585734][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.590938][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.595790][T16456] do_SYSENTER_32+0x73/0x90 [ 991.600300][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.606613][T16456] [ 991.608937][T16456] Uninit was stored to memory at: [ 991.613972][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.619702][T16456] __msan_chain_origin+0x50/0x90 [ 991.624642][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.629763][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.634701][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.639203][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.643884][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.649950][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.656103][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.661305][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.666163][T16456] do_SYSENTER_32+0x73/0x90 [ 991.670671][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.676984][T16456] [ 991.679304][T16456] Uninit was stored to memory at: [ 991.684334][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.690060][T16456] __msan_chain_origin+0x50/0x90 [ 991.694999][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.700123][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.705064][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.709566][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.714250][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.720325][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.726481][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.731684][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.736536][T16456] do_SYSENTER_32+0x73/0x90 [ 991.741049][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.747360][T16456] [ 991.749681][T16456] Uninit was stored to memory at: [ 991.754711][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.760432][T16456] __msan_chain_origin+0x50/0x90 [ 991.765371][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.770488][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.775425][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.779925][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.784606][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.790677][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.796830][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.802030][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.806902][T16456] do_SYSENTER_32+0x73/0x90 [ 991.811409][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.817721][T16456] [ 991.820042][T16456] Uninit was stored to memory at: [ 991.825070][T16456] kmsan_internal_chain_origin+0xad/0x130 [ 991.830788][T16456] __msan_chain_origin+0x50/0x90 [ 991.835731][T16456] __get_compat_msghdr+0x6db/0x9d0 [ 991.840849][T16456] get_compat_msghdr+0x108/0x2b0 [ 991.845798][T16456] do_recvmmsg+0xdbb/0x22b0 [ 991.850298][T16456] __sys_recvmmsg+0x5dd/0x610 [ 991.854977][T16456] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.861047][T16456] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.867204][T16456] __do_fast_syscall_32+0x129/0x180 [ 991.872403][T16456] do_fast_syscall_32+0x6a/0xc0 [ 991.877256][T16456] do_SYSENTER_32+0x73/0x90 [ 991.881767][T16456] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.888082][T16456] [ 991.890407][T16456] Local variable ----msg_sys@do_recvmmsg created at: [ 991.897078][T16456] do_recvmmsg+0xbf/0x22b0 [ 991.901604][T16456] do_recvmmsg+0xbf/0x22b0 [ 993.367345][T16502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 09:04:38 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc6, 0xaf, 0x7c, 0x20, 0xbaf, 0xf7, 0x4703, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x0, 0xf4, 0x66, 0x45}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:04:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 09:04:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xef080000, 0x40}, [{}]}, 0x78) 09:04:38 executing program 3: clone3(&(0x7f0000000300)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:04:38 executing program 0: r0 = socket(0x22, 0x2, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 09:04:39 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x4}, 0x0, 0x0, 0x0) 09:04:39 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000029c0)={0x190, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x6b, 0xe, {@wo_ht={{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x104, 0x3, "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"}]}]}, 0x190}}, 0x0) 09:04:41 executing program 0: 09:04:41 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0xb76) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:04:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f0000000340)=ANY=[@ANYBLOB="6300004ea23a0b594fdf3508392dc889ed4315e5469e6ab45a983d73f426606c1a649a39a62965212dc5bccf1de85c77eb837cec9f02939cd9b39aba9231ca5fab9acf65748629decc03d6b8d3ae7189401062f0f6befa4e517e56b81327642ccb509ae17ce6ce00ff00004ef9"]) 09:04:42 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 997.863558][ T8738] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 998.634218][ T8738] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 998.643659][ T8738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.651727][ T8738] usb 1-1: Product: syz [ 998.656209][ T8738] usb 1-1: Manufacturer: syz [ 998.660874][ T8738] usb 1-1: SerialNumber: syz [ 999.037780][ T8738] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1000.743486][T16590] usb 1-1: USB disconnect, device number 6 09:04:50 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0xa789a000) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x0, @remote}}) [ 1011.648655][T16502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.284080][T16502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.558347][T16502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.893907][T16502] tipc: TX() has been purged, node left! [ 1015.070257][T16626] IPVS: ftp: loaded support on port[0] = 21 [ 1016.623260][T16502] device hsr_slave_0 left promiscuous mode [ 1016.651280][T16502] device hsr_slave_1 left promiscuous mode [ 1016.682211][ T9889] Bluetooth: hci4: command 0x0409 tx timeout [ 1016.682470][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.695994][T16502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.734759][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.742558][T16502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.784931][T16502] device bridge_slave_1 left promiscuous mode [ 1016.791642][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.825017][T16502] device bridge_slave_0 left promiscuous mode [ 1016.831745][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.885012][T16502] device veth1_macvtap left promiscuous mode [ 1016.891111][T16502] device veth0_macvtap left promiscuous mode [ 1016.897427][T16502] device veth1_vlan left promiscuous mode [ 1016.903379][T16502] device veth0_vlan left promiscuous mode [ 1018.762070][ T8733] Bluetooth: hci4: command 0x041b tx timeout [ 1020.842092][ T8733] Bluetooth: hci4: command 0x040f tx timeout [ 1021.453367][T16502] team0 (unregistering): Port device team_slave_1 removed [ 1021.479552][T16502] team0 (unregistering): Port device team_slave_0 removed [ 1021.508779][T16502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.533413][T16502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.671623][T16502] bond0 (unregistering): Released all slaves [ 1021.752440][T16626] chnl_net:caif_netlink_parms(): no params data found [ 1022.155250][T16626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.163583][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.173658][T16626] device bridge_slave_0 entered promiscuous mode [ 1022.237949][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.245483][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.255474][T16626] device bridge_slave_1 entered promiscuous mode [ 1022.337527][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.363759][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.457894][T16626] team0: Port device team_slave_0 added [ 1022.471700][T16626] team0: Port device team_slave_1 added [ 1022.575500][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.583432][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.611145][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.709064][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.716330][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.742580][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.921885][ T9889] Bluetooth: hci4: command 0x0419 tx timeout [ 1022.958883][T16626] device hsr_slave_0 entered promiscuous mode [ 1023.002960][T16626] device hsr_slave_1 entered promiscuous mode [ 1023.011519][T16626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.019431][T16626] Cannot create hsr debugfs directory [ 1023.607195][T16626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.648189][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.657501][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.680848][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.713037][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1023.722973][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1023.733544][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.740759][ T9211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.782466][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1023.791487][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1023.801363][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1023.812901][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.820108][ T9211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.829267][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1023.840083][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1023.870081][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1023.879677][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1023.932706][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1023.942550][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1023.952876][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1023.963997][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1023.973452][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1024.012304][T16626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.027519][T16626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1024.064280][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1024.073669][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1024.156759][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1024.164969][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1024.202877][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.448805][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1024.459526][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1024.543861][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1024.553346][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1024.580904][T16626] device veth0_vlan entered promiscuous mode [ 1024.600430][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1024.609730][T16590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1024.668309][T16626] device veth1_vlan entered promiscuous mode [ 1024.791298][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1024.800871][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1024.810236][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1024.819881][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1024.851390][T16626] device veth0_macvtap entered promiscuous mode [ 1024.873174][T16626] device veth1_macvtap entered promiscuous mode [ 1024.891943][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1024.901135][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1024.960690][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1024.971520][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.981580][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1024.992092][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.002055][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1025.012576][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.022545][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1025.033079][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.043083][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1025.053671][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.067711][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.080482][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1025.091192][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1025.138813][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1025.150859][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.162648][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1025.173228][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.183184][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1025.193759][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.203761][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1025.214371][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.224446][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1025.235064][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.249192][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.266065][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1025.276412][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1025.707793][T16503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.716052][T16503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.734126][T16510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1025.930753][T16502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.938769][T16502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.955397][T16510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1026.536785][T16510] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1026.781414][T16510] usb 5-1: Using ep0 maxpacket: 32 [ 1026.922907][T16510] usb 5-1: config 0 has an invalid interface number: 165 but max is 1 [ 1026.931954][T16510] usb 5-1: config 0 has no interface number 1 [ 1027.112260][T16510] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f7, bcdDevice=47.03 [ 1027.121572][T16510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.129684][T16510] usb 5-1: Product: syz [ 1027.134254][T16510] usb 5-1: Manufacturer: syz [ 1027.139018][T16510] usb 5-1: SerialNumber: syz [ 1027.183884][T16510] usbip-host 5-1: 5-1 is not in match_busid table... skip! 09:05:14 executing program 4: 09:05:14 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:14 executing program 0: 09:05:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf0000000, 0x40}, [{}]}, 0x78) 09:05:14 executing program 5: [ 1029.255249][ T8739] usb 5-1: USB disconnect, device number 6 09:05:14 executing program 0: 09:05:15 executing program 5: 09:05:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8000000, 0x40}, [{}]}, 0x78) 09:05:15 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:15 executing program 4: 09:05:15 executing program 0: 09:05:15 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xc) 09:05:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfc000000, 0x40}, [{}]}, 0x78) 09:05:15 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 09:05:15 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:16 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000500)={0x0}) 09:05:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') socket$inet_smc(0x2b, 0x1, 0x0) 09:05:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffff80, 0x40}, [{}]}, 0x78) 09:05:16 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x2, 0x0, 0x0) 09:05:16 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x3ec9afede7028934) 09:05:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000280)={0x26}) 09:05:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) 09:05:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffff9b, 0x40}, [{}]}, 0x78) 09:05:17 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 09:05:17 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 09:05:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100003e04, 0x40}, [{}]}, 0x78) 09:05:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) 09:05:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002180)={[{@logbsize={'logbsize'}}]}) 09:05:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002180)={[{@lazytime='lazytime'}, {@quota='quota'}, {@pqnoenforce='pqnoenforce'}, {@inode32='inode32'}, {@logbsize={'logbsize', 0x3d, [0x65, 0x0]}}]}) 09:05:18 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1033.451192][T16992] xfs: Bad value for 'logbsize' 09:05:18 executing program 4: socket(0x1d, 0x0, 0x1000) [ 1033.559542][T16992] xfs: Bad value for 'logbsize' 09:05:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x18000000000000, 0x40}, [{}]}, 0x78) 09:05:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 09:05:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={&(0x7f0000002100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x2}]}, {0x0, [0x0]}}, &(0x7f0000002140)=""/217, 0x27, 0xd9, 0x1}, 0x20) 09:05:19 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:19 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 09:05:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf0000000000000, 0x40}, [{}]}, 0x78) 09:05:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffe11}) 09:05:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x301, 0x0) 09:05:20 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) 09:05:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000000000000, 0x40}, [{}]}, 0x78) 09:05:20 executing program 0: socket(0xa, 0x0, 0xfffffffe) 09:05:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x4) 09:05:20 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x10, 0x0) 09:05:21 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x180000000000000, 0x40}, [{}]}, 0x78) 09:05:21 executing program 0: add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 09:05:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:05:21 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 09:05:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) 09:05:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200000000000000, 0x40}, [{}]}, 0x78) 09:05:22 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:22 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:05:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) 09:05:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4604, &(0x7f0000000080)) 09:05:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x43e000001000000, 0x40}, [{}]}, 0x78) 09:05:22 executing program 5: getgid() r0 = syz_io_uring_setup(0x13ef, &(0x7f0000000000)={0x0, 0x7586, 0x0, 0x1, 0x364}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_complete(r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 09:05:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 09:05:22 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0xc0045878, 0x0) 09:05:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x700000000000000, 0x40}, [{}]}, 0x78) 09:05:23 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x8803, 0x0) 09:05:23 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "89e5d443"}}) 09:05:23 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:23 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x900, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 09:05:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800000000000000, 0x40}, [{}]}, 0x78) 09:05:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x38) 09:05:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:05:24 executing program 0: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000) 09:05:24 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x900000000000000, 0x40}, [{}]}, 0x78) 09:05:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={0x0, &(0x7f0000002140)=""/217, 0x0, 0xd9}, 0x20) 09:05:24 executing program 4: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8e", 0x20000201, 0xfffffffffffffffb) 09:05:24 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x0, &(0x7f0000000940)={[], [{@euid_gt={'euid>'}}]}) 09:05:25 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa00000000000000, 0x40}, [{}]}, 0x78) 09:05:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b280)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000b240)={&(0x7f000000b2c0)=ANY=[@ANYBLOB="1831", @ANYRES32=0x0, @ANYRES32=0x0], 0x3118}}, 0x0) 09:05:25 executing program 4: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x14ac3, 0x0) [ 1040.516992][T17167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17167 comm=syz-executor.5 09:05:26 executing program 3: socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:26 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xf) 09:05:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb00000000000000, 0x40}, [{}]}, 0x78) 09:05:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 09:05:26 executing program 0: openat$nullb(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 09:05:26 executing program 3: socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:26 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 09:05:26 executing program 4: 09:05:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc00000000000000, 0x40}, [{}]}, 0x78) 09:05:27 executing program 0: socket(0x22, 0x0, 0xb87) 09:05:27 executing program 3: socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:27 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2, 0x0) write$fb(r0, 0x0, 0x0) 09:05:27 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0) 09:05:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)) 09:05:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd00000000000000, 0x40}, [{}]}, 0x78) 09:05:27 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x36}, 0x8}}, 0x24) 09:05:28 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 09:05:28 executing program 0: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) 09:05:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe00000000000000, 0x40}, [{}]}, 0x78) 09:05:28 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:28 executing program 5: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) epoll_create1(0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001340)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001200)=[{0x0}], 0x1}, 0x0) 09:05:29 executing program 0: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000180), 0x8) 09:05:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf00000000000000, 0x40}, [{}]}, 0x78) 09:05:29 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000300)=""/4096) 09:05:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0xc0205649, &(0x7f0000000080)) 09:05:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1800000000000000, 0x40}, [{}]}, 0x78) 09:05:30 executing program 5: syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) 09:05:30 executing program 3: r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:30 executing program 4: socket(0x15, 0x5, 0x400000) 09:05:30 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="d7", 0x1, 0xffffffffffffffff) 09:05:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a00000000000000, 0x40}, [{}]}, 0x78) 09:05:30 executing program 4: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x2710}) 09:05:30 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 09:05:30 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 09:05:31 executing program 3: r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1b00000000000000, 0x40}, [{}]}, 0x78) 09:05:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@flushpolicy={0x10, 0x1d, 0x70d}, 0x10}}, 0x0) 09:05:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x0, "6cf449a6a9ccfbd33d53693445e5d3bb63216ea23739513dbc94502aea202b27"}) [ 1046.229758][ T9889] usb 6-1: new high-speed USB device number 8 using dummy_hcd 09:05:31 executing program 3: r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x40}, [{}]}, 0x78) [ 1046.489126][ T9889] usb 6-1: Using ep0 maxpacket: 32 09:05:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x81, 0x2}) [ 1046.609811][ T9889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.620930][ T9889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.630983][ T9889] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 09:05:32 executing program 0: shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) [ 1047.009850][ T9889] usb 6-1: string descriptor 0 read error: -22 [ 1047.016338][ T9889] usb 6-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 1047.025699][ T9889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:05:32 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f00000000000000, 0x40}, [{}]}, 0x78) [ 1047.248565][ T9889] usbip-host 6-1: 6-1 is not in match_busid table... skip! 09:05:34 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, 0x0) [ 1049.022522][T16510] usb 6-1: USB disconnect, device number 8 09:05:34 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil) 09:05:34 executing program 4: kexec_load(0x0, 0x1, &(0x7f0000002300)=[{0x0}], 0x1) 09:05:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000, 0x40}, [{}]}, 0x78) 09:05:34 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:34 executing program 0: clock_gettime(0xb, &(0x7f0000000340)) 09:05:35 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0xc0189436, &(0x7f0000000080)) 09:05:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80ffffff00000000, 0x40}, [{}]}, 0x78) 09:05:35 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:35 executing program 5: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) 09:05:35 executing program 0: syz_io_uring_setup(0x2103, &(0x7f0000000180)={0x0, 0xd35b, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) 09:05:35 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x618202, 0x0) 09:05:35 executing program 5: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0) 09:05:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9bffffff00000000, 0x40}, [{}]}, 0x78) 09:05:35 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:36 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x670f10a0b5b5b613) 09:05:36 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 09:05:36 executing program 5: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000040)) socketpair(0x36, 0x0, 0x1000, &(0x7f0000000300)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[{&(0x7f00000005c0)="9dbaae1db9a205b651", 0x9, 0x8}], 0x0, 0x0) 09:05:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc000000000000000, 0x40}, [{}]}, 0x78) 09:05:36 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000, 0x7, &(0x7f0000ffb000/0x5000)=nil) 09:05:36 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe000000000000000, 0x40}, [{}]}, 0x78) 09:05:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000001c0)) 09:05:37 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:05:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 09:05:37 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xef08000000000000, 0x40}, [{}]}, 0x78) 09:05:37 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 09:05:37 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x301, &(0x7f0000000040)) 09:05:38 executing program 5: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x8001, 0x52, 0x0) 09:05:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)) 09:05:38 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0xc0505609, &(0x7f0000000080)) 09:05:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf000000000000000, 0x40}, [{}]}, 0x78) 09:05:38 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:38 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x27}}, 0x24) 09:05:38 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) 09:05:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf800000000000000, 0x40}, [{}]}, 0x78) 09:05:39 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x80081270, 0x0) 09:05:39 executing program 5: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) 09:05:39 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x400448c9, &(0x7f0000000080)) 09:05:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfc00000000000000, 0x40}, [{}]}, 0x78) 09:05:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7f, 0x2}) 09:05:40 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x601, @multicast2}}, 0x24) 09:05:40 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0xfff, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) 09:05:40 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x7b) 09:05:40 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x56, 0x86000) 09:05:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x40}, [{}]}, 0x78) 09:05:41 executing program 4: epoll_create(0x584a) 09:05:41 executing program 0: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='a', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r0}, 0x0, 0x0, 0x0) 09:05:41 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 09:05:41 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, [{}]}, 0x78) 09:05:41 executing program 4: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 09:05:41 executing program 5: clock_gettime(0xeac5c9aae8bf1d1b, 0x0) 09:05:42 executing program 0: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 09:05:42 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, [{}]}, 0x78) 09:05:42 executing program 4: syz_io_uring_setup(0x6f40, &(0x7f0000000180), &(0x7f0000250000/0x4000)=nil, &(0x7f0000188000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 09:05:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000300)) 09:05:42 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x10161, 0x0, 0x0) 09:05:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}, [{}]}, 0x78) 09:05:43 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9960cf24"}}) 09:05:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x2}) 09:05:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7f, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) 09:05:43 executing program 4: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0}) 09:05:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}]}, 0x78) 09:05:43 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:44 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) 09:05:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)) 09:05:44 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80, 0x0) 09:05:44 executing program 5: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x10001}, 0x0, 0x0) 09:05:44 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb}, [{}]}, 0x78) 09:05:45 executing program 0: r0 = syz_io_uring_setup(0x13ef, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r1, 0x1) 09:05:45 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x105080, 0x0) 09:05:45 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010101}}, 0x24) 09:05:45 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:45 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2030, 0xffffffffffffffff, 0x0) 09:05:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 09:05:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x4020940d, 0x0) 09:05:46 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc}, [{}]}, 0x78) 09:05:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)) 09:05:46 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x0, 0x0) connect$ax25(r0, 0x0, 0x0) 09:05:46 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 09:05:47 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x3ec9afede7028934) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 09:05:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:05:47 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, 0x0) 09:05:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xd}, [{}]}, 0x78) 09:05:47 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) 09:05:47 executing program 4: syz_io_uring_setup(0x956, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) 09:05:47 executing program 5: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) 09:05:47 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe}, [{}]}, 0x78) 09:05:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:05:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b2c0)=ANY=[@ANYBLOB="18"], 0x3118}}, 0x0) 09:05:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6c9e884"}, 0x0, 0x0, @fd}) 09:05:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xf}, [{}]}, 0x78) 09:05:48 executing program 3: syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1063.503822][T17691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17691 comm=syz-executor.4 09:05:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0xc0684608, 0x0) 09:05:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x18}, [{}]}, 0x78) 09:05:49 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x107182, 0x0) 09:05:49 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) 09:05:49 executing program 3: syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:49 executing program 0: syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x8, 0x86000) 09:05:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1a}, [{}]}, 0x78) 09:05:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0xc0285629, &(0x7f0000000080)) 09:05:49 executing program 5: syz_io_uring_setup(0x22e4, &(0x7f0000000100)={0x0, 0xfb98, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 09:05:50 executing program 3: syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:05:50 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 09:05:50 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0xffffffffffffffff) 09:05:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1b}, [{}]}, 0x78) 09:05:50 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 09:05:51 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:05:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001340)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001200)=[{0x0}, {0x0}], 0x2}, 0x0) [ 1065.838174][ T8737] usb 1-1: new high-speed USB device number 7 using dummy_hcd 09:05:51 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x80000000}, 0x8) 09:05:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3b}, [{}]}, 0x78) [ 1066.117006][ T8737] usb 1-1: Using ep0 maxpacket: 32 [ 1066.237775][ T8737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.249149][ T8737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.259342][ T8737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1066.270376][ T8737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 09:05:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 09:05:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c}, [{}]}, 0x78) 09:05:51 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1066.617411][ T8737] usb 1-1: string descriptor 0 read error: -22 [ 1066.623877][ T8737] usb 1-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 1066.633438][ T8737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.735537][ T8737] usbip-host 1-1: 1-1 is not in match_busid table... skip! 09:05:52 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80082, 0x0) 09:05:53 executing program 0: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) 09:05:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3d}, [{}]}, 0x78) 09:05:53 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 09:05:53 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:05:53 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000580)=',$\x00', 0x3) [ 1068.584451][ T9211] usb 1-1: USB disconnect, device number 7 09:05:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140), 0x0}) 09:05:54 executing program 4: shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 09:05:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3e}, [{}]}, 0x78) 09:05:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x2, 0x0) 09:05:54 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x541b, 0x0) 09:05:54 executing program 4: r0 = socket(0x2, 0xa, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 09:05:54 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 09:05:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002180)={[{@logbsize={'logbsize', 0x3d, [0x67]}}]}) 09:05:55 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f00000014c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) 09:05:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41}, [{}]}, 0x78) 09:05:55 executing program 4: mremap(&(0x7f0000938000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00009b6000/0x2000)=nil) [ 1070.230735][T17834] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 09:05:55 executing program 5: pipe2(&(0x7f0000002d00)={0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/197, 0xc5) 09:05:55 executing program 0: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/71) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000938000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00009b6000/0x2000)=nil) 09:05:55 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x3e}) 09:05:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x42}, [{}]}, 0x78) 09:05:56 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, r0, 0x0) 09:05:56 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x300, 0x0, 0x0) 09:05:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x43}, [{}]}, 0x78) 09:05:56 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0), 0xa1400, &(0x7f00000010c0)=ANY=[]) 09:05:56 executing program 4: pkey_mprotect(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 09:05:57 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x1011, r0, 0x82000000) 09:05:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002180)={[{@lazytime='lazytime'}, {@quota='quota'}, {@pqnoenforce='pqnoenforce'}, {@inode32='inode32'}, {@logbsize={'logbsize', 0x3d, [0x65]}}]}) 09:05:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x44}, [{}]}, 0x78) 09:05:57 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x3a842, 0x0) 09:05:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x40081271, &(0x7f0000000040)) 09:05:57 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x0}) 09:05:57 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) 09:05:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x45}, [{}]}, 0x78) 09:05:57 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x2, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 09:05:58 executing program 0: socket(0x18, 0x0, 0x4) 09:05:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8f6a4fe2"}, 0x0, 0x0, @planes=0x0, 0x1}) [ 1073.125873][ T9211] usb 4-1: new high-speed USB device number 19 using dummy_hcd 09:05:58 executing program 4: pipe2(&(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, 0x0, 0x0) 09:05:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x46}, [{}]}, 0x78) 09:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) [ 1073.396552][ T9211] usb 4-1: Using ep0 maxpacket: 32 [ 1073.516437][ T9211] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:05:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x41) [ 1073.706792][ T9211] usb 4-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 1073.717702][ T9211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.726001][ T9211] usb 4-1: Product: syz [ 1073.730293][ T9211] usb 4-1: SerialNumber: syz [ 1073.860533][ T9211] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:05:59 executing program 4: socket(0xa, 0x2, 0x9) 09:05:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x47}, [{}]}, 0x78) 09:05:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 09:06:01 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @multicast2}}, 0x24) 09:06:01 executing program 5: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 09:06:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x48}, [{}]}, 0x78) 09:06:01 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 09:06:01 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0942f3e7"}}) [ 1075.860891][ T9211] usb 4-1: USB disconnect, device number 19 09:06:01 executing program 4: syz_io_uring_setup(0x6f40, &(0x7f0000000180)={0x0, 0x40000c61, 0x8}, &(0x7f0000250000/0x4000)=nil, &(0x7f0000188000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 09:06:01 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x24) 09:06:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4a}, [{}]}, 0x78) 09:06:01 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x1e0, 0x800}) 09:06:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "323c798c"}}) 09:06:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b2c0)=ANY=[], 0x3118}}, 0x0) 09:06:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4b}, [{}]}, 0x78) 09:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x80805659, 0x0) 09:06:03 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:06:03 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000938000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00009b6000/0x2000)=nil) 09:06:03 executing program 0: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) 09:06:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4c}, [{}]}, 0x78) 09:06:03 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0) 09:06:03 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x0) 09:06:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="090300000000000000003200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 09:06:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4d}, [{}]}, 0x78) 09:06:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffd2a, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "94a25c15"}}) 09:06:04 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x12, r0, 0x10000000) 09:06:04 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 09:06:04 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f00000000c0)="e64bcc40", 0x4, 0x4000, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @local}}, 0x17) 09:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x541b, 0x0) 09:06:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x50}, [{}]}, 0x78) 09:06:04 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0x800}}, 0x24) 09:06:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000280)) 09:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 09:06:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x58}, [{}]}, 0x78) 09:06:05 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:06:05 executing program 5: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xffffffff, 0x185500) 09:06:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x0, 0x0, "aa0d040c998a17b76f7e730b243da0f744b5c9e9f25adefc"}) 09:06:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x80081270, &(0x7f0000000040)) 09:06:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={&(0x7f0000002100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}}, &(0x7f0000002140)=""/217, 0x26, 0xd9, 0x1}, 0x20) 09:06:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5b}, [{}]}, 0x78) 09:06:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 09:06:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:06:06 executing program 3: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0xffffffffffffff95) 09:06:06 executing program 0: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 09:06:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5d}, [{}]}, 0x78) 09:06:06 executing program 5: 09:06:06 executing program 4: 09:06:07 executing program 3: 09:06:07 executing program 0: 09:06:07 executing program 5: 09:06:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x60}, [{}]}, 0x78) 09:06:07 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) 09:06:07 executing program 3: 09:06:07 executing program 0: 09:06:07 executing program 5: 09:06:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x61}, [{}]}, 0x78) 09:06:08 executing program 3: [ 1082.924755][T16590] usb 5-1: new high-speed USB device number 7 using dummy_hcd 09:06:08 executing program 0: 09:06:08 executing program 5: [ 1083.167227][T16590] usb 5-1: Using ep0 maxpacket: 32 09:06:08 executing program 3: [ 1083.285663][T16590] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 09:06:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x63}, [{}]}, 0x78) [ 1083.455424][T16590] usb 5-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 1083.464794][T16590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.472921][T16590] usb 5-1: Product: syz [ 1083.477644][T16590] usb 5-1: Manufacturer: syz [ 1083.482379][T16590] usb 5-1: SerialNumber: syz 09:06:08 executing program 0: [ 1083.633350][T16590] usbip-host 5-1: 5-1 is not in match_busid table... skip! 09:06:09 executing program 5: 09:06:11 executing program 4: 09:06:11 executing program 3: 09:06:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x64}, [{}]}, 0x78) 09:06:11 executing program 0: 09:06:11 executing program 5: [ 1085.685619][ T9211] usb 5-1: USB disconnect, device number 7 09:06:11 executing program 3: 09:06:11 executing program 0: 09:06:11 executing program 5: 09:06:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x65}, [{}]}, 0x78) 09:06:11 executing program 4: 09:06:11 executing program 0: 09:06:11 executing program 5: 09:06:11 executing program 3: 09:06:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x66}, [{}]}, 0x78) 09:06:12 executing program 4: 09:06:12 executing program 3: 09:06:12 executing program 0: 09:06:12 executing program 5: 09:06:12 executing program 4: 09:06:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x67}, [{}]}, 0x78) 09:06:13 executing program 3: 09:06:13 executing program 0: 09:06:13 executing program 5: 09:06:13 executing program 4: 09:06:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x68}, [{}]}, 0x78) 09:06:13 executing program 3: 09:06:13 executing program 0: 09:06:13 executing program 5: 09:06:13 executing program 4: 09:06:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6c}, [{}]}, 0x78) 09:06:14 executing program 0: 09:06:14 executing program 3: 09:06:14 executing program 5: 09:06:14 executing program 4: 09:06:14 executing program 0: 09:06:14 executing program 5: 09:06:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6d}, [{}]}, 0x78) 09:06:15 executing program 3: 09:06:15 executing program 4: 09:06:15 executing program 3: 09:06:15 executing program 0: 09:06:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e}, [{}]}, 0x78) 09:06:15 executing program 5: 09:06:15 executing program 4: 09:06:16 executing program 3: 09:06:16 executing program 0: 09:06:16 executing program 5: 09:06:16 executing program 4: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe91a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:06:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x71}, [{}]}, 0x78) 09:06:16 executing program 0: 09:06:16 executing program 3: 09:06:17 executing program 4: 09:06:17 executing program 5: 09:06:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) 09:06:17 executing program 0: 09:06:17 executing program 3: 09:06:17 executing program 5: 09:06:17 executing program 4: 09:06:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x73}, [{}]}, 0x78) 09:06:18 executing program 0: 09:06:18 executing program 3: 09:06:18 executing program 4: 09:06:18 executing program 5: 09:06:18 executing program 0: 09:06:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x75}, [{}]}, 0x78) 09:06:19 executing program 3: 09:06:19 executing program 4: 09:06:19 executing program 5: 09:06:19 executing program 0: 09:06:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, [{}]}, 0x78) 09:06:19 executing program 3: 09:06:19 executing program 4: 09:06:19 executing program 5: 09:06:20 executing program 3: 09:06:20 executing program 0: 09:06:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe0}, [{}]}, 0x78) 09:06:20 executing program 0: 09:06:21 executing program 5: 09:06:21 executing program 3: 09:06:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xf0}, [{}]}, 0x78) 09:06:21 executing program 4: 09:06:21 executing program 0: 09:06:21 executing program 3: 09:06:21 executing program 5: 09:06:21 executing program 4: 09:06:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xf8}, [{}]}, 0x78) 09:06:22 executing program 0: 09:06:22 executing program 3: 09:06:22 executing program 5: 09:06:22 executing program 4: 09:06:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfc}, [{}]}, 0x78) 09:06:22 executing program 0: 09:06:22 executing program 3: 09:06:22 executing program 4: 09:06:22 executing program 5: 09:06:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, [{}]}, 0x78) 09:06:23 executing program 5: 09:06:23 executing program 3: 09:06:23 executing program 0: 09:06:23 executing program 4: 09:06:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffff9b}, [{}]}, 0x78) 09:06:24 executing program 5: 09:06:24 executing program 0: 09:06:24 executing program 3: 09:06:24 executing program 4: 09:06:24 executing program 5: 09:06:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}, [{}]}, 0x78) 09:06:25 executing program 0: 09:06:25 executing program 3: 09:06:25 executing program 4: 09:06:25 executing program 5: 09:06:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7}, [{}]}, 0x78) 09:06:25 executing program 0: 09:06:25 executing program 3: 09:06:26 executing program 4: 09:06:26 executing program 5: 09:06:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}, [{}]}, 0x78) 09:06:26 executing program 0: 09:06:26 executing program 3: 09:06:26 executing program 4: 09:06:26 executing program 5: 09:06:27 executing program 0: 09:06:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9}, [{}]}, 0x78) 09:06:27 executing program 3: 09:06:27 executing program 4: 09:06:27 executing program 5: 09:06:27 executing program 0: 09:06:27 executing program 4: 09:06:27 executing program 3: 09:06:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa}, [{}]}, 0x78) 09:06:28 executing program 1: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRES64], 0x190}}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000006acc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006bcc0)={{0x0, 0x0, 0xff, 0x8, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x200, 0xfffffe00, 0x0, 0x7, 0x2000000000, 0x0, 0xfffffffffffffffa}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f000006ccc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006cec0)={0x200, [{}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "82d8123507b253"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000006dec0)={{0x0, 0x20c7, 0xfffffffffffff800, 0xc8, 0xa2c3, 0x0, 0xc5, 0xc858, 0x401, 0x6, 0x8, 0x8000, 0x7, 0x1, 0x401}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000006df80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "b8bdb4aebf0806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000006ef80)={{0x0, 0x7, 0x7, 0x9, 0x2, 0x92e, 0x6bfc, 0xfff, 0x6, 0x7, 0x6, 0x400, 0x1547, 0x9, 0xa2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000006ff80)={{0x0, 0x7, 0xcb0, 0x0, 0x7, 0x4, 0x0, 0x9, 0x9, 0x8000, 0x3, 0x20, 0x1f, 0x1, 0x713551d5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000070f80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000071180)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xae, "7b84a68548235f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000072180)={{0x0, 0x9, 0x8, 0x2, 0x82fc, 0x7, 0x1, 0x7fff, 0x8001, 0x3, 0x5, 0xda, 0x6, 0x1f, 0xffffffff97d3c425}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000072200)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {r7}, {}, {}, {}, {r8, r9}, {r10}, {r11}, {r12}, {}, {0x0, r13}, {}, {r14}], 0x80, "6dad31c8dfb961"}) 09:06:28 executing program 5: 09:06:28 executing program 0: 09:06:28 executing program 3: 09:06:28 executing program 4: 09:06:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb}, [{}]}, 0x78) 09:06:28 executing program 5: 09:06:29 executing program 0: 09:06:29 executing program 3: 09:06:29 executing program 4: 09:06:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc}, [{}]}, 0x78) 09:06:29 executing program 5: 09:06:29 executing program 1: 09:06:29 executing program 0: 09:06:29 executing program 4: 09:06:29 executing program 3: 09:06:29 executing program 5: 09:06:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd}, [{}]}, 0x78) 09:06:30 executing program 1: 09:06:30 executing program 0: 09:06:30 executing program 4: 09:06:30 executing program 3: 09:06:30 executing program 5: 09:06:30 executing program 1: 09:06:30 executing program 0: 09:06:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe}, [{}]}, 0x78) 09:06:30 executing program 3: 09:06:31 executing program 4: 09:06:31 executing program 5: 09:06:31 executing program 1: 09:06:31 executing program 0: 09:06:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, [{}]}, 0x78) 09:06:31 executing program 3: 09:06:31 executing program 4: 09:06:31 executing program 5: 09:06:31 executing program 1: 09:06:31 executing program 0: 09:06:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18}, [{}]}, 0x78) 09:06:32 executing program 3: 09:06:32 executing program 4: 09:06:32 executing program 5: 09:06:32 executing program 1: 09:06:32 executing program 0: 09:06:32 executing program 3: 09:06:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a}, [{}]}, 0x78) 09:06:32 executing program 4: 09:06:33 executing program 5: 09:06:33 executing program 1: 09:06:33 executing program 0: 09:06:33 executing program 3: 09:06:33 executing program 4: 09:06:33 executing program 5: 09:06:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b}, [{}]}, 0x78) 09:06:33 executing program 1: 09:06:33 executing program 0: 09:06:34 executing program 3: 09:06:34 executing program 5: 09:06:34 executing program 4: 09:06:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc0}, [{}]}, 0x78) 09:06:34 executing program 1: 09:06:34 executing program 0: 09:06:34 executing program 5: 09:06:34 executing program 3: 09:06:34 executing program 4: 09:06:34 executing program 1: 09:06:35 executing program 0: 09:06:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe0}, [{}]}, 0x78) 09:06:35 executing program 5: 09:06:35 executing program 3: 09:06:35 executing program 4: 09:06:35 executing program 1: 09:06:35 executing program 0: 09:06:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0}, [{}]}, 0x78) 09:06:35 executing program 3: 09:06:36 executing program 5: 09:06:36 executing program 4: 09:06:36 executing program 1: 09:06:36 executing program 0: 09:06:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf8}, [{}]}, 0x78) 09:06:36 executing program 3: 09:06:36 executing program 5: 09:06:36 executing program 4: 09:06:36 executing program 1: 09:06:36 executing program 0: 09:06:37 executing program 3: 09:06:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc}, [{}]}, 0x78) 09:06:37 executing program 5: 09:06:37 executing program 4: 09:06:37 executing program 1: 09:06:37 executing program 0: 09:06:37 executing program 3: 09:06:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180}, [{}]}, 0x78) 09:06:37 executing program 5: 09:06:37 executing program 1: 09:06:37 executing program 4: 09:06:38 executing program 0: 09:06:38 executing program 3: 09:06:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700}, [{}]}, 0x78) 09:06:38 executing program 5: 09:06:38 executing program 1: 09:06:38 executing program 4: 09:06:38 executing program 0: 09:06:38 executing program 3: 09:06:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8ef}, [{}]}, 0x78) 09:06:39 executing program 5: 09:06:39 executing program 4: 09:06:39 executing program 1: 09:06:39 executing program 0: 09:06:39 executing program 3: 09:06:39 executing program 5: 09:06:39 executing program 4: 09:06:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x900}, [{}]}, 0x78) 09:06:39 executing program 1: 09:06:40 executing program 0: 09:06:40 executing program 3: 09:06:40 executing program 5: 09:06:40 executing program 4: 09:06:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa00}, [{}]}, 0x78) 09:06:40 executing program 1: 09:06:40 executing program 0: 09:06:40 executing program 3: 09:06:40 executing program 5: 09:06:40 executing program 4: 09:06:41 executing program 1: 09:06:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb00}, [{}]}, 0x78) 09:06:41 executing program 0: 09:06:42 executing program 3: 09:06:42 executing program 1: 09:06:42 executing program 5: 09:06:42 executing program 4: 09:06:42 executing program 0: 09:06:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc00}, [{}]}, 0x78) 09:06:42 executing program 1: 09:06:42 executing program 3: 09:06:42 executing program 5: 09:06:42 executing program 4: 09:06:42 executing program 0: 09:06:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd00}, [{}]}, 0x78) 09:06:43 executing program 1: 09:06:43 executing program 3: 09:06:43 executing program 5: 09:06:43 executing program 4: 09:06:43 executing program 0: 09:06:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe00}, [{}]}, 0x78) 09:06:43 executing program 3: 09:06:43 executing program 1: 09:06:43 executing program 5: 09:06:44 executing program 0: 09:06:44 executing program 4: 09:06:44 executing program 1: 09:06:44 executing program 5: 09:06:44 executing program 3: 09:06:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00}, [{}]}, 0x78) 09:06:44 executing program 0: 09:06:44 executing program 4: 09:06:45 executing program 1: 09:06:45 executing program 3: 09:06:45 executing program 5: 09:06:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800}, [{}]}, 0x78) 09:06:45 executing program 0: 09:06:45 executing program 4: 09:06:45 executing program 1: 09:06:45 executing program 5: 09:06:45 executing program 3: 09:06:45 executing program 0: 09:06:45 executing program 4: 09:06:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a00}, [{}]}, 0x78) 09:06:46 executing program 1: 09:06:46 executing program 5: 09:06:46 executing program 0: 09:06:46 executing program 3: 09:06:46 executing program 4: 09:06:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b00}, [{}]}, 0x78) 09:06:46 executing program 1: 09:06:46 executing program 5: 09:06:47 executing program 0: 09:06:47 executing program 3: 09:06:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f00}, [{}]}, 0x78) 09:06:47 executing program 4: 09:06:47 executing program 1: 09:06:47 executing program 5: 09:06:47 executing program 3: 09:06:47 executing program 0: 09:06:47 executing program 4: 09:06:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f00}, [{}]}, 0x78) 09:06:48 executing program 1: 09:06:48 executing program 5: 09:06:48 executing program 3: 09:06:48 executing program 0: 09:06:48 executing program 4: 09:06:48 executing program 1: 09:06:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc000}, [{}]}, 0x78) 09:06:48 executing program 5: 09:06:48 executing program 3: 09:06:48 executing program 0: 09:06:49 executing program 4: 09:06:49 executing program 1: 09:06:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe000}, [{}]}, 0x78) 09:06:49 executing program 5: 09:06:49 executing program 3: 09:06:49 executing program 0: 09:06:49 executing program 4: 09:06:49 executing program 1: 09:06:50 executing program 5: 09:06:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xef08}, [{}]}, 0x78) 09:06:50 executing program 3: 09:06:50 executing program 0: 09:06:50 executing program 4: 09:06:50 executing program 1: 09:06:50 executing program 5: 09:06:50 executing program 3: 09:06:50 executing program 0: 09:06:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf000}, [{}]}, 0x78) 09:06:50 executing program 4: 09:06:50 executing program 1: 09:06:51 executing program 5: 09:06:51 executing program 3: 09:06:51 executing program 0: 09:06:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf800}, [{}]}, 0x78) 09:06:51 executing program 4: 09:06:51 executing program 1: 09:06:51 executing program 3: 09:06:51 executing program 5: 09:06:51 executing program 0: 09:06:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc00}, [{}]}, 0x78) 09:06:52 executing program 1: 09:06:52 executing program 4: 09:06:52 executing program 5: 09:06:52 executing program 0: 09:06:52 executing program 3: 09:06:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180000}, [{}]}, 0x78) 09:06:52 executing program 1: 09:06:52 executing program 4: 09:06:52 executing program 5: 09:06:53 executing program 0: 09:06:53 executing program 3: 09:06:53 executing program 1: 09:06:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00000}, [{}]}, 0x78) 09:06:53 executing program 4: 09:06:53 executing program 5: 09:06:53 executing program 0: 09:06:53 executing program 3: 09:06:54 executing program 1: 09:06:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1000000}, [{}]}, 0x78) 09:06:54 executing program 5: 09:06:54 executing program 3: 09:06:54 executing program 4: 09:06:54 executing program 0: 09:06:54 executing program 1: 09:06:54 executing program 5: 09:06:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800000}, [{}]}, 0x78) 09:06:54 executing program 3: 09:06:54 executing program 0: 09:06:54 executing program 4: 09:06:55 executing program 1: 09:06:55 executing program 5: 09:06:55 executing program 0: 09:06:55 executing program 3: 09:06:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2000000}, [{}]}, 0x78) 09:06:55 executing program 4: 09:06:55 executing program 1: 09:06:55 executing program 5: 09:06:56 executing program 0: 09:06:56 executing program 3: 09:06:56 executing program 4: 09:06:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7000000}, [{}]}, 0x78) 09:06:56 executing program 1: 09:06:56 executing program 5: 09:06:56 executing program 0: 09:06:56 executing program 3: 09:06:56 executing program 4: 09:06:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8000000}, [{}]}, 0x78) 09:06:57 executing program 1: 09:06:57 executing program 5: 09:06:57 executing program 3: 09:06:57 executing program 4: 09:06:57 executing program 0: 09:06:57 executing program 1: 09:06:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9000000}, [{}]}, 0x78) 09:06:57 executing program 3: 09:06:57 executing program 5: 09:06:57 executing program 0: 09:06:58 executing program 4: 09:06:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa000000}, [{}]}, 0x78) 09:06:58 executing program 1: 09:06:58 executing program 0: 09:06:58 executing program 5: 09:06:58 executing program 3: 09:06:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb000000}, [{}]}, 0x78) 09:06:58 executing program 4: 09:06:58 executing program 1: 09:06:59 executing program 0: 09:06:59 executing program 5: 09:06:59 executing program 3: 09:06:59 executing program 1: 09:06:59 executing program 4: 09:06:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc000000}, [{}]}, 0x78) 09:06:59 executing program 5: 09:06:59 executing program 3: 09:06:59 executing program 0: 09:07:00 executing program 1: 09:07:00 executing program 4: 09:07:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd000000}, [{}]}, 0x78) 09:07:00 executing program 5: 09:07:00 executing program 3: 09:07:00 executing program 0: 09:07:00 executing program 1: 09:07:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe000000}, [{}]}, 0x78) 09:07:01 executing program 4: 09:07:01 executing program 1: 09:07:01 executing program 3: 09:07:01 executing program 5: 09:07:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf000000}, [{}]}, 0x78) 09:07:01 executing program 0: 09:07:01 executing program 1: 09:07:01 executing program 3: 09:07:02 executing program 4: 09:07:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18000000}, [{}]}, 0x78) 09:07:02 executing program 5: 09:07:02 executing program 0: 09:07:02 executing program 1: 09:07:02 executing program 3: 09:07:02 executing program 4: 09:07:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a000000}, [{}]}, 0x78) 09:07:02 executing program 0: 09:07:02 executing program 5: 09:07:02 executing program 1: [ 1137.709301][ T8733] Bluetooth: hci4: command 0x0406 tx timeout 09:07:03 executing program 3: 09:07:03 executing program 4: 09:07:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b000000}, [{}]}, 0x78) 09:07:03 executing program 0: 09:07:03 executing program 5: 09:07:03 executing program 1: 09:07:03 executing program 3: 09:07:03 executing program 0: 09:07:03 executing program 5: 09:07:04 executing program 4: 09:07:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f000000}, [{}]}, 0x78) 09:07:04 executing program 1: 09:07:04 executing program 3: 09:07:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000024001d0f000000cd0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xf1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_RATE={0x6}]}, 0x60}}, 0x0) 09:07:04 executing program 0: add_key$user(&(0x7f0000000100)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 09:07:04 executing program 4: 09:07:04 executing program 1: 09:07:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f000000}, [{}]}, 0x78) [ 1139.568033][T18784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:07:05 executing program 3: [ 1139.725580][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:07:05 executing program 0: 09:07:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) 09:07:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, 0x0, 0x0) 09:07:05 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3, 0x18, 0x0) 09:07:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 09:07:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80ffffff}, [{}]}, 0x78) 09:07:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}) 09:07:05 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x64342) 09:07:05 executing program 5: pipe2(&(0x7f0000004000), 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) 09:07:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x17, 0x0, 0x0) 09:07:06 executing program 1: add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='X', 0x1, 0xfffffffffffffffe) 09:07:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9bffffff}, [{}]}, 0x78) 09:07:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x71, 0x0, 0x0) 09:07:06 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x30}, 0xc) 09:07:06 executing program 5: setrlimit(0x0, &(0x7f0000000000)={0x4, 0x4}) 09:07:06 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000300)) 09:07:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000400)) 09:07:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc0000000}, [{}]}, 0x78) 09:07:07 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 09:07:07 executing program 5: sysfs$2(0x2, 0x4, &(0x7f0000000100)=""/240) 09:07:07 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x105001) 09:07:07 executing program 4: io_setup(0x0, &(0x7f00000000c0)) pipe2(&(0x7f0000004000), 0x0) 09:07:07 executing program 1: 09:07:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe0000000}, [{}]}, 0x78) 09:07:07 executing program 0: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 09:07:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240), 0x4) 09:07:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000d00)=@routing, 0x8) 09:07:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1143.023603][ T27] audit: type=1400 audit(1602148028.336:26): avc: denied { set_context_mgr } for pid=18852 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 09:07:08 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x20002) syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1143.100252][T18855] ptrace attach of "/root/syz-executor.0"[18851] was attempted by "/root/syz-executor.0"[18855] [ 1143.194177][ T27] audit: type=1800 audit(1602148028.466:27): pid=18851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=15874 res=0 errno=0 09:07:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xef080000}, [{}]}, 0x78) 09:07:08 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={'crc32c-generic\x00'}}) 09:07:08 executing program 1: r0 = inotify_init1(0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) 09:07:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 09:07:08 executing program 5: add_key$user(&(0x7f0000002b40)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:07:09 executing program 3: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0x74000100) 09:07:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0000000}, [{}]}, 0x78) 09:07:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 09:07:09 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1a19, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 09:07:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, 0x0) 09:07:10 executing program 1: add_key$user(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 09:07:10 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1000000000, 0x187301) 09:07:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf8000000}, [{}]}, 0x78) 09:07:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6e, 0x0, 0x0) 09:07:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) 09:07:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 09:07:10 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x200, 0x44700) 09:07:10 executing program 0: socket$inet6(0xa, 0x0, 0xffffffe0) 09:07:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc000000}, [{}]}, 0x78) 09:07:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000066440)={0x0, [], 0x0, "d78e69e340c4e0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000068840)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bb00)={0x0, [], 0x0, "a74a4e4f77e70d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006cb00)={0x0, [], 0x0, "b32f42473a926a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 09:07:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x8, 0x0, 0x0) 09:07:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x40) 09:07:11 executing program 4: r0 = socket(0x18, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@nfc, 0x80, 0x0}, 0x0) 09:07:11 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @private, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast2=0xfe800000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@multicast2}, {@loopback}, {@loopback}, {@private}]}]}}}}}}}, 0x0) [ 1146.308479][T18925] binder: 18924:18925 ioctl d000943d 20066440 returned -22 [ 1146.322643][T18925] binder: 18924:18925 ioctl 81f8943c 0 returned -22 09:07:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffff80}, [{}]}, 0x78) [ 1146.358337][T18925] binder: 18924:18925 ioctl 81f8943c 20068840 returned -22 [ 1146.378851][T18925] binder: 18924:18925 ioctl d000943e 0 returned -22 [ 1146.441884][T18930] binder: 18924:18930 ioctl d000943e 2006aa40 returned -22 [ 1146.529327][T18925] binder: 18924:18925 ioctl d000943d 20066440 returned -22 [ 1146.538459][T18930] binder: 18924:18930 ioctl 81f8943c 0 returned -22 [ 1146.553365][T18930] binder: 18924:18930 ioctl 81f8943c 20068840 returned -22 [ 1146.583715][T18925] binder: 18924:18925 ioctl d000943e 0 returned -22 [ 1146.595065][T18930] binder: 18924:18930 ioctl d000943e 2006aa40 returned -22 09:07:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 09:07:12 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x44700) 09:07:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'netpci0\x00', @ifru_addrs=@vsock}) 09:07:12 executing program 5: socket(0x23, 0x0, 0x9) 09:07:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x1d}, 0x1c) [ 1147.058337][T18943] binder: 18941:18943 ioctl d000943d 0 returned -22 [ 1147.075326][T18943] binder: 18941:18943 ioctl d000943d 0 returned -22 09:07:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffff9b}, [{}]}, 0x78) [ 1147.153212][T18946] binder: 18941:18946 ioctl d000943d 0 returned -22 [ 1147.153524][T18943] binder: 18941:18943 ioctl d000943d 0 returned -22 09:07:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000012c0)) 09:07:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0xffffffff}, 0x40) 09:07:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x10, 0x0, 0x0) 09:07:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) 09:07:13 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 09:07:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100003e04}, [{}]}, 0x78) 09:07:13 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 09:07:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x29, 0x9, 0x0, 0x0) 09:07:13 executing program 5: clone(0xd674ec4f684b9d18, 0x0, 0x0, 0x0, 0x0) 09:07:13 executing program 4: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='I', 0x1, 0xfffffffffffffffb) [ 1148.439851][T18976] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request 09:07:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18000000000000}, [{}]}, 0x78) 09:07:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000000)={'batadv0\x00', @ifru_hwaddr=@multicast}) 09:07:14 executing program 3: r0 = inotify_init() r1 = fcntl$dupfd(r0, 0x0, r0) inotify_rm_watch(r1, 0x0) 09:07:14 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='c', 0x1}, {&(0x7f0000000e80)="ec", 0x1}, {&(0x7f0000000240)="9b", 0x1}], 0x3, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x20040000) 09:07:14 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 09:07:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 09:07:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0000000000000}, [{}]}, 0x78) 09:07:14 executing program 0: clone(0x878e2080, 0x0, 0x0, 0x0, 0x0) 09:07:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) 09:07:14 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000003d40), 0x0, 0x0, &(0x7f0000003e00)={0x0}) [ 1149.594041][T19001] sctp: [Deprecated]: syz-executor.4 (pid 19001) Use of int in maxseg socket option. [ 1149.594041][T19001] Use struct sctp_assoc_value instead 09:07:15 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4d) 09:07:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100000000000000}, [{}]}, 0x78) 09:07:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 09:07:15 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="f0", 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r0}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={'crc32c-generic\x00'}}) 09:07:15 executing program 1: clone(0x8088900, 0x0, 0x0, 0x0, 0x0) 09:07:15 executing program 5: socket$inet6_sctp(0xa, 0x2, 0x84) 09:07:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180000000000000}, [{}]}, 0x78) 09:07:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x3, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) ftruncate(r3, 0x208200) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000280)=""/5, 0x5}], 0x8, 0xfff, 0xbae) sendfile(r0, r1, 0x0, 0x8000fffffffa) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) 09:07:16 executing program 0: clone(0xb00f6a80, 0x0, 0x0, 0x0, 0x0) 09:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 09:07:16 executing program 1: socket(0x2, 0x2, 0x8) 09:07:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000000000000}, [{}]}, 0x78) [ 1151.523268][ T27] audit: type=1800 audit(1602148036.837:28): pid=19039 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16378 res=0 errno=0 09:07:16 executing program 5: set_robust_list(&(0x7f0000000140), 0x18) 09:07:17 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') 09:07:17 executing program 3: r0 = socket(0x18, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x28, 0x0, 0x0, "148ba31fecc51bd865501534756ad5ac45"}], 0x28}, 0x0) 09:07:17 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000003d40), 0x0, 0x0, 0x0) 09:07:17 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x66040) 09:07:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1e, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x43e000001000000}, [{}]}, 0x78) 09:07:17 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x44000, 0x0) 09:07:17 executing program 0: clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) 09:07:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000002740)) 09:07:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 09:07:18 executing program 5: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) pipe2(0x0, 0x0) clone(0x0, &(0x7f0000000240)="4492b54b2641a98198847161d7c7e9e563c0c41523af8d55c82d033b64f1bfb9866196964b3011d2bdd6f81d20e3f15cfce8826c9ee5", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="71ea38e0c36d8287bff5352cf907e12a9cd2a69b645cace7fdd6447750433dfd715c46a4c9477b6eb00f361da5b2573651bd5cb478d8d22c373a6860123f57f3e16604bbd1347d9eb630bcad5fd6ef0b3fe1045f91d0791b5947db5fdfaa7ee9a58c4e09a2838eeef12e2b0f0a661743d88635282f9892affb8a77c94932900ed36237275035cf541f6c7612690650ea6b8e5e04e044c59218a40dc1bc25034477952afe0c0cea973c626aa595cc06aae494f24b7625") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000880)) 09:07:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700000000000000}, [{}]}, 0x78) 09:07:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x19, 0x0, 0x0) 09:07:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6e, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private0, @mcast1, [], [], 'ip6tnl0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b763a16d037b2dcdaf70f7aca23a40135403e0f6643a0ceca31a2e77a3bc"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 09:07:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x800000000000000}, [{}]}, 0x78) 09:07:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x15, 0x0, 0x0) 09:07:19 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 09:07:19 executing program 4: io_setup(0x3, &(0x7f0000000000)) 09:07:19 executing program 0: socketpair(0x1e, 0x0, 0x5, &(0x7f0000000080)) 09:07:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x900000000000000}, [{}]}, 0x78) 09:07:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2cad, 0x0, 0x0, 0x0, 0x10001}, 0x14) 09:07:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x1c4}], 0x0, &(0x7f00000006c0)) 09:07:19 executing program 5: mmap$binder(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 09:07:20 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 09:07:20 executing program 4: keyctl$join(0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) [ 1154.915738][T19109] MINIX-fs: unable to read superblock 09:07:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x65, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa00000000000000}, [{}]}, 0x78) 09:07:20 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:07:20 executing program 5: socket(0x28, 0x0, 0x7fff) 09:07:20 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000387000/0x1000)=nil, 0x1000, 0xf) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 09:07:20 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x20040000) 09:07:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6, 0x0, 0x0) 09:07:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000), 0x8) 09:07:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb00000000000000}, [{}]}, 0x78) 09:07:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000001580)='/dev/video#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000025c0)) 09:07:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 09:07:21 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 09:07:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x78, 0x0, 0x0) 09:07:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc00000000000000}, [{}]}, 0x78) 09:07:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x21, 0x0, 0x0) 09:07:24 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x21000000) 09:07:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 09:07:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd00000000000000}, [{}]}, 0x78) 09:07:24 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) 09:07:24 executing program 0: socket$inet6(0xa, 0x3, 0x9) 09:07:24 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 09:07:25 executing program 5: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', 0x0, 0x4, 0x0) 09:07:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe00000000000000}, [{}]}, 0x78) 09:07:25 executing program 0: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e09521e93c010000000c0024000000000000000000e80300000000000000000000020000000000000000000000ba63b5c7fc5f446f8f05bf831a0e9463", 0x40, 0x400}, {&(0x7f0000010100)="05000000c04100007400000000000000ff", 0x11, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}]}) 09:07:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x2, 0x0, 0x0) 09:07:25 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4301) [ 1160.427582][T19189] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x837a3720, 0x3ce92195 expected 09:07:25 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0}, 0x0) 09:07:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00000000000000}, [{}]}, 0x78) [ 1160.730306][T19189] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x837a3720, 0x3ce92195 expected 09:07:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001280), &(0x7f00000012c0)=0x8) 09:07:26 executing program 1: ptrace$cont(0x7, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc0, 0x12) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "523c0ff92308f505", "529e43e298c400ea82c8327612b9d1cc", "d63ac631", "b851f8ad9c8c382f"}, 0x28) 09:07:26 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x26000, 0x0) 09:07:26 executing program 0: setrlimit(0x8, &(0x7f0000000000)) 09:07:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800000000000000}, [{}]}, 0x78) 09:07:26 executing program 5: syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 09:07:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x9c) 09:07:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:07:27 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_int(r0, 0x0, 0xffffffffffffff25) 09:07:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a00000000000000}, [{}]}, 0x78) 09:07:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) 09:07:27 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 09:07:27 executing program 4: socketpair(0x1, 0x0, 0xfffff10e, &(0x7f00000000c0)) 09:07:27 executing program 3: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) 09:07:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x76, 0x0, 0x0) 09:07:27 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 09:07:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b00000000000000}, [{}]}, 0x78) 09:07:28 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 09:07:28 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000000000)) 09:07:28 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) inotify_rm_watch(r0, 0x0) 09:07:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @private1}) 09:07:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f00000000000000}, [{}]}, 0x78) 09:07:28 executing program 5: socketpair(0x3, 0x0, 0x5eb, &(0x7f0000000000)) 09:07:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 09:07:29 executing program 3: setrlimit(0x0, &(0x7f0000000240)={0xfffffffe00000}) 09:07:29 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x20002) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:07:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, 0x8) 09:07:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f00000000000000}, [{}]}, 0x78) 09:07:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:07:29 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c3"}, 0x0, 0x2, @planes=&(0x7f0000000100)={0x0, 0x0, @mem_offset, 0x0, [0x0, 0x7]}, 0xca80}) dup2(r0, r1) 09:07:30 executing program 4: sysfs$2(0x2, 0x0, &(0x7f0000001700)=""/90) 09:07:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x75, 0x0, 0x0) 09:07:30 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 09:07:30 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 09:07:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 09:07:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8000000000000000}, [{}]}, 0x78) 09:07:31 executing program 5: socketpair(0x15, 0x5, 0x4b, &(0x7f0000000100)) 09:07:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @private1, @private2, 0x0, 0x0, 0x0, 0x500, 0x8, 0x820240}) 09:07:31 executing program 4: clone(0xde9813164d091fc5, 0x0, 0x0, 0x0, 0x0) 09:07:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x9c) 09:07:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80ffffff00000000}, [{}]}, 0x78) 09:07:32 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1000) 09:07:32 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 09:07:32 executing program 4: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) 09:07:32 executing program 3: socket(0x18, 0x0, 0x8) 09:07:32 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_int(r0, 0x0, 0x51) 09:07:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9bffffff00000000}, [{}]}, 0x78) 09:07:33 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x3a) [ 1167.715609][T19319] nvme_fabrics: missing parameter 'transport=%s' [ 1167.722028][T19319] nvme_fabrics: missing parameter 'nqn=%s' 09:07:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="1f") pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:07:33 executing program 3: socket(0x22, 0x0, 0xad) 09:07:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x9c) 09:07:33 executing program 1: add_key$user(&(0x7f0000001240)='user\x00', 0x0, &(0x7f00000012c0)="ee", 0x1, 0xffffffffffffffff) 09:07:33 executing program 0: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0xa10) 09:07:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc000000000000000}, [{}]}, 0x78) 09:07:34 executing program 4: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:07:34 executing program 3: pipe2(0x0, 0x4400) 09:07:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @l2={0x1f, 0x0, @fixed}, @xdp, @in={0x2, 0x0, @private}}) 09:07:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000100)) 09:07:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 09:07:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe000000000000000}, [{}]}, 0x78) 09:07:34 executing program 4: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 09:07:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast=0xfe010000}}}, 0x9c) 09:07:34 executing program 1: socket(0x10, 0x0, 0x203) 09:07:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) 09:07:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xef08000000000000}, [{}]}, 0x78) 09:07:35 executing program 5: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 09:07:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x11, 0x0, 0x0) 09:07:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000740)) 09:07:35 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r1, 0x0, 0x0) pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 09:07:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf000000000000000}, [{}]}, 0x78) 09:07:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)) 09:07:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x8, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x0, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'y_'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private0, @mcast1, [], [], 'ip6tnl0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b763a16d037b2dcdaf70f7aca23a40135403e0f6643a0ceca31a2e77a3bc"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 09:07:36 executing program 3: clone(0x10809600, 0x0, 0x0, 0x0, 0x0) 09:07:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x48) 09:07:36 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0xa10) 09:07:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf800000000000000}, [{}]}, 0x78) 09:07:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x14, 0x0, 0x0) 09:07:36 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f000000d780)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006d740)={0x0, 0x0, "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", "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"}) 09:07:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x3, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c3"}, 0x0, 0x2, @planes=&(0x7f0000000100)={0x0, 0x0, @mem_offset, 0x0, [0x0, 0x7]}, 0xca80}) 09:07:37 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="f0", 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, 0x0) 09:07:37 executing program 0: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 09:07:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "0bc1cc66aa49f187783ff53de570e2e4"}, 0x11, 0x0) 09:07:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc00000000000000}, [{}]}, 0x78) 09:07:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0xa, 0x0, @broadcast}}}, 0x9c) 09:07:37 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='c', 0x1}, {&(0x7f0000000e80)="ec", 0x1}, {&(0x7f0000000240)="9b", 0x1}], 0x3, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x0) 09:07:37 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 09:07:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000300), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 09:07:38 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x21000000) 09:07:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff00000000}, [{}]}, 0x78) 09:07:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @private1, @private2, 0x100}) 09:07:38 executing program 3: io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) 09:07:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "0bc1cc66aa49f187783ff53de570e2e4"}, 0x11, 0x3) 09:07:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1e, 0x0, 0x0) 09:07:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001540)={'batadv_slave_1\x00'}) 09:07:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:07:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8940, 0x0) 09:07:39 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 09:07:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x79, 0x0, 0x0) 09:07:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, {0xa, 0x0, 0x0, @private1}}}, 0x3a) 09:07:39 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:07:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2}, [{}]}, 0x78) 09:07:39 executing program 1: clone(0x2800200, 0x0, 0x0, 0x0, 0x0) 09:07:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000001580)='/dev/video#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 09:07:39 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7, 0x20140) 09:07:40 executing program 3: r0 = socket(0x18, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 09:07:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$can_raw(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 09:07:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7}, [{}]}, 0x78) 09:07:40 executing program 4: socket(0x2c, 0x3, 0x10000) 09:07:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x0) 09:07:40 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000004440)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000013c0)="e9", 0x1}], 0x2}], 0x1, 0x0) 09:07:40 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4400, 0x0) 09:07:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x700}}) 09:07:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8}, [{}]}, 0x78) 09:07:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x93fc7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x4}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:07:41 executing program 5: clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='q') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000880)) 09:07:41 executing program 1: userfaultfd(0x81000) 09:07:41 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 09:07:41 executing program 3: setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0xfffffffffffffff8) 09:07:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9}, [{}]}, 0x78) 09:07:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xc, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:42 executing program 4: clone(0x42004300, 0x0, 0x0, 0x0, 0x0) 09:07:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x8, 0xffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x109000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1589db31945058b20b451c5df635aead1cd8b9014dc294e3674d0eb926da4a149e5aa3ff75ddd9d067ad12423618773acc826f33a2c90c77e07d4fefe604fe284a1e2412a140b48efb845a75875ec41138d06942939e681dfacac7a69f61c130df2f613c0d3dff5ad1948f2dee5df768815dccba84a38af70a716415a05f174e0a7cbe60caa35c544751c46d2d393eaca0f669490bdd258f4330b091544608b4e1000000000000000000000000fbe0f7bb7c47f3a2e73d81382421b2541815d77eab3656466906dbdc16af665745e72980ad06bbcfa1170e3e23702498af88cc6b86550b23250a98da093d232c49edf31e30807111a77f783c4ab7d00b018b6986c54ce609c4bacc27812935fcd4789dfd737aab5102ef267fccecf074718d6a0658a9939203a6d60cb668ebbaa031263e518624bf2d644fa8ac9ac2a8ef84c7efba6307"], 0x1d, 0x0, &(0x7f00000014c0)="e83450011fa8b92035bcb44003ac5d539f68b7afae9782c40f1052d310"}) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000001480)=0x2) socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000007700)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000007580)=[{{&(0x7f0000002d40)=@caif=@rfm, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000380)=""/261, 0x105}, {&(0x7f0000000900)=""/121, 0x79}], 0x3, &(0x7f0000003000)=""/4096, 0x1000}, 0xb9}, {{&(0x7f0000004000)=@nfc, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/174, 0xae}, {&(0x7f0000005140)=""/116, 0x74}], 0x3, &(0x7f0000000740)=""/166, 0xa6}, 0x10000}, {{&(0x7f00000052c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000005340)=""/65, 0x41}, {&(0x7f00000053c0)=""/174, 0xae}, {&(0x7f0000005480)}, {&(0x7f00000054c0)=""/159, 0x9f}, {&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000005680)=""/124, 0x7c}, {&(0x7f0000005700)=""/191, 0xbf}, {&(0x7f00000057c0)}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000640)=""/226, 0xe2}], 0xa, &(0x7f00000068c0)=""/142, 0x8e}, 0x2}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006980)=""/151, 0x97}, {&(0x7f0000006a40)=""/50, 0x32}], 0x2, &(0x7f0000006ac0)=""/174, 0xae}}, {{&(0x7f0000006b80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000007200)=[{&(0x7f0000006c00)=""/181, 0xb5}, {&(0x7f0000006cc0)=""/167, 0xa7}, {&(0x7f0000006d80)=""/53, 0x35}, {&(0x7f0000006dc0)=""/15, 0xf}, {&(0x7f0000006e00)=""/229, 0xe5}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000006fc0)=""/111, 0x6f}, {&(0x7f0000007040)=""/6, 0x6}, {&(0x7f0000007080)=""/108, 0x6c}, {&(0x7f0000007100)=""/217, 0xd9}], 0xa, &(0x7f00000072c0)=""/158, 0x9e}, 0x3}, {{&(0x7f0000007380)=@can, 0x80, &(0x7f0000007500)=[{&(0x7f0000007400)=""/234, 0xea}], 0x1, &(0x7f0000007540)}, 0x6}], 0x6, 0x102, &(0x7f0000007740)={r5, r6+60000000}) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4f85cd1717f762ed}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x44, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4c084) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000053c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e5070000", @ANYRES32, @ANYBLOB="00012abd7000fbdbdf254c0000000800770007000000c3072a00ee4d4a4695ca8b475c22f368dddedc1f651665a87c1f785139a972f4b2b442fb8f729edc05f61ddc36380a6633e64c27b893c2843fa94b2d0416091eea9809f9c42edd61597c434c68e20ac219f1f4cdaa6c70590ef3f2c7dd60805e9f7895f28bac330097f116b7aa6d8dd64338d5e840b03a04b731c3afa9c1f64f336cbcf14c73023e0c9fe7e991e33af01c35c937719d867856afc00e6a65d92d7ad9bd8c18b5f4635737c4b52ac2c4b06477ab0d6e462226e37eac29d406d8571540bbd4850ec1f75342823bd1436fd95b59628167f2c0216c67fa8e955ff292ccbcf1e6e983ff89f81a6435eb6ef2fad519358ebb4cb2661dee68157e1013d4901bd98cf88f8df576e9de53f5ba0c6807b627f4913c044bee0ecf3280e7a4bc533cc5633b5db340b6644c282c1fde574874b60adc194a3951681dfac7255718ff50389b54891d0b9bf1d8bb95d9fe944eb39cd561d1afba872cdb66cf0e3c1006940e7f710f8908660e35cf6ab1258e05136dbf5bad5c48a02ad3849202f02ca4fc26bafe6f8fbab5223c5c40cd8e781349957d3702e8201aa77fc8f1b7fff3b9d3c851e893f61c47c2a30d6558bf80a0a319f151a3bf3eb3b44b614a600855fd3c4201e0156c3486a1c5eb395c7b7c9dcba973e05d5ccdb208090777aa7638803905c0ada4c09052df8c0884d00696f653cca8bd9ce1778c367f56edd3663f9154301bb233e390b4dc01c7fac6af198349397e17fad9af93ca0a53176501411d8b334b83b8f3f5b2d5ecb80027ecdae56a4e1f31acfa25f691c62deb93dbda1267186513f0cdb930b54f602fe917cdfc5e322531a376929b16d0d90e5af39d51b7768b22ab18458413743788c27719efe2b47496d7b70527de606f79dca6d842470efc31fa8a623ebd070abc9d682413f124df4dc1f4ce640050417349eb78111c4359ab1564419c5df3e8aafc7918e4aea073be59ed04103a8a806ee6b75ff83595a49d85a45730c96bf5ced8364c8dd22582b21a1a246549506fac2fabaee959bcf5e7e39b696d9af29beab29a926e4a70765e341d164013eef66d5efe8170b4dfe45db2ff39af51ecaa18b284cab73d629e61d459c60f6006d5cdd31dc55a3e1dbe8cd8f22cf11506dc97873e5d9a7f0d9a3d44d9605dac648117f3b9b897d75038a33136f2405ac7b29bde8eb1f448f5d4b2c556eba898cbce7043bea7e8d6ea2bb4bf99ed7c7969c5931ac3fb5478ab07c827f607535345f41f2c7fca56b446efd24a176d6974078c8e5733ef4df951eb167b34dcca5cb8ce2f13b667744c8c79686acc90c03dbce51a71de3a2baef2a52b5bcfec6e78c3c3f7e70d7facf32e128248625313460af4329374bc7265f4f152f9ce4481044dfef8bf05db49b48d24f241d5cf46a2a5903c3aa7bff87ed7f4f7cf03b510ed62e452e9a55466369c590a545064d9e321534e2dde9e2489a530881df1b3edfab2370a21078207f93e42b3ce08df67d54c3f32494fbb9003b2fe1be9a6a435fa1d7e860ebfbf969f40ba3ffdd52c3fe9b5e9521e8ab00b64800ed485a8c229bfb0b486011e20062464a80795560bc7a95fc595205d41f0215402258d6e2cb787cd812b955be08787c32fbfbb1da9dc400b451b0b076434a4d4779ccc700eff30a1f22069324657655e64dbe33464911abde7b846e0b3c6a671bd1cdffc68a69016ca400e0f2ff1a13a145044a053ffe2b04b856e01fc626168c4e9394e893273b583d1d86cb703816225ecdc5c0d02890e099c60e318cc6e93dae5e71039cf97e318da28b3b9db3bd883095c10a01304d50de0cb028a0207aa5ab2f759619e63638f3a068cd7d4ba2e43b62c74217c59f0810f416d95552c7cf05dcdf26d29b844f86edef738144df899e2b752143f2796073021a12e0906169eef5c14153f2de02247509ffa65eb48dec1d4be5713156ac9660bccd55d69c2c67c615c656cce7e2d98b3e5b7800edfe1db18ba5f42be6364086af2f65f94220173991b7a5641c22339d5c39e3c85dd78a9d2bfb068c6e33dd1af1b268f4c3a102a32cedcfc5de92e2b76eec989b0d2257cb6cc79e11056aae4030a63a89da9023c474bf4a744d7cf78053957b1a8503a0f01a7b7fe390043da05c7b9b0556c78a020b8266aba573d1d52c8586558e7fc45b277d0768c7cfe8ab862df67cde003ded8487e19d6c7cdf4ee4aae7d30192ca3144a6ca7a8589523afc2ff3dc9ab803d8471f625ca58e940141cb649e2506f32329c3910cf488133169defb7eb41f069e66d6301a20be8f1d6750764a55f20f340c1edf860812e5026efc4830b1cd1fbb287ab52c54d74ea6e8ed3ce9cac75958541c33ab80eb176e86e76ba330dfbca82bdef5a5f3dea72c8298895a04f61ff48c65a630b2a1441c386cf02bc94b1fd5194e870197a6a3eefd0214af3f541a5813e96855c227e4e89b7deebddb3f8b3ebe28400ae91823f40e491eb6ccc69bd59f12835b38af3da7f696efc8620ec067f0fa6e8a02c21ad0c4b1e1e0eba475cd5844a4127a21084fe068effd61603db411a1e618d56bd0d99e85381a2e231477f2c4861c9224d3bf5ebad10e6f50366f19e7ce05c2b296e8f66c580a0ef975d9991747f33d3f44a242de924ddbd3656426c6cd0f3e823aae6cf792b8f6f4a4d7a868068d6b0ecb4f360780f0f0011174ca15f515cf0bb35ddfdc47eb24ed2fe6fd3040543475cb65803e3004b8d094388f36a7c7fb17d8f6e2182c3b3cdefb21d96fc17f0676d0c13f6338eac3e3ebe135d0588432e7165e0bdebba4b9a000500f6000600000008000300", @ANYRES32, @ANYBLOB="0600980020000000"], 0x7f8}, 0x1, 0x0, 0x0, 0x24008810}, 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000001580)={0x0, 0x7, 0x0, [], &(0x7f0000001540)=0x3}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x73}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e26}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1a}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3ff}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xd4}}, 0x0) 09:07:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x9c) 09:07:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x23, 0x0, 0x0) 09:07:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa}, [{}]}, 0x78) [ 1177.045057][T19543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=19543 comm=syz-executor.3 [ 1177.072477][T19544] IPVS: ftp: loaded support on port[0] = 21 09:07:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000940)='security.ima\x00', &(0x7f0000000880)=@v2={0x0, 0x0, 0x0, 0x0, 0x0, "6517da673b2286859d09af82cbb73ac7943699da5a5595833f75dc08e371d6ec00f6"}, 0xfed7, 0x0) 09:07:42 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 09:07:42 executing program 1: io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) 09:07:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb}, [{}]}, 0x78) [ 1177.875980][T19559] IPVS: ftp: loaded support on port[0] = 21 09:07:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x80, 0x2, &(0x7f00000012c0)=[{&(0x7f00000002c0)="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", 0xaf8, 0x4}, {&(0x7f0000000100)="ec17be4abd410d15b28a33199792fbe24e3c1d4372181ebcfea9a541419bff3ea7ba686bb154d152b321ff4f5b8483736a664315f4289a21bf9bc8dee59ebdab7bfda3a5a69c9be065a7a8ae0755b30bd157e4ab624d91c9313edb68304c7ff962", 0x61, 0x101}], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878255}, 0x9c) [ 1178.132389][T19566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=19566 comm=syz-executor.3 09:07:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:43 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 09:07:45 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) 09:07:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc}, [{}]}, 0x78) 09:07:45 executing program 5: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000300)="ad", 0x1, 0xfffffffffffffffc) 09:07:45 executing program 1: pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) fcntl$setflags(r0, 0x2, 0x1) 09:07:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000700), &(0x7f0000000740)=0x8) 09:07:45 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001580), 0x0) io_setup(0x8001, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 09:07:46 executing program 5: socketpair(0x65a6ab9b46b40497, 0x0, 0x0, &(0x7f0000000080)) 09:07:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd}, [{}]}, 0x78) 09:07:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 09:07:46 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x800) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x1d}, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 09:07:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='c', 0x1}, {0x0}, {&(0x7f0000000240)="9b", 0x1}], 0x3, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x0) 09:07:46 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 09:07:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) 09:07:47 executing program 3: clone(0x41800, 0x0, 0x0, 0x0, 0x0) 09:07:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) 09:07:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 09:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe}, [{}]}, 0x78) 09:07:47 executing program 4: mlockall(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:07:47 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x20002) syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:07:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6b, 0x0, 0x0) 09:07:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf}, [{}]}, 0x78) 09:07:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8940, &(0x7f0000000040)={'rose0\x00', @ifru_ivalue}) 09:07:48 executing program 5: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={r0, r1+60000000}, 0x0) 09:07:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 09:07:49 executing program 0: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfff9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) pipe2(0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240), 0x4) 09:07:49 executing program 1: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) [ 1184.488724][T19663] sctp: [Deprecated]: syz-executor.0 (pid 19663) Use of int in maxseg socket option. [ 1184.488724][T19663] Use struct sctp_assoc_value instead [ 1184.600780][T19667] sctp: [Deprecated]: syz-executor.0 (pid 19667) Use of int in maxseg socket option. [ 1184.600780][T19667] Use struct sctp_assoc_value instead 09:07:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x18}, [{}]}, 0x78) 09:07:50 executing program 3: socket(0x1d, 0x0, 0x202) 09:07:51 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001580), 0x0) io_setup(0x8001, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 09:07:51 executing program 5: accept4$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001580)=0x1c, 0x800) io_setup(0x8001, &(0x7f0000000000)) pipe2(0x0, 0x0) 09:07:51 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000e80)="ec", 0x1}, {&(0x7f0000000240)="9b", 0x1}], 0x3, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x0) 09:07:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh, 0x8) 09:07:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a}, [{}]}, 0x78) 09:07:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x6}, 0x9c) 09:07:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x18, 0x0, 0x0) 09:07:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b}, [{}]}, 0x78) 09:07:51 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 09:07:51 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e80)="ec", 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x3f0}, 0x0) 09:07:51 executing program 5: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) pipe2(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240), 0x4) 09:07:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8}, 0x40) 09:07:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e09521e93c010000000c0024000000000000000000e80300000000000000000000020000000000000000000000ba63b5c7fc5f446f8f05bf831a0e9463", 0x40, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}]}) 09:07:52 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="6d754ad417a027314f1c1589db5b3e27a0179d07beed1ecc0f6ee02cccc54f3afa7bb6e1af11104d8c0b21a20a547a8ea3199441d0ccd865584bd1b3d41102ced0", 0x41}], 0x1}, 0x0) io_setup(0x0, &(0x7f00000000c0)) [ 1186.944523][T19703] sctp: [Deprecated]: syz-executor.5 (pid 19703) Use of int in maxseg socket option. [ 1186.944523][T19703] Use struct sctp_assoc_value instead 09:07:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7b, 0x0, 0x0) 09:07:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc0}, [{}]}, 0x78) 09:07:52 executing program 5: io_setup(0x8001, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1187.390105][T19711] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x57896c72, 0x3ce92195 expected 09:07:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x22, 0x0, 0x0) 09:07:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000040)) 09:07:53 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xac2) 09:07:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f0000001880)) 09:07:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe0}, [{}]}, 0x78) 09:07:53 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 09:07:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x21, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x64, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x9c) 09:07:53 executing program 0: socketpair(0x2, 0x0, 0x401, &(0x7f0000000180)) 09:07:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 09:07:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf0}, [{}]}, 0x78) 09:07:54 executing program 5: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001640)='/dev/dlm_plock\x00', 0x131400, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:07:54 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) 09:07:54 executing program 4: pipe2(&(0x7f0000004000), 0x0) mlockall(0x5) 09:07:54 executing program 0: prctl$PR_MCE_KILL(0x21, 0x2, 0x0) 09:07:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 09:07:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf8}, [{}]}, 0x78) 09:07:55 executing program 3: clone(0x2801f00, 0x0, 0x0, 0x0, 0x0) 09:07:55 executing program 5: clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) 09:07:55 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x406, r0) 09:07:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x700}}) 09:07:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfc}, [{}]}, 0x78) 09:07:55 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) 09:07:55 executing program 0: getresgid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 09:07:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x180}, [{}]}, 0x78) 09:07:56 executing program 4: io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 09:07:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, 0x0, 0x0) 09:07:56 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002440)='/dev/dlm_plock\x00', 0x1c440, 0x0) 09:07:56 executing program 0: io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) pipe2(&(0x7f0000004000)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:07:56 executing program 5: pipe2(&(0x7f00000001c0), 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) 09:07:56 executing program 3: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) clone(0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)) fsetxattr$security_ima(r0, &(0x7f0000000900)='security.ima\x00', 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ocfs2_control\x00', 0x60140, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) syz_open_dev$sndctrl(&(0x7f0000000bc0)='/dev/snd/controlC#\x00', 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000000d40)='/dev/v4l-subdev#\x00', 0x0, 0x0) 09:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000300)=""/65) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:07:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x700}, [{}]}, 0x78) 09:07:57 executing program 4: 09:07:57 executing program 0: 09:07:57 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 09:07:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8ef}, [{}]}, 0x78) 09:07:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)) [ 1192.415471][T19816] misc userio: Invalid payload size 09:07:57 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x187301) 09:07:57 executing program 0: pipe2(&(0x7f0000004000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x6) 09:07:57 executing program 4: 09:07:58 executing program 5: 09:07:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x900}, [{}]}, 0x78) 09:07:58 executing program 4: 09:07:58 executing program 0: 09:07:58 executing program 3: 09:07:58 executing program 5: 09:07:58 executing program 1: 09:07:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa00}, [{}]}, 0x78) 09:07:59 executing program 0: 09:07:59 executing program 4: 09:07:59 executing program 1: 09:07:59 executing program 3: 09:07:59 executing program 5: 09:07:59 executing program 0: 09:07:59 executing program 4: 09:08:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb00}, [{}]}, 0x78) 09:08:00 executing program 5: 09:08:00 executing program 1: 09:08:00 executing program 3: 09:08:00 executing program 4: 09:08:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 09:08:00 executing program 1: 09:08:00 executing program 5: 09:08:00 executing program 3: 09:08:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc00}, [{}]}, 0x78) 09:08:01 executing program 0: 09:08:01 executing program 4: 09:08:01 executing program 1: 09:08:01 executing program 3: 09:08:01 executing program 5: 09:08:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd00}, [{}]}, 0x78) 09:08:01 executing program 0: 09:08:01 executing program 1: 09:08:01 executing program 4: 09:08:01 executing program 3: 09:08:02 executing program 5: 09:08:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe00}, [{}]}, 0x78) 09:08:02 executing program 0: 09:08:02 executing program 4: 09:08:02 executing program 1: 09:08:02 executing program 3: 09:08:02 executing program 5: 09:08:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf00}, [{}]}, 0x78) 09:08:02 executing program 0: 09:08:02 executing program 1: 09:08:03 executing program 4: 09:08:03 executing program 3: 09:08:03 executing program 5: 09:08:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1800}, [{}]}, 0x78) 09:08:03 executing program 0: 09:08:03 executing program 1: 09:08:03 executing program 4: 09:08:03 executing program 3: 09:08:03 executing program 5: 09:08:04 executing program 0: 09:08:04 executing program 1: 09:08:04 executing program 4: 09:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a00}, [{}]}, 0x78) 09:08:04 executing program 3: 09:08:04 executing program 5: 09:08:04 executing program 1: 09:08:04 executing program 0: 09:08:04 executing program 4: 09:08:05 executing program 3: 09:08:05 executing program 5: 09:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b00}, [{}]}, 0x78) 09:08:05 executing program 1: 09:08:05 executing program 0: 09:08:05 executing program 4: 09:08:05 executing program 3: 09:08:05 executing program 5: 09:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3f00}, [{}]}, 0x78) 09:08:06 executing program 1: 09:08:06 executing program 4: 09:08:06 executing program 0: 09:08:06 executing program 3: 09:08:06 executing program 5: 09:08:06 executing program 1: 09:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f00}, [{}]}, 0x78) 09:08:07 executing program 0: 09:08:07 executing program 4: 09:08:07 executing program 3: 09:08:07 executing program 5: 09:08:07 executing program 1: 09:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc000}, [{}]}, 0x78) 09:08:07 executing program 0: 09:08:07 executing program 4: 09:08:08 executing program 3: 09:08:08 executing program 5: 09:08:08 executing program 1: 09:08:08 executing program 4: 09:08:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe000}, [{}]}, 0x78) 09:08:08 executing program 0: 09:08:08 executing program 3: 09:08:08 executing program 5: 09:08:08 executing program 1: 09:08:09 executing program 4: 09:08:09 executing program 0: 09:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xef08}, [{}]}, 0x78) 09:08:09 executing program 3: 09:08:09 executing program 5: 09:08:09 executing program 1: 09:08:09 executing program 4: 09:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf000}, [{}]}, 0x78) 09:08:09 executing program 0: 09:08:09 executing program 3: 09:08:10 executing program 5: 09:08:10 executing program 1: 09:08:10 executing program 4: 09:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf800}, [{}]}, 0x78) 09:08:10 executing program 0: 09:08:10 executing program 5: 09:08:10 executing program 3: 09:08:10 executing program 1: 09:08:10 executing program 4: 09:08:11 executing program 0: 09:08:11 executing program 5: 09:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfc00}, [{}]}, 0x78) 09:08:11 executing program 0: 09:08:12 executing program 5: 09:08:12 executing program 3: 09:08:12 executing program 4: 09:08:12 executing program 1: 09:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x180000}, [{}]}, 0x78) 09:08:12 executing program 0: 09:08:12 executing program 5: 09:08:12 executing program 3: 09:08:12 executing program 1: 09:08:12 executing program 4: 09:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf00000}, [{}]}, 0x78) 09:08:13 executing program 0: 09:08:13 executing program 3: 09:08:13 executing program 5: 09:08:13 executing program 1: 09:08:13 executing program 4: 09:08:13 executing program 0: 09:08:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1000000}, [{}]}, 0x78) 09:08:13 executing program 5: 09:08:13 executing program 3: 09:08:14 executing program 1: 09:08:14 executing program 4: 09:08:14 executing program 0: 09:08:14 executing program 5: 09:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1800000}, [{}]}, 0x78) 09:08:14 executing program 3: 09:08:14 executing program 4: 09:08:14 executing program 1: 09:08:15 executing program 0: 09:08:15 executing program 5: 09:08:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2000000}, [{}]}, 0x78) 09:08:15 executing program 3: 09:08:15 executing program 1: 09:08:15 executing program 4: 09:08:15 executing program 0: 09:08:15 executing program 5: 09:08:15 executing program 3: 09:08:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7000000}, [{}]}, 0x78) 09:08:15 executing program 1: 09:08:16 executing program 4: 09:08:16 executing program 0: 09:08:16 executing program 3: 09:08:16 executing program 5: 09:08:16 executing program 1: 09:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8000000}, [{}]}, 0x78) 09:08:16 executing program 4: 09:08:16 executing program 0: 09:08:17 executing program 5: 09:08:17 executing program 3: 09:08:17 executing program 1: 09:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9000000}, [{}]}, 0x78) 09:08:17 executing program 4: 09:08:17 executing program 0: 09:08:17 executing program 3: 09:08:17 executing program 5: 09:08:17 executing program 1: 09:08:18 executing program 4: 09:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa000000}, [{}]}, 0x78) 09:08:18 executing program 0: 09:08:18 executing program 5: 09:08:18 executing program 1: 09:08:18 executing program 3: 09:08:18 executing program 4: 09:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb000000}, [{}]}, 0x78) 09:08:18 executing program 5: 09:08:18 executing program 1: 09:08:18 executing program 0: 09:08:19 executing program 3: 09:08:19 executing program 4: 09:08:19 executing program 5: 09:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc000000}, [{}]}, 0x78) 09:08:19 executing program 1: 09:08:19 executing program 0: 09:08:19 executing program 3: 09:08:19 executing program 4: 09:08:20 executing program 5: 09:08:20 executing program 1: 09:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd000000}, [{}]}, 0x78) 09:08:20 executing program 0: 09:08:20 executing program 4: 09:08:20 executing program 3: 09:08:20 executing program 5: 09:08:20 executing program 1: 09:08:20 executing program 4: 09:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe000000}, [{}]}, 0x78) 09:08:20 executing program 3: 09:08:20 executing program 0: 09:08:21 executing program 5: 09:08:21 executing program 1: 09:08:21 executing program 4: 09:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf000000}, [{}]}, 0x78) 09:08:21 executing program 3: 09:08:21 executing program 0: 09:08:21 executing program 5: 09:08:21 executing program 1: 09:08:21 executing program 4: 09:08:22 executing program 3: 09:08:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x18000000}, [{}]}, 0x78) 09:08:22 executing program 0: 09:08:22 executing program 1: 09:08:22 executing program 5: 09:08:22 executing program 4: 09:08:22 executing program 3: 09:08:22 executing program 0: 09:08:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a000000}, [{}]}, 0x78) 09:08:23 executing program 1: 09:08:23 executing program 5: 09:08:23 executing program 4: 09:08:23 executing program 3: 09:08:23 executing program 0: 09:08:23 executing program 5: 09:08:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b000000}, [{}]}, 0x78) 09:08:23 executing program 4: 09:08:23 executing program 1: 09:08:23 executing program 3: 09:08:23 executing program 0: 09:08:24 executing program 5: 09:08:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3f000000}, [{}]}, 0x78) 09:08:24 executing program 4: 09:08:24 executing program 1: 09:08:24 executing program 3: 09:08:24 executing program 0: 09:08:24 executing program 5: 09:08:24 executing program 4: 09:08:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f000000}, [{}]}, 0x78) 09:08:25 executing program 1: 09:08:25 executing program 0: 09:08:25 executing program 3: 09:08:25 executing program 5: 09:08:25 executing program 1: 09:08:25 executing program 4: 09:08:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x80ffffff}, [{}]}, 0x78) 09:08:25 executing program 0: 09:08:25 executing program 5: 09:08:25 executing program 3: 09:08:26 executing program 4: 09:08:26 executing program 0: 09:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9bffffff}, [{}]}, 0x78) 09:08:26 executing program 1: 09:08:26 executing program 5: 09:08:26 executing program 3: 09:08:26 executing program 4: 09:08:27 executing program 0: 09:08:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc0000000}, [{}]}, 0x78) 09:08:27 executing program 1: 09:08:27 executing program 5: 09:08:27 executing program 3: 09:08:27 executing program 4: 09:08:27 executing program 0: 09:08:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe0000000}, [{}]}, 0x78) 09:08:27 executing program 1: 09:08:27 executing program 5: 09:08:28 executing program 3: 09:08:28 executing program 4: 09:08:28 executing program 0: 09:08:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xef080000}, [{}]}, 0x78) 09:08:28 executing program 5: 09:08:28 executing program 1: 09:08:28 executing program 3: 09:08:29 executing program 4: 09:08:29 executing program 0: 09:08:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf0000000}, [{}]}, 0x78) 09:08:29 executing program 5: 09:08:29 executing program 1: 09:08:29 executing program 3: 09:08:29 executing program 4: 09:08:29 executing program 0: 09:08:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf8000000}, [{}]}, 0x78) 09:08:30 executing program 5: 09:08:30 executing program 1: 09:08:30 executing program 3: 09:08:30 executing program 0: 09:08:30 executing program 4: 09:08:31 executing program 5: 09:08:31 executing program 1: 09:08:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfc000000}, [{}]}, 0x78) 09:08:31 executing program 3: 09:08:31 executing program 4: 09:08:31 executing program 5: 09:08:31 executing program 1: 09:08:31 executing program 3: 09:08:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffff80}, [{}]}, 0x78) 09:08:32 executing program 4: 09:08:32 executing program 0: 09:08:32 executing program 5: 09:08:32 executing program 1: 09:08:32 executing program 3: 09:08:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffff9b}, [{}]}, 0x78) 09:08:32 executing program 4: 09:08:33 executing program 5: 09:08:33 executing program 3: 09:08:33 executing program 1: 09:08:33 executing program 4: 09:08:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:08:33 executing program 0: 09:08:33 executing program 5: 09:08:33 executing program 4: 09:08:34 executing program 3: 09:08:34 executing program 1: 09:08:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2}, [{}]}, 0x78) 09:08:34 executing program 0: 09:08:34 executing program 5: 09:08:34 executing program 4: 09:08:34 executing program 3: 09:08:34 executing program 1: 09:08:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7}, [{}]}, 0x78) 09:08:35 executing program 0: 09:08:35 executing program 5: 09:08:35 executing program 3: 09:08:35 executing program 4: 09:08:35 executing program 1: 09:08:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8}, [{}]}, 0x78) 09:08:35 executing program 0: 09:08:35 executing program 5: 09:08:36 executing program 3: 09:08:36 executing program 4: 09:08:36 executing program 1: 09:08:36 executing program 0: 09:08:36 executing program 5: 09:08:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9}, [{}]}, 0x78) 09:08:36 executing program 3: 09:08:36 executing program 4: 09:08:37 executing program 1: 09:08:37 executing program 0: 09:08:37 executing program 5: 09:08:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa}, [{}]}, 0x78) 09:08:37 executing program 3: 09:08:37 executing program 1: 09:08:37 executing program 4: 09:08:37 executing program 0: 09:08:38 executing program 5: 09:08:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xb}, [{}]}, 0x78) 09:08:38 executing program 3: 09:08:38 executing program 4: 09:08:38 executing program 1: 09:08:38 executing program 0: 09:08:38 executing program 5: 09:08:38 executing program 3: 09:08:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc}, [{}]}, 0x78) 09:08:39 executing program 4: 09:08:39 executing program 1: 09:08:39 executing program 0: 09:08:39 executing program 5: 09:08:39 executing program 3: 09:08:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd}, [{}]}, 0x78) 09:08:39 executing program 1: 09:08:39 executing program 4: 09:08:40 executing program 0: 09:08:40 executing program 5: 09:08:40 executing program 3: 09:08:40 executing program 1: 09:08:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe}, [{}]}, 0x78) 09:08:40 executing program 4: 09:08:40 executing program 0: 09:08:40 executing program 5: 09:08:40 executing program 3: 09:08:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf}, [{}]}, 0x78) 09:08:41 executing program 1: 09:08:41 executing program 4: 09:08:41 executing program 5: 09:08:41 executing program 0: 09:08:41 executing program 3: 09:08:41 executing program 1: 09:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x18}, [{}]}, 0x78) 09:08:42 executing program 4: 09:08:42 executing program 5: 09:08:42 executing program 0: 09:08:42 executing program 3: 09:08:42 executing program 1: 09:08:42 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[]) 09:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1a}, [{}]}, 0x78) 09:08:42 executing program 5: syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x40) 09:08:42 executing program 0: 09:08:42 executing program 3: 09:08:43 executing program 1: 09:08:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1b}, [{}]}, 0x78) 09:08:43 executing program 4: 09:08:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, '%,H'}) 09:08:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000180)='\n') 09:08:43 executing program 3: perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:08:43 executing program 1: add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="fb", 0x1, 0xfffffffffffffffe) 09:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc0}, [{}]}, 0x78) 09:08:44 executing program 4: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x438001) 09:08:44 executing program 5: keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100)=""/97, 0x61, &(0x7f0000000280)={0x0}) 09:08:44 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ocfs2_control\x00', 0x0, 0x0) 09:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 09:08:44 executing program 1: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000080)="9c", 0x1, 0x4bc}, {&(0x7f0000000140)='\"', 0x1}, {&(0x7f0000000200)="9139", 0x2, 0x7fff}, {&(0x7f0000000300)="cd", 0x1}], 0x0, 0x0) 09:08:44 executing program 4: r0 = add_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000900)='keyring\x00', 0x0, 0x0, 0x0, r0) 09:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe0}, [{}]}, 0x78) 09:08:44 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x240, 0x0) 09:08:45 executing program 3: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000140)='\"', 0x1}, {&(0x7f0000000200)="91", 0x1, 0x7fff}, {&(0x7f0000000400)="1c", 0x1}], 0x0, 0x0) 09:08:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 09:08:45 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x100, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:08:45 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ocfs2_control\x00', 0x1a080, 0x0) 09:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf0}, [{}]}, 0x78) 09:08:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) 09:08:45 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 09:08:45 executing program 5: add_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 1240.658804][ T8733] Bluetooth: hci0: command 0x0401 tx timeout 09:08:46 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) 09:08:46 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/nullb0\x00', 0x0, 0x0) 09:08:46 executing program 4: add_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 09:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf8}, [{}]}, 0x78) 09:08:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 09:08:46 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) 09:08:47 executing program 3: keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)="6ff68e0c4fb614a04f2e24238b8fb69641b3340c90e503e9e279317f858970bc8f6d06da0aaa9494fb2be7fc9e761eed77b10a5e177491c6ffa3c402e0024625bf", 0x41}) 09:08:47 executing program 1: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) 09:08:47 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400000000000008, 0x4c541) 09:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfc}, [{}]}, 0x78) 09:08:47 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x26000, 0x0) 09:08:47 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40100, 0x0) 09:08:47 executing program 3: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) 09:08:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xd, 0x121041) openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x0) write$evdev(r0, &(0x7f0000000200)=[{}], 0x18) 09:08:48 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 09:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x180}, [{}]}, 0x78) 09:08:48 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x470400, 0x0) 09:08:48 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x280080, 0x0) 09:08:48 executing program 0: socketpair(0x2c, 0x0, 0x0, 0x0) 09:08:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:08:48 executing program 1: timer_create(0x3, 0x0, &(0x7f00000001c0)) 09:08:48 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x4}, &(0x7f0000000040)) 09:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x700}, [{}]}, 0x78) 09:08:49 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) 09:08:49 executing program 0: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x200008, &(0x7f0000000200)={[{@noacl='noacl'}, {@statfs_percent={'statfs_percent'}}, {@lockproto_dlm='lockproto=dlm'}, {@localcaching='localcaching'}, {@statfs_percent={'statfs_percent', 0x3d, 0xffffffffffff8001}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xee00}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@measure='measure'}]}) 09:08:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:08:49 executing program 4: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) 09:08:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1244.275145][T20525] gfs2: Bad value for 'statfs_percent' 09:08:49 executing program 3: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) [ 1244.394945][T20525] gfs2: Bad value for 'statfs_percent' 09:08:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8ef}, [{}]}, 0x78) 09:08:50 executing program 0: timer_create(0x2, &(0x7f0000000200)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) 09:08:50 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xec9c0) 09:08:50 executing program 1: pipe(&(0x7f00000013c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') 09:08:50 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 09:08:50 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 09:08:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x900}, [{}]}, 0x78) 09:08:50 executing program 0: clock_gettime(0x0, &(0x7f0000000700)) 09:08:50 executing program 5: socketpair(0x18, 0x0, 0xfffffffd, 0x0) 09:08:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x10001) 09:08:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x7fff}], 0x0, &(0x7f0000000780)=ANY=[]) 09:08:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 09:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa00}, [{}]}, 0x78) 09:08:51 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getitimer(0x0, &(0x7f0000000ac0)) [ 1246.281851][T20567] attempt to access beyond end of device [ 1246.287601][T20567] loop3: rw=4096, want=136, limit=127 [ 1246.293318][T20567] gfs2: error 10 reading superblock 09:08:51 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 09:08:51 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) 09:08:51 executing program 4: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x0) [ 1246.505793][T20567] attempt to access beyond end of device [ 1246.505843][T20567] loop3: rw=4096, want=136, limit=127 [ 1246.505872][T20567] gfs2: error 10 reading superblock 09:08:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 09:08:52 executing program 3: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 09:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xb00}, [{}]}, 0x78) 09:08:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0xb) 09:08:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 09:08:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:08:52 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 09:08:52 executing program 3: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:08:52 executing program 5: setxattr$security_ima(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 09:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc00}, [{}]}, 0x78) 09:08:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 09:08:53 executing program 5: pipe(&(0x7f00000013c0)) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 09:08:53 executing program 0: request_key(&(0x7f0000000840)='cifs.spnego\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0) 09:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd00}, [{}]}, 0x78) 09:08:54 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r0, 0x0) 09:08:54 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x101202, 0x0) 09:08:54 executing program 1: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x161801) 09:08:54 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001c80)={'vcan0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) bind$can_raw(r1, &(0x7f0000001cc0)={0x1d, r2}, 0x10) 09:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000140)) 09:08:54 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='(=)\x00', 0xfffffffffffffff9) 09:08:54 executing program 3: add_key(&(0x7f0000002140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 09:08:54 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ocfs2_control\x00', 0x101002, 0x0) 09:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe00}, [{}]}, 0x78) 09:08:55 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 09:08:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, '%,H', 0xdf}) 09:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 09:08:55 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000000f06010200000000000000000700000805000100070000000500010007000000050001000700000006000b000000000006000b000400000006000bfafeff000052b9a0bef81d142682de212942d68a071acb8aaea526c6699a6bd188bc4e30fd447514442182500aa13b5a221999f2f87493e43117666b808d25f548e5ac6c564fc41c0d9b5c80591abfc435bc8205ac9ec307d19725ff2650706b4525b15ecc6e032c978a6ab357e4bb5aeffe9350ef4bbc62538497a35eda80dccc606e59014a43c87992ea86"], 0x44}}, 0x800) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 09:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf00}, [{}]}, 0x78) 09:08:55 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x1000000, &(0x7f0000000780)=ANY=[]) 09:08:56 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0) 09:08:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:08:56 executing program 5: sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1250.954733][T20657] gfs2: not a GFS2 filesystem 09:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1800}, [{}]}, 0x78) [ 1251.091883][T20657] gfs2: not a GFS2 filesystem 09:08:56 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:08:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:08:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000180)) 09:08:57 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 09:08:57 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, r0, 0x0, 0xffffffffffffffff, 0x0) 09:08:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1a00}, [{}]}, 0x78) 09:08:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 09:08:57 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x4bc}], 0x0, &(0x7f0000000780)=ANY=[]) 09:08:57 executing program 0: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:08:57 executing program 5: mq_open(&(0x7f0000000000)='/*\xfe(%!/:-*/:@,:&*e},+--!\x00', 0x0, 0x0, 0x0) 09:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1b00}, [{}]}, 0x78) 09:08:58 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2a040, 0x0) [ 1252.828960][T20692] attempt to access beyond end of device [ 1252.834856][T20692] loop4: rw=4096, want=136, limit=4 [ 1252.840295][T20692] gfs2: error 10 reading superblock [ 1252.846127][ T9868] Bluetooth: hci0: command 0x0401 tx timeout [ 1252.909641][T20692] attempt to access beyond end of device [ 1252.915384][T20692] loop4: rw=4096, want=136, limit=4 [ 1252.920809][T20692] gfs2: error 10 reading superblock 09:08:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0x62b9}]}) 09:08:58 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 09:08:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 09:08:58 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x0, 0x0) 09:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3f00}, [{}]}, 0x78) 09:08:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) 09:08:59 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) 09:08:59 executing program 4: mq_open(&(0x7f0000000100)='#\xd8%[#\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) 09:08:59 executing program 0: getitimer(0x0, &(0x7f00000003c0)) 09:08:59 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 09:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f00}, [{}]}, 0x78) 09:08:59 executing program 3: write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:08:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00') 09:08:59 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 09:09:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 09:09:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 09:09:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc000}, [{}]}, 0x78) 09:09:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x87cb}]}) 09:09:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 09:09:00 executing program 4: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000200)="91", 0x1, 0x7fff}], 0x0, 0x0) 09:09:00 executing program 0: socket(0x22, 0x0, 0x101) 09:09:00 executing program 5: socketpair(0x2, 0x1, 0x3, 0x0) 09:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe000}, [{}]}, 0x78) 09:09:01 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6000) 09:09:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) 09:09:01 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 09:09:01 executing program 4: socketpair(0x0, 0x4b25fc801f86b490, 0x0, 0x0) 09:09:01 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 09:09:01 executing program 0: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 09:09:01 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0xc) 09:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xef08}, [{}]}, 0x78) 09:09:01 executing program 1: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x4040) 09:09:02 executing program 4: timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) 09:09:02 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 09:09:02 executing program 3: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{0x0}], 0x0, 0x0) 09:09:02 executing program 0: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) 09:09:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') 09:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf000}, [{}]}, 0x78) 09:09:03 executing program 4: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) 09:09:03 executing program 1: mq_open(&(0x7f0000000100)='#\xd8%[#\x00', 0x0, 0x0, &(0x7f0000000140)) 09:09:03 executing program 0: syz_open_dev$sg(&(0x7f00000006c0)='/dev/sg#\x00', 0x0, 0x490000) 09:09:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') 09:09:03 executing program 3: socketpair(0x11, 0xa, 0x800, 0x0) 09:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf800}, [{}]}, 0x78) 09:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000100)) 09:09:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) 09:09:04 executing program 1: request_key(&(0x7f0000000840)='cifs.spnego\x00', &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)='/dev/nvme-fabrics\x00', 0x0) 09:09:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x87cb}]}) 09:09:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, 0x0) 09:09:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfc00}, [{}]}, 0x78) 09:09:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) 09:09:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 09:09:05 executing program 1: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='Z', 0x1}, {0x0}], 0x2, 0x0) 09:09:05 executing program 0: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) 09:09:05 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 09:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, [{}]}, 0x78) 09:09:05 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) 09:09:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 09:09:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000300)) 09:09:05 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x109401) 09:09:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000340)={0x18}, 0x18) 09:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [{}]}, 0x78) 09:09:06 executing program 4: add_key(&(0x7f0000000340)='ceph\x00', 0x0, &(0x7f00000003c0)="efa94c5ed0862f06329c10a8", 0xc, 0xfffffffffffffffc) [ 1261.027126][ T27] audit: type=1800 audit(1602148146.347:29): pid=20864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16369 res=0 errno=0 09:09:06 executing program 1: keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100)=""/97, 0x61, &(0x7f0000000280)={0x0}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x50, r0, 0x0, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e35b999af5c1bf49b86d596712ac6ce4"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "42e16e3268b2312046de57a38898a9ed"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 09:09:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f4, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, 0x0) 09:09:06 executing program 5: read$snddsp(0xffffffffffffffff, 0x0, 0x0) 09:09:06 executing program 0: io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:09:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:09:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x181041, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6}]}) write$ppp(r0, &(0x7f0000000040), 0x0) 09:09:07 executing program 1: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 09:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9}, [{}]}, 0x78) 09:09:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 09:09:07 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ocfs2_control\x00', 0x101002, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 09:09:07 executing program 5: r0 = mq_open(&(0x7f0000000100)='#\xd8%[#\x00', 0x0, 0x0, 0x0) dup(r0) 09:09:08 executing program 0: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500)='NLBL_CIPSOv4\x00') 09:09:08 executing program 1: msgget(0x1, 0x56e1517fd24e062e) 09:09:08 executing program 3: socketpair(0x18, 0x0, 0x6, 0x0) 09:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, [{}]}, 0x78) 09:09:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 09:09:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback, @in=@remote}]}]}, 0xa0}}, 0x0) 09:09:08 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)) 09:09:08 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ashmem\x00', 0x0, 0x0) 09:09:09 executing program 4: perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 09:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xd}, [{}]}, 0x78) 09:09:09 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xe7e55f5136d5ae5, 0x0) 09:09:09 executing program 0: pipe(&(0x7f00000013c0)) getresgid(&(0x7f0000000000), 0x0, 0x0) 09:09:09 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:09:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001940)={'vcan0\x00'}) 09:09:09 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x0, 0x0) 09:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9b}, [{}]}, 0x78) 09:09:10 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r0, 0x0, 0x0) 09:09:10 executing program 5: msgsnd(0x0, &(0x7f00000004c0), 0x8, 0x0) 09:09:10 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 09:09:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/input/handlers\x00', 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 09:09:10 executing program 4: r0 = msgget(0x1, 0x56e1517fd24e062e) msgctl$IPC_RMID(r0, 0x0) 09:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xf0}, [{}]}, 0x78) 09:09:10 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 09:09:11 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x101002, 0x0) 09:09:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:11 executing program 1: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 09:09:11 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x6400, 0x0) 09:09:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xf8}, [{}]}, 0x78) 09:09:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x200008, &(0x7f0000000200)={[{@noacl='noacl'}, {@statfs_percent={'statfs_percent'}}, {@noacl='noacl'}, {@lockproto_dlm='lockproto=dlm'}, {@localcaching='localcaching'}, {@statfs_percent={'statfs_percent', 0x3d, 0xffffffffffff8001}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '#-'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@measure='measure'}]}) 09:09:11 executing program 0: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) 09:09:11 executing program 5: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:12 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfc}, [{}]}, 0x78) 09:09:12 executing program 0: socket$inet(0x2, 0x0, 0xdd) [ 1266.931098][T20982] gfs2: Bad value for 'statfs_percent' [ 1267.022951][T20982] gfs2: Bad value for 'statfs_percent' 09:09:12 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800), 0x10) 09:09:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, 0x0}, 0x0) 09:09:12 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/input/handlers\x00', 0x0, 0x0) 09:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200b}, [{}]}, 0x78) 09:09:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 09:09:13 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, 0x0) 09:09:13 executing program 0: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x200008, 0x0) 09:09:13 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) socketpair(0x1d, 0x3, 0x4, &(0x7f0000000140)) 09:09:13 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0) 09:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200c}, [{}]}, 0x78) 09:09:13 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) [ 1268.675311][T21025] can: request_module (can-proto-4) failed. 09:09:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 09:09:14 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000980), 0x4, &(0x7f0000000a00)) 09:09:14 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f00000004c0), 0x6) 09:09:14 executing program 4: socketpair(0x2, 0x2, 0x5, 0x0) 09:09:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200d}, [{}]}, 0x78) 09:09:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) 09:09:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000280)="934b27b7c1cdef94665fd8e8d66953c0", 0x10) 09:09:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)) 09:09:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) pipe(0x0) 09:09:15 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x48080, 0x0) 09:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200e}, [{}]}, 0x78) 09:09:15 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000140)) 09:09:15 executing program 1: uname(&(0x7f00000032c0)=""/249) 09:09:15 executing program 0: io_setup(0x0, &(0x7f0000000140)) 09:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) 09:09:16 executing program 3: clock_getres(0x0, &(0x7f0000000600)) 09:09:16 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) 09:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200f}, [{}]}, 0x78) 09:09:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) 09:09:16 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 09:09:17 executing program 1: timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) 09:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfeff}, [{}]}, 0x78) 09:09:17 executing program 0: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}) 09:09:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) 09:09:17 executing program 4: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) 09:09:17 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000080)="9c6364a9bfdcc06f48270a6e94262b302d2a56b1bd1483886968176756de5ebdce20cb5bbea4be886f1cce746147a67392c85b01a0979fa9dedcd5ea082b24cd47f4904ec1a99c3318270ce214c62f7378d134887064c776a1e2f56afb1b9a41d51f11b3535a8a6531e7e242dac60c09e10b3bbeb745919211ba302517c1f6035e3c5129e556abadd64304772fab6c89f9c6acb9ed3b9a8dd34556", 0x9b, 0x4bc}, {&(0x7f0000000140)='\"', 0x1, 0x2}, {&(0x7f0000000200)="91395657cb21bb53503b383eb20d89859a6f3969728dd14e904d14576aa1db3647d37d51b7b3c74108982e0c3f7ff356d405850e0555", 0x36, 0x7fff}, {&(0x7f0000000300)="cdb83242a453c20ac4d693e5b4f4cb1b810d3aa9b46f6a6e88eb26", 0x1b, 0x7}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='qu']) 09:09:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000007c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30) 09:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:09:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 09:09:18 executing program 0: add_key(&(0x7f0000000b80)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 09:09:18 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 09:09:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x34, 0x0, 0x0, "6ee1f1ea31af017c12cf839e3383303179de5ae6119c0b413910b80215db08fb541bba077147824994a9cfaa0f3d456a186c2f73"}) 09:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) 09:09:19 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000180)) 09:09:19 executing program 5: socketpair(0x22, 0x0, 0x7, 0x0) 09:09:19 executing program 4: add_key(&(0x7f0000000280)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 09:09:19 executing program 0: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000640)={0x22, 0xff, 0x0, 0x0, 0x3}, 0x6) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080), 0x0, 0x4bc}, {&(0x7f0000000140)="2237ce4d445d3ebd7e07c522f6714c96b3b7fafbda53e1e12de40f5df920629fab4dbc558b8570dab26d88e5e98fa4ad2b5c7fb8e5c32a749a7bb67c5510e4217cba9f4b32ac2eecfdbc4a51d25b4d1c8b787ed83d4859b2379c8a1eac41a9d12f56b5cbd0ad87cac29baa1883dd8498c4c6752b369ee8e6f9c11fd45e85b47db0313164636716c570d7450ab08ead18a3fe1fdc8be280da72000484ba3355e8e2ec78", 0xa3, 0x2}, {&(0x7f0000000200)="91395657cb21bb53503b383eb20d89859a6f3969728dd14e904d14576aa1db3647d37d51b7b3c74108982e0c3f7ff356d405850e055550d9269626cb77107f0d0099dec0fb14088cdfa7ffb3fbc55d8dae9a7987d91333b276c5621e036bc625e56b20a8a543e48ba6fe46b971bf5a3e6c679d781aa8f451002ccfefa5f525b20e4ec8ad792e10b1fd733ada6cc1544609636d3f35e446c307f03c1519ca10eef37ea6988a3a371e874b567468ba517fd008cd79b6448d1807ee4c5e473d0d1a0003d78094bce97ae8d6f3b71a04d247b84f6d9d1a", 0xd5, 0x7fff}, {&(0x7f0000000300), 0x0, 0x7}, {&(0x7f0000000400)="1c78f9233920400aa5d0745b6492cd715a", 0x11, 0x4}], 0x1000000, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) 09:09:19 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x10001}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 09:09:19 executing program 5: getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) 09:09:19 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xfffffffffffffeae) 09:09:20 executing program 4: socketpair(0x23, 0x0, 0x2000000, 0x0) [ 1274.690288][T21136] gfs2: Unknown parameter 'pcr' 09:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x7}, [{}]}, 0x78) [ 1274.799780][T21138] gfs2: Unknown parameter 'pcr' 09:09:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 09:09:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 09:09:20 executing program 3: syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) 09:09:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xbe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:20 executing program 1: syz_open_dev$sg(&(0x7f00000006c0)='/dev/sg#\x00', 0x0, 0x480000) 09:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x8}, [{}]}, 0x78) 09:09:20 executing program 5: msgsnd(0x0, &(0x7f00000004c0)={0x1}, 0x8, 0x0) 09:09:21 executing program 0: socketpair(0x28, 0x0, 0x7, 0x0) 09:09:21 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000140)) 09:09:21 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x81, 0x5, 0x3], [], 0x0, 0x0, 0x0, 0x5000000}) 09:09:21 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4400, 0x0) 09:09:21 executing program 5: socket$inet(0x2, 0x800cdc613f7394a8, 0x0) 09:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x9}, [{}]}, 0x78) 09:09:21 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x280080, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 09:09:22 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 09:09:22 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000200)=""/4096, 0x1000) 09:09:22 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/nvme-fabrics\x00', 0x40000, 0x0) 09:09:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/kvm\x00', 0x2, 0x0) 09:09:22 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x10001}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 09:09:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xa}, [{}]}, 0x78) 09:09:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:09:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8}]}) 09:09:23 executing program 5: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff1bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:09:23 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x1000000, &(0x7f0000000780)=ANY=[@ANYBLOB="71756f74613d6f6e2c6e6f7265636f766572792c6e6f726772706c76622c626172726965722c646174613d6f7264657265642c6c6f636b7461626c653d7d27402d2c6d6574612c6e6f6c6f63636f6f6b69652c6e6f646973636172642c7063723d30303030303030303030303030303030303030392c736da0218f93b322182c"]) 09:09:23 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) 09:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xb}, [{}]}, 0x78) 09:09:23 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) [ 1278.247083][T21210] gfs2: Unknown parameter 'pcr' 09:09:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40000, 0x0) 09:09:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r1 = dup(r0) write$cgroup_type(r1, 0x0, 0x0) [ 1278.452025][T21210] gfs2: Unknown parameter 'pcr' 09:09:23 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) 09:09:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r0, 0x0, 0x0) 09:09:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 09:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc}, [{}]}, 0x78) 09:09:24 executing program 4: socketpair(0x25, 0x0, 0x0, 0x0) 09:09:24 executing program 3: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f0000000200)}, {0x0}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB]) 09:09:24 executing program 1: socketpair(0x22, 0x0, 0x0, 0x0) 09:09:24 executing program 5: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) 09:09:24 executing program 0: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f4, 0x2) 09:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xd}, [{}]}, 0x78) 09:09:25 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)) 09:09:25 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000980), 0x4, &(0x7f0000000a00)) 09:09:25 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 09:09:25 executing program 5: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000200)="91", 0x1}], 0x0, 0x0) 09:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe}, [{}]}, 0x78) 09:09:25 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 09:09:26 executing program 4: r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) shmdt(r0) 09:09:26 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000980), 0x0, &(0x7f0000000a00)) 09:09:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:09:26 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 09:09:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf}, [{}]}, 0x78) 09:09:26 executing program 0: timer_create(0x1, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000180)) 09:09:26 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[]) 09:09:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 09:09:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 09:09:27 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000180)='blacklist\x00', 0x0, 0x0) 09:09:27 executing program 5: io_setup(0xdb2, &(0x7f0000000140)) 09:09:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x18}, [{}]}, 0x78) 09:09:27 executing program 0: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 09:09:27 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:09:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x0, 0x0}) 09:09:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1a}, [{}]}, 0x78) 09:09:28 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:09:28 executing program 5: syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x28280) 09:09:28 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0xd2896a338e7afadb) 09:09:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x200008, &(0x7f0000000200)={[{@noacl='noacl'}, {@statfs_percent={'statfs_percent', 0x3d, 0x3}}, {@lockproto_dlm='lockproto=dlm'}, {@lockproto_dlm='lockproto=dlm'}, {@localcaching='localcaching'}, {@statfs_percent={'statfs_percent', 0x3d, 0xffffffffffff8001}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xee00}}, {@subj_role={'subj_role', 0x3d, '#-'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@measure='measure'}]}) 09:09:28 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000780)=ANY=[]) 09:09:28 executing program 1: bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 09:09:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1b}, [{}]}, 0x78) 09:09:29 executing program 5: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1000, 0x4040) 09:09:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) [ 1283.862055][T21317] gfs2: Bad value for 'statfs_percent' [ 1283.961467][T21317] gfs2: Bad value for 'statfs_percent' [ 1283.977110][T21319] gfs2: not a GFS2 filesystem 09:09:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x7fffffff}}, 0x18) [ 1284.158940][T21319] gfs2: not a GFS2 filesystem 09:09:29 executing program 3: add_key(&(0x7f0000000340)='ceph\x00', 0x0, &(0x7f00000003c0)="ef", 0x1, 0xfffffffffffffffc) 09:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc0}, [{}]}, 0x78) 09:09:29 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 09:09:29 executing program 4: add_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="c9", 0x1, 0xfffffffffffffffb) 09:09:29 executing program 0: timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) 09:09:30 executing program 1: syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x100, 0x40a00) 09:09:30 executing program 5: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000080)="9c", 0x1, 0x4bc}, {&(0x7f0000000140)='\"', 0x1}, {&(0x7f0000000200)="9139", 0x2, 0x7fff}, {0x0}], 0x0, 0x0) 09:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe0}, [{}]}, 0x78) 09:09:30 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, &(0x7f0000000200)) 09:09:30 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000180)) 09:09:30 executing program 0: 09:09:31 executing program 5: 09:09:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020002020000000ddf4655fddf4655f01f7feff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000040)="00000000eaffffff000007006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000002c0)) 09:09:31 executing program 0: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000080)="9c", 0x1, 0x4bc}, {&(0x7f0000000140)='\"', 0x1}, {&(0x7f0000000200)="91", 0x1, 0x7fff}, {&(0x7f0000000300)="cd", 0x1}], 0x0, 0x0) 09:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf0}, [{}]}, 0x78) 09:09:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 09:09:31 executing program 4: socketpair(0x15, 0x5, 0x7, 0x0) 09:09:31 executing program 5: [ 1286.469557][T21372] EXT4-fs (loop1): #clusters per group too big: 536879104 09:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf8}, [{}]}, 0x78) 09:09:32 executing program 0: 09:09:32 executing program 4: 09:09:32 executing program 3: 09:09:32 executing program 1: 09:09:32 executing program 5: 09:09:32 executing program 4: 09:09:32 executing program 0: 09:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xfc}, [{}]}, 0x78) 09:09:32 executing program 3: 09:09:32 executing program 1: 09:09:32 executing program 5: 09:09:33 executing program 0: 09:09:33 executing program 4: 09:09:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x180}, [{}]}, 0x78) 09:09:33 executing program 3: 09:09:33 executing program 1: 09:09:33 executing program 5: 09:09:33 executing program 0: 09:09:34 executing program 4: 09:09:34 executing program 3: 09:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x700}, [{}]}, 0x78) 09:09:34 executing program 1: 09:09:34 executing program 5: 09:09:34 executing program 0: 09:09:34 executing program 4: 09:09:34 executing program 3: 09:09:34 executing program 1: 09:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x8ef}, [{}]}, 0x78) 09:09:34 executing program 5: 09:09:35 executing program 0: 09:09:35 executing program 4: 09:09:35 executing program 3: 09:09:35 executing program 1: 09:09:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x900}, [{}]}, 0x78) 09:09:35 executing program 5: 09:09:36 executing program 0: 09:09:36 executing program 4: 09:09:36 executing program 3: 09:09:36 executing program 1: 09:09:36 executing program 5: 09:09:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xa00}, [{}]}, 0x78) 09:09:36 executing program 0: 09:09:36 executing program 3: 09:09:36 executing program 4: 09:09:36 executing program 1: 09:09:37 executing program 5: 09:09:37 executing program 0: 09:09:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xb00}, [{}]}, 0x78) 09:09:37 executing program 4: 09:09:37 executing program 3: 09:09:37 executing program 5: 09:09:37 executing program 1: 09:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc00}, [{}]}, 0x78) 09:09:38 executing program 0: 09:09:38 executing program 4: 09:09:38 executing program 3: 09:09:38 executing program 5: 09:09:38 executing program 1: 09:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xd00}, [{}]}, 0x78) 09:09:38 executing program 0: 09:09:39 executing program 4: 09:09:39 executing program 3: 09:09:39 executing program 5: 09:09:40 executing program 3: 09:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe00}, [{}]}, 0x78) 09:09:40 executing program 0: 09:09:40 executing program 5: 09:09:40 executing program 4: 09:09:40 executing program 1: 09:09:40 executing program 0: 09:09:40 executing program 3: 09:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf00}, [{}]}, 0x78) 09:09:40 executing program 5: 09:09:40 executing program 1: 09:09:41 executing program 4: 09:09:41 executing program 3: 09:09:41 executing program 0: 09:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1800}, [{}]}, 0x78) 09:09:41 executing program 1: 09:09:41 executing program 5: 09:09:41 executing program 4: 09:09:41 executing program 3: 09:09:42 executing program 0: 09:09:42 executing program 1: 09:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1a00}, [{}]}, 0x78) 09:09:42 executing program 5: 09:09:42 executing program 4: 09:09:42 executing program 3: 09:09:42 executing program 1: 09:09:42 executing program 0: 09:09:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1b00}, [{}]}, 0x78) 09:09:43 executing program 5: 09:09:43 executing program 4: 09:09:43 executing program 3: 09:09:43 executing program 0: 09:09:43 executing program 1: 09:09:43 executing program 5: 09:09:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x3f00}, [{}]}, 0x78) 09:09:43 executing program 4: 09:09:44 executing program 0: 09:09:44 executing program 3: 09:09:44 executing program 1: 09:09:44 executing program 5: 09:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x7f00}, [{}]}, 0x78) 09:09:44 executing program 4: 09:09:44 executing program 3: 09:09:44 executing program 0: 09:09:44 executing program 1: 09:09:45 executing program 5: 09:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc000}, [{}]}, 0x78) 09:09:45 executing program 4: 09:09:45 executing program 3: 09:09:45 executing program 0: 09:09:45 executing program 1: 09:09:45 executing program 5: 09:09:45 executing program 4: 09:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe000}, [{}]}, 0x78) 09:09:46 executing program 3: 09:09:46 executing program 0: 09:09:46 executing program 1: 09:09:46 executing program 5: 09:09:46 executing program 4: 09:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xef08}, [{}]}, 0x78) 09:09:46 executing program 3: 09:09:46 executing program 0: 09:09:46 executing program 1: 09:09:47 executing program 5: 09:09:47 executing program 4: 09:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf000}, [{}]}, 0x78) 09:09:47 executing program 3: 09:09:47 executing program 0: 09:09:47 executing program 1: 09:09:47 executing program 5: 09:09:47 executing program 4: 09:09:48 executing program 3: 09:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf800}, [{}]}, 0x78) 09:09:48 executing program 1: 09:09:48 executing program 0: 09:09:48 executing program 5: 09:09:48 executing program 4: 09:09:48 executing program 3: 09:09:49 executing program 1: 09:09:49 executing program 0: 09:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xfc00}, [{}]}, 0x78) 09:09:49 executing program 5: 09:09:49 executing program 4: 09:09:49 executing program 3: 09:09:49 executing program 0: 09:09:49 executing program 1: 09:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:09:50 executing program 5: 09:09:50 executing program 4: 09:09:50 executing program 3: 09:09:50 executing program 1: 09:09:50 executing program 0: 09:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x2}, [{}]}, 0x78) 09:09:50 executing program 5: 09:09:50 executing program 4: 09:09:50 executing program 3: 09:09:50 executing program 1: 09:09:51 executing program 5: 09:09:51 executing program 0: 09:09:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x7}, [{}]}, 0x78) 09:09:51 executing program 4: 09:09:51 executing program 1: 09:09:51 executing program 3: 09:09:51 executing program 0: 09:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x8}, [{}]}, 0x78) 09:09:52 executing program 5: 09:09:52 executing program 4: 09:09:52 executing program 1: 09:09:52 executing program 3: 09:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x9}, [{}]}, 0x78) 09:09:52 executing program 0: 09:09:52 executing program 5: 09:09:52 executing program 4: 09:09:52 executing program 1: 09:09:53 executing program 3: 09:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xa}, [{}]}, 0x78) 09:09:53 executing program 0: 09:09:53 executing program 5: 09:09:53 executing program 4: 09:09:53 executing program 1: 09:09:53 executing program 3: 09:09:54 executing program 0: 09:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xb}, [{}]}, 0x78) 09:09:54 executing program 5: 09:09:54 executing program 4: 09:09:54 executing program 3: 09:09:54 executing program 1: 09:09:54 executing program 0: 09:09:54 executing program 5: 09:09:54 executing program 4: 09:09:54 executing program 3: 09:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xc}, [{}]}, 0x78) 09:09:54 executing program 1: 09:09:55 executing program 0: 09:09:55 executing program 5: 09:09:55 executing program 4: 09:09:55 executing program 3: 09:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xd}, [{}]}, 0x78) 09:09:55 executing program 1: 09:09:55 executing program 0: 09:09:55 executing program 5: 09:09:56 executing program 4: 09:09:56 executing program 3: 09:09:56 executing program 1: 09:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xe}, [{}]}, 0x78) 09:09:56 executing program 5: 09:09:56 executing program 0: 09:09:56 executing program 4: 09:09:56 executing program 1: 09:09:56 executing program 3: 09:09:57 executing program 5: 09:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf}, [{}]}, 0x78) 09:09:57 executing program 0: 09:09:57 executing program 4: 09:09:57 executing program 3: 09:09:57 executing program 1: 09:09:57 executing program 5: 09:09:57 executing program 0: 09:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x18}, [{}]}, 0x78) 09:09:58 executing program 4: 09:09:58 executing program 3: 09:09:58 executing program 1: 09:09:58 executing program 5: 09:09:58 executing program 0: 09:09:58 executing program 4: 09:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1a}, [{}]}, 0x78) 09:09:58 executing program 3: 09:09:58 executing program 1: 09:09:59 executing program 0: 09:09:59 executing program 5: 09:09:59 executing program 4: 09:09:59 executing program 3: 09:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1b}, [{}]}, 0x78) 09:09:59 executing program 1: 09:09:59 executing program 5: 09:09:59 executing program 0: 09:10:00 executing program 5: 09:10:00 executing program 3: 09:10:00 executing program 0: 09:10:00 executing program 4: 09:10:00 executing program 1: 09:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xc0}, [{}]}, 0x78) 09:10:01 executing program 0: 09:10:01 executing program 5: 09:10:01 executing program 3: 09:10:01 executing program 4: 09:10:01 executing program 1: 09:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xe0}, [{}]}, 0x78) 09:10:01 executing program 0: 09:10:01 executing program 3: 09:10:02 executing program 5: 09:10:02 executing program 4: 09:10:02 executing program 1: 09:10:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf0}, [{}]}, 0x78) 09:10:02 executing program 0: 09:10:02 executing program 4: 09:10:02 executing program 3: 09:10:02 executing program 5: 09:10:02 executing program 1: 09:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf8}, [{}]}, 0x78) 09:10:03 executing program 0: 09:10:03 executing program 3: 09:10:03 executing program 5: 09:10:03 executing program 4: 09:10:03 executing program 1: 09:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfc}, [{}]}, 0x78) 09:10:03 executing program 0: 09:10:04 executing program 3: 09:10:04 executing program 5: 09:10:04 executing program 4: 09:10:04 executing program 1: 09:10:04 executing program 3: 09:10:04 executing program 0: 09:10:04 executing program 5: 09:10:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x180}, [{}]}, 0x78) 09:10:04 executing program 4: 09:10:04 executing program 1: 09:10:05 executing program 0: 09:10:05 executing program 3: 09:10:05 executing program 5: 09:10:05 executing program 4: 09:10:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x700}, [{}]}, 0x78) 09:10:05 executing program 1: 09:10:05 executing program 3: 09:10:05 executing program 0: 09:10:06 executing program 5: 09:10:06 executing program 4: 09:10:06 executing program 1: 09:10:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x8ef}, [{}]}, 0x78) 09:10:06 executing program 3: 09:10:06 executing program 0: 09:10:06 executing program 5: 09:10:06 executing program 4: 09:10:07 executing program 1: 09:10:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x900}, [{}]}, 0x78) 09:10:07 executing program 3: 09:10:07 executing program 0: 09:10:07 executing program 5: 09:10:07 executing program 4: 09:10:07 executing program 1: 09:10:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xa00}, [{}]}, 0x78) 09:10:07 executing program 3: 09:10:07 executing program 0: 09:10:07 executing program 5: 09:10:08 executing program 4: 09:10:08 executing program 1: 09:10:08 executing program 3: 09:10:08 executing program 0: 09:10:08 executing program 5: 09:10:08 executing program 4: 09:10:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xb00}, [{}]}, 0x78) 09:10:09 executing program 1: 09:10:09 executing program 5: 09:10:09 executing program 0: 09:10:09 executing program 3: 09:10:09 executing program 4: 09:10:09 executing program 1: 09:10:09 executing program 0: 09:10:10 executing program 5: 09:10:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xc00}, [{}]}, 0x78) 09:10:10 executing program 4: 09:10:10 executing program 3: 09:10:10 executing program 0: 09:10:10 executing program 1: 09:10:10 executing program 5: 09:10:10 executing program 4: 09:10:11 executing program 3: 09:10:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xd00}, [{}]}, 0x78) 09:10:11 executing program 0: 09:10:11 executing program 5: 09:10:11 executing program 4: 09:10:11 executing program 1: 09:10:11 executing program 3: 09:10:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xe00}, [{}]}, 0x78) 09:10:11 executing program 0: 09:10:12 executing program 1: 09:10:12 executing program 4: 09:10:12 executing program 5: 09:10:12 executing program 3: 09:10:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf00}, [{}]}, 0x78) 09:10:12 executing program 0: 09:10:12 executing program 1: 09:10:12 executing program 5: 09:10:12 executing program 3: 09:10:12 executing program 4: 09:10:13 executing program 1: 09:10:13 executing program 0: 09:10:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1800}, [{}]}, 0x78) 09:10:13 executing program 5: clock_gettime(0x0, 0x0) unshare(0x4c040280) 09:10:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xa}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 09:10:13 executing program 4: [ 1328.348843][T21900] IPVS: ftp: loaded support on port[0] = 21 09:10:13 executing program 1: 09:10:14 executing program 0: 09:10:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1a00}, [{}]}, 0x78) 09:10:14 executing program 4: 09:10:14 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'erspan0\x00', 0x0}) 09:10:14 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:10:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) [ 1329.262377][T16503] tipc: TX() has been purged, node left! 09:10:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp, @isdn, @l2tp={0x2, 0x0, @private}}) 09:10:14 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 09:10:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1b00}, [{}]}, 0x78) 09:10:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0xe) 09:10:15 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40000000) 09:10:15 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 09:10:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 09:10:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x3f00}, [{}]}, 0x78) 09:10:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) 09:10:15 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) socketpair(0x1, 0x0, 0x1f4c, &(0x7f0000001ac0)) 09:10:16 executing program 0: bpf$MAP_CREATE(0xf, &(0x7f0000000040), 0x40) 09:10:16 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 09:10:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 09:10:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x7f00}, [{}]}, 0x78) 09:10:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a}, 0x12) 09:10:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:10:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x8}, 0x40) 09:10:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:17 executing program 3: select(0x40, &(0x7f0000003000), 0x0, &(0x7f0000003080), &(0x7f00000030c0)={0x0, 0xea60}) 09:10:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xc000}, [{}]}, 0x78) 09:10:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 09:10:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'sit0\x00', 0x0}) 09:10:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003000)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}], 0x1, 0x0) 09:10:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x2}]}, 0x1c}}, 0x0) 09:10:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xe000}, [{}]}, 0x78) 09:10:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001a00)={{}, 0x0, 0x0, @unused, @devid}) 09:10:18 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 09:10:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 09:10:18 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0xff5ab04310cfe3d6) 09:10:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) 09:10:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20}}, 0x0) 09:10:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xef08}, [{}]}, 0x78) 09:10:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8915, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x10142, 0x0, 0x0) 09:10:19 executing program 3: syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 09:10:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "2325f77f65d14e573980d88f6b94e6f458f14df2ed057fb0bc6b48a99aa6553e4c8826591a1427982ffa4e0d0c85a575cb27d31eb240b3a88cc3cfdb84c7db453c29d1aef820cfa9e4eb9a16d5d7996ddd958889ca80825464c984d52c42674abfcb033cb03deea00dcfdf69ada74766fa41b8eeff8048bb3f6336e04fdf3412337965401ce05fbf86532280f27fc596eb36398242e4a84fa5f73b1e7b0cf9791837f3aee7c23f19268556a75d74be28eb27c9ee87cb34737c39e4b0f4104f36eaeccef2758801e40a58242be6"}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "cb2d4d84583a3e6bda11cb6c8d8fbb62f94ec92895a124e0f57347be0cbeeece4b20bca492868bccd58e21e09f3ea433b1aa7f7ffeb86cfb58978e49d1ea38fcdc5cf049a59d1fa0c3cfd863c7295156fa5a5517db31f890c43c2c0a538d2f962d3f7cf97cf79fd75caf56198eb17cfe62541973a5f1872fa1c2be15487c32c5dd124e331803fdbeae29224688d77e2143c9490432e10b07ff7645523e0831ba2f9682236a4245f08eb4de439a03218cb25afad175690d6d35565a30b55394b8854fe523e6ec1acd9dfdc7cb3a7e95807711cf5e1e9d46"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')s,$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '=]&+:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfa\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']$!,*$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$%/]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(\'\'+*)-\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xc31, 0x5, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2404c8c1}, 0x0) 09:10:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000940)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}}, 0x0) 09:10:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf000}, [{}]}, 0x78) 09:10:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 09:10:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 09:10:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x2c}}, 0x0) 09:10:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8953, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x8}, 0x40) 09:10:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xf800}, [{}]}, 0x78) 09:10:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f00000033c0)) 09:10:20 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 09:10:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x33}, @loopback}}) 09:10:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfc00}, [{}]}, 0x78) 09:10:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x13}, 0x13}}, 0x0) 09:10:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc}, 0x40) [ 1336.369245][T22067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22067 comm=syz-executor.3 09:10:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0xde00}]}, 0x1c}}, 0x0) 09:10:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:10:22 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 09:10:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb3}, 0x40) 09:10:22 executing program 3: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 09:10:22 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 09:10:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:10:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000e0601"], 0x2c}}, 0x0) 09:10:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f0000000680)={'tunl0\x00', 0x0}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000002) 09:10:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2}, [{}]}, 0x78) 09:10:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) 09:10:22 executing program 1: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0) [ 1337.788107][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:10:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7}, [{}]}, 0x78) 09:10:23 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 09:10:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x4000}]}, 0x1c}}, 0x0) 09:10:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000640)=ANY=[]}) 09:10:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="13000000", @ANYRES16=r0, @ANYBLOB="01"], 0x14}}, 0x0) 09:10:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 09:10:24 executing program 4: select(0x0, 0x0, &(0x7f0000003040), 0x0, &(0x7f00000030c0)={0x0, 0xea60}) 09:10:24 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000001a00)) 09:10:24 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) 09:10:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8}, [{}]}, 0x78) 09:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 09:10:24 executing program 0: select(0x40, &(0x7f0000003000), &(0x7f0000003040), &(0x7f0000003080), &(0x7f00000030c0)={0x0, 0xea60}) 09:10:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) 09:10:24 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={[0x3]}, 0x8}) 09:10:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9}, [{}]}, 0x78) 09:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "2325f77f65d14e573980d88f6b94e6f458f14df2ed057fb0bc6b48a99aa6553e4c8826591a1427982ffa4e0d0c85a575cb27d31eb240b3a88cc3cfdb84c7db453c29d1aef820cfa9e4eb9a16d5d7996ddd958889ca80825464c984d52c42674abfcb033cb03deea00dcfdf69ada74766fa41b8eeff8048bb3f6336e04fdf3412337965401ce05fbf86532280f27fc596eb36398242e4a84fa5f73b1e7b0cf9791837f3aee7c23f19268556a75d74be28eb27c9ee87cb34737c39e4b0f4104f36eaeccef2758801e40a58242be663"}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "cb2d4d84583a3e6bda11cb6c8d8fbb62f94ec92895a124e0f57347be0cbeeece4b20bca492868bccd58e21e09f3ea433b1aa7f7ffeb86cfb58978e49d1ea38fcdc5cf049a59d1fa0c3cfd863c7295156fa5a5517db31f890c43c2c0a538d2f962d3f7cf97cf79fd75caf56198eb17cfe62541973a5f1872fa1c2be15487c32c5dd124e331803fdbeae29224688d77e2143c9490432e10b07ff7645523e0831ba2f9682236a4245f08eb4de439a03218cb25afad175690d6d35565a30b55394b8854fe523e6ec1acd9dfdc7cb3a7e95807711cf5e1e"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')s,$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '=]&+:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfa\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']$!,*$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$%/]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(\'\'+*)-\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xc31, 0x5, "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"}]}]}, 0xec4}}, 0x40) 09:10:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x58, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x8e, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) 09:10:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2) 09:10:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xa}, [{}]}, 0x78) 09:10:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x80108906, 0x0) 09:10:25 executing program 4: pipe(&(0x7f0000002c80)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) [ 1340.329218][T22153] netlink: 'syz-executor.0': attribute type 142 has an invalid length. [ 1340.400832][T22156] netlink: 'syz-executor.0': attribute type 142 has an invalid length. 09:10:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 09:10:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000001a80)) 09:10:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8980, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e) 09:10:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xb}, [{}]}, 0x78) 09:10:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000008680)={&(0x7f0000000640), 0xc, &(0x7f0000008640)={&(0x7f00000027c0)=@newtaction={0x18, 0x30, 0x101, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 09:10:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x16013cc7417ab95d) 09:10:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000e060102000000000000000000000000040007800900020073797a30000000000500010007"], 0x2c}}, 0x0) 09:10:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8983, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001540)={0x14, 0x0, 0xf}, 0x14}}, 0x0) 09:10:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xc}, [{}]}, 0x78) 09:10:27 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 09:10:27 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 09:10:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:27 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, &(0x7f00000007c0)={&(0x7f0000000780), 0x8}) 09:10:27 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 09:10:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xd}, [{}]}, 0x78) 09:10:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x21}}}}}) 09:10:28 executing program 0: select(0x0, 0x0, &(0x7f0000003040), &(0x7f0000003080), &(0x7f00000030c0)={0x0, 0xea60}) 09:10:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) 09:10:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:10:28 executing program 3: r0 = socket(0x2, 0x3, 0x5) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:10:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xe}, [{}]}, 0x78) 09:10:28 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000001a40)={0x2, 0x0, @empty}, &(0x7f0000001a80)=0x10) 09:10:28 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x139b42, 0x0) 09:10:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 09:10:29 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000040), 0x40) 09:10:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890d, 0x0) 09:10:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xf}, [{}]}, 0x78) 09:10:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2120) 09:10:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x1, 0x4, 0x0, @empty, @mcast1, 0x10, 0x40, 0xd, 0x7fff}}) 09:10:29 executing program 3: pipe(&(0x7f0000001680)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 09:10:29 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 09:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011fffffff000000000005"], 0x24}}, 0x0) 09:10:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x18}, [{}]}, 0x78) 09:10:30 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000001a00)) 09:10:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="170000000a0601"], 0x2c}}, 0x0) 09:10:30 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 09:10:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000680)={'gre0\x00', 0x0}) 09:10:31 executing program 5: pselect6(0x3d, &(0x7f0000000040), &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000000), 0x0) 09:10:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1a}, [{}]}, 0x78) [ 1345.747587][T22260] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 09:10:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003b00)={'batadv0\x00'}) 09:10:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r0]}) 09:10:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x14, 0x1}, 0x4c}}, 0x0) 09:10:31 executing program 4: select(0x0, 0x0, &(0x7f0000003040), 0x0, 0x0) 09:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x58, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x34, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) 09:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x3e, 0x0, &(0x7f00000033c0)) 09:10:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1b}, [{}]}, 0x78) 09:10:32 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={0x0}}, 0x0) 09:10:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX]}) 09:10:32 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001980)=""/90, &(0x7f0000001a00)=0x5a) 09:10:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x61) 09:10:32 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f0000000040), 0x40) 09:10:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xc0}, [{}]}, 0x78) 09:10:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x10002) 09:10:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 09:10:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8934, &(0x7f0000000680)={'tunl0\x00', 0x0}) 09:10:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) 09:10:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:10:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102}, @isdn, @l2tp={0x2, 0x0, @private}, 0x6, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='veth0_to_hsr\x00'}) 09:10:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xe0}, [{}]}, 0x78) 09:10:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}) 09:10:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @multicast1}, @ipx={0x4, 0x0, 0x0, "06c5f29a2c18"}, @hci}) 09:10:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback, 0x7f00}}) 09:10:34 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000040), 0x40) 09:10:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 09:10:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 09:10:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xf0}, [{}]}, 0x78) 09:10:34 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0)={0x0, 0xea60}) 09:10:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201}, 0x14}}, 0x0) 09:10:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="000100001a00010026bd7000fbdbdf251c008006fd02c801000000000c000900690b01ff", @ANYRES32, @ANYBLOB="05001a00000000000c00ed"], 0x100}}, 0x0) 09:10:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f00000033c0)) 09:10:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x0) 09:10:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xf8}, [{}]}, 0x78) 09:10:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/pid\x00') 09:10:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x8}, 0x40) [ 1350.401062][T22344] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1350.445442][T22345] ===================================================== [ 1350.452485][T22345] BUG: KMSAN: uninit-value in inet_diag_cmd_exact+0x67e/0xb40 [ 1350.459943][T22345] CPU: 1 PID: 22345 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 1350.468599][T22345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.478652][T22345] Call Trace: [ 1350.481943][T22345] dump_stack+0x21c/0x280 [ 1350.486267][T22345] kmsan_report+0xf7/0x1e0 [ 1350.490693][T22345] __msan_warning+0x58/0xa0 [ 1350.495202][T22345] inet_diag_cmd_exact+0x67e/0xb40 [ 1350.500328][T22345] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1350.506487][T22345] inet_diag_rcv_msg_compat+0x537/0x6c0 [ 1350.512044][T22345] ? inet_diag_unregister+0x130/0x130 [ 1350.517502][T22345] sock_diag_rcv_msg+0x24f/0x620 [ 1350.522446][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.527665][T22345] netlink_rcv_skb+0x6d7/0x7e0 [ 1350.532422][T22345] ? sock_diag_bind+0x180/0x180 [ 1350.537278][T22345] sock_diag_rcv+0x63/0x80 [ 1350.541691][T22345] netlink_unicast+0x11c8/0x1490 [ 1350.546622][T22345] ? diag_net_exit+0x90/0x90 [ 1350.551218][T22345] netlink_sendmsg+0x173a/0x1840 [ 1350.556162][T22345] ____sys_sendmsg+0xc82/0x1240 [ 1350.561013][T22345] ? netlink_getsockopt+0x17e0/0x17e0 [ 1350.566379][T22345] __sys_sendmsg+0x6d1/0x820 [ 1350.570981][T22345] ? kmsan_copy_to_user+0x81/0x90 [ 1350.576004][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.581197][T22345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.586997][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.592192][T22345] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1350.597470][T22345] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1350.603040][T22345] __do_fast_syscall_32+0x129/0x180 [ 1350.608245][T22345] do_fast_syscall_32+0x6a/0xc0 [ 1350.613106][T22345] do_SYSENTER_32+0x73/0x90 [ 1350.617608][T22345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1350.623932][T22345] RIP: 0023:0xf7f0a549 [ 1350.627993][T22345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1350.647596][T22345] RSP: 002b:00000000f55040cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1350.656005][T22345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200007c0 [ 1350.663975][T22345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.671950][T22345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.679917][T22345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1350.687877][T22345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.695856][T22345] [ 1350.698174][T22345] Uninit was created at: [ 1350.702411][T22345] kmsan_internal_poison_shadow+0x66/0xd0 [ 1350.708120][T22345] kmsan_slab_alloc+0x8a/0xe0 [ 1350.712785][T22345] __kmalloc_node_track_caller+0x9aa/0x12f0 [ 1350.718702][T22345] __alloc_skb+0x35f/0xb30 [ 1350.723112][T22345] netlink_sendmsg+0xdb9/0x1840 [ 1350.727950][T22345] ____sys_sendmsg+0xc82/0x1240 [ 1350.732787][T22345] __sys_sendmsg+0x6d1/0x820 [ 1350.737367][T22345] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1350.742657][T22345] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1350.748106][T22345] __do_fast_syscall_32+0x129/0x180 [ 1350.753295][T22345] do_fast_syscall_32+0x6a/0xc0 [ 1350.758145][T22345] do_SYSENTER_32+0x73/0x90 [ 1350.762643][T22345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1350.768959][T22345] ===================================================== [ 1350.775871][T22345] Disabling lock debugging due to kernel taint [ 1350.782013][T22345] Kernel panic - not syncing: panic_on_warn set ... [ 1350.788594][T22345] CPU: 1 PID: 22345 Comm: syz-executor.4 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 1350.798635][T22345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.808688][T22345] Call Trace: [ 1350.811976][T22345] dump_stack+0x21c/0x280 [ 1350.816304][T22345] panic+0x4d7/0xef7 [ 1350.820200][T22345] ? add_taint+0x17c/0x210 [ 1350.824614][T22345] kmsan_report+0x1df/0x1e0 [ 1350.829117][T22345] __msan_warning+0x58/0xa0 [ 1350.833619][T22345] inet_diag_cmd_exact+0x67e/0xb40 [ 1350.838734][T22345] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 1350.844903][T22345] inet_diag_rcv_msg_compat+0x537/0x6c0 [ 1350.850448][T22345] ? inet_diag_unregister+0x130/0x130 [ 1350.855810][T22345] sock_diag_rcv_msg+0x24f/0x620 [ 1350.860750][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.865944][T22345] netlink_rcv_skb+0x6d7/0x7e0 [ 1350.870698][T22345] ? sock_diag_bind+0x180/0x180 [ 1350.875545][T22345] sock_diag_rcv+0x63/0x80 [ 1350.879953][T22345] netlink_unicast+0x11c8/0x1490 [ 1350.884880][T22345] ? diag_net_exit+0x90/0x90 [ 1350.889468][T22345] netlink_sendmsg+0x173a/0x1840 [ 1350.894407][T22345] ____sys_sendmsg+0xc82/0x1240 [ 1350.899262][T22345] ? netlink_getsockopt+0x17e0/0x17e0 [ 1350.904626][T22345] __sys_sendmsg+0x6d1/0x820 [ 1350.909220][T22345] ? kmsan_copy_to_user+0x81/0x90 [ 1350.914265][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.919457][T22345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.925265][T22345] ? kmsan_get_metadata+0x116/0x180 [ 1350.930457][T22345] __se_compat_sys_sendmsg+0xa7/0xc0 [ 1350.935734][T22345] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 1350.941186][T22345] __do_fast_syscall_32+0x129/0x180 [ 1350.946421][T22345] do_fast_syscall_32+0x6a/0xc0 [ 1350.951272][T22345] do_SYSENTER_32+0x73/0x90 [ 1350.955779][T22345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1350.962089][T22345] RIP: 0023:0xf7f0a549 [ 1350.966146][T22345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1350.985735][T22345] RSP: 002b:00000000f55040cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1350.994136][T22345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200007c0 [ 1351.002118][T22345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1351.010078][T22345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.018033][T22345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1351.025990][T22345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.035205][T22345] Kernel Offset: disabled [ 1351.039540][T22345] Rebooting in 86400 seconds..